<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-18T15:40:42.520925+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb33f8ac-60e6-45cf-9d7a-649ab0f430d6/export</id>
    <title>fb33f8ac-60e6-45cf-9d7a-649ab0f430d6</title>
    <updated>2026-09-18T15:40:42.554016+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb33f8ac-60e6-45cf-9d7a-649ab0f430d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67101", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvs4mso5pi2a", "content": "HCL BigFix Service Management v23 hit by CRITICAL SSRF (CVE-2026-67101, CVSS 9.3). No patch \u2014 limit access &amp;amp; monitor for internal search abuse. Details: https://radar.offseq.com/threat/cve-2026-67101-cwe-918-server-side-request-forgery-ssrf-in-hcl-software-hcl-bigfix-service-management-ca42c9cfa8...", "creation_timestamp": "2026-09-18T12:00:31.259917Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb33f8ac-60e6-45cf-9d7a-649ab0f430d6/export"/>
    <published>2026-09-18T12:00:31.259917+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/30588bfb-842e-4da3-999d-242e1b682c23/export</id>
    <title>30588bfb-842e-4da3-999d-242e1b682c23</title>
    <updated>2026-09-18T15:40:42.556406+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "30588bfb-842e-4da3-999d-242e1b682c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67101", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117291930617246557", "content": "CVE-2026-67101: CRITICAL SSRF in HCL BigFix Service Management v23 (CVSS 9.3). Unauthenticated attackers can access internal systems. No patch yet \u2014 restrict service and monitor requests. https://radar.offseq.com/threat/cve-2026-67101-cwe-918-server-side-request-forgery-ssrf-in-hcl-software-hcl-bigfix-service-management-ca42c9cfa875105e #OffSeq #SSRF #Vuln #Infosec", "creation_timestamp": "2026-09-18T12:00:29.213233Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/30588bfb-842e-4da3-999d-242e1b682c23/export"/>
    <published>2026-09-18T12:00:29.213233+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/230a9cb6-250b-40e4-a4e8-244ba5caf192/export</id>
    <title>230a9cb6-250b-40e4-a4e8-244ba5caf192</title>
    <updated>2026-09-18T15:40:42.556612+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "230a9cb6-250b-40e4-a4e8-244ba5caf192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67101", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvrwcbzrnf24", "content": "\ud83d\udea8 CVE-2026-67101 \u2014 CVSS 9.3 CRITICAL\n\nHCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its sear...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67101\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T10:07:14.573645Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/230a9cb6-250b-40e4-a4e8-244ba5caf192/export"/>
    <published>2026-09-18T10:07:14.573645+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c564492-f85b-4939-9bf7-d245a3b3b4bf/export</id>
    <title>3c564492-f85b-4939-9bf7-d245a3b3b4bf</title>
    <updated>2026-09-18T15:40:42.556766+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c564492-f85b-4939-9bf7-d245a3b3b4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67101", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvrqukkm2x2j", "content": "CVE-2026-67101 - hcl bigfix service management\nThe search feature in HCL BigFix Service Management lets a remote user cause the server to reach internal network resources that are not exposed to the Internet. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hcl #CVE #infosec", "creation_timestamp": "2026-09-18T08:30:05.246731Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c564492-f85b-4939-9bf7-d245a3b3b4bf/export"/>
    <published>2026-09-18T08:30:05.246731+00:00</published>
  </entry>
</feed>
