<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T15:15:14.238515+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cccabeb1-f8fe-49a1-8b9b-336eda1831fe/export</id>
    <title>cccabeb1-f8fe-49a1-8b9b-336eda1831fe</title>
    <updated>2026-10-08T15:15:14.266705+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cccabeb1-f8fe-49a1-8b9b-336eda1831fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73278", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcxkcptta2o", "content": "CVE-2026-73278 - gitea\nWhen people sign in to Gitea using an external service like OAuth or OpenID Connect, the system can skip the required security key check if that is the only two\u2011factor method set up. An attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitea #CVE #infosec", "creation_timestamp": "2026-10-07T22:10:05.465091Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cccabeb1-f8fe-49a1-8b9b-336eda1831fe/export"/>
    <published>2026-10-07T22:10:05.465091+00:00</published>
  </entry>
</feed>
