https://vulnerability.circl.lu/sightings/feed 2026-09-19T06:42:11.859191+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8bdbb12d-8f99-40fe-9a50-833da8e006d2/export 2026-09-19T06:42:11.880795+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8bdbb12d-8f99-40fe-9a50-833da8e006d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75170", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvck5r2qsc2o", "content": "CVE-2026-75170: Unauthenticated XSS in HubCore 14.1.1 via /loginController/doLogin language param. CVSS N/A, no patch yet. Attackers can inject arbitrary JS. Audit exposure and restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75170/ #CVE #infosec #XSS", "creation_timestamp": "2026-09-12T07:20:02.264259Z"} 2026-09-12T07:20:02.264259+00:00 https://vulnerability.circl.lu/sighting/3cc06dfb-a5ab-49b0-ad9c-6e4a6b4acce9/export 2026-09-19T06:42:11.882010+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3cc06dfb-a5ab-49b0-ad9c-6e4a6b4acce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75170", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117256814743157528", "content": "CVE-2026-75170: Unauthenticated XSS in HubCore 14.1.1 via /loginController/doLogin language param. CVSS N/A, no patch yet. Attackers can inject arbitrary JS. Audit exposure and restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75170/ #CVE #infosec #XSS", "creation_timestamp": "2026-09-12T07:10:10.711757Z"} 2026-09-12T07:10:10.711757+00:00