<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-22T10:50:04.084127+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/40878b59-2d0c-4e5e-9332-497dc3e75d34/export</id>
    <title>40878b59-2d0c-4e5e-9332-497dc3e75d34</title>
    <updated>2026-08-22T10:50:04.109346+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "40878b59-2d0c-4e5e-9332-497dc3e75d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76156", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtkwgdj3rd2y", "content": "Datiphy Data Management Center (v8.3.0 \u2013 8.5.1) faces a CRITICAL OS command injection flaw (CVE-2026-76156). No patch \u2014 restrict admin access, monitor closely. https://radar.offseq.com/threat/cve-2026-76156-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-af4747...", "creation_timestamp": "2026-08-21T04:30:29.785691Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/40878b59-2d0c-4e5e-9332-497dc3e75d34/export"/>
    <published>2026-08-21T04:30:29.785691+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8e2bb490-2b7f-4978-b736-e9645674fc2a/export</id>
    <title>8e2bb490-2b7f-4978-b736-e9645674fc2a</title>
    <updated>2026-08-22T10:50:04.111736+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8e2bb490-2b7f-4978-b736-e9645674fc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76156", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117131616384373023", "content": "CVE-2026-76156: CRITICAL OS command injection in Datiphy Data Management Center (8.3.0 \u2013 8.5.1). Authenticated admins can run root OS commands via API. No patch yet \u2014 restrict admin access, monitor activity. https://radar.offseq.com/threat/cve-2026-76156-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-af474791202edb0c #OffSeq #CVE202676156 #Vuln #Infosec", "creation_timestamp": "2026-08-21T04:30:27.689789Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8e2bb490-2b7f-4978-b736-e9645674fc2a/export"/>
    <published>2026-08-21T04:30:27.689789+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fc964656-4e32-4ca5-859b-bde880516734/export</id>
    <title>fc964656-4e32-4ca5-859b-bde880516734</title>
    <updated>2026-08-22T10:50:04.111907+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fc964656-4e32-4ca5-859b-bde880516734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76156", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkvasxp5y2j", "content": "\ud83d\udea8 CVE-2026-76156 \u2014 CVSS 9.4 CRITICAL\n\nOS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76156\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T04:09:30.479450Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fc964656-4e32-4ca5-859b-bde880516734/export"/>
    <published>2026-08-21T04:09:30.479450+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dd6d32e5-6094-4b9d-8766-5f9ae8675e36/export</id>
    <title>dd6d32e5-6094-4b9d-8766-5f9ae8675e36</title>
    <updated>2026-08-22T10:50:04.112039+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dd6d32e5-6094-4b9d-8766-5f9ae8675e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76156", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkqawfe3o2e", "content": "CVE-2026-76156 - data management center\nVersions of Datiphy Data Management Center from 8.3.0 to 8.5.1 let a signed\u2011in administrator run any command on the server, giving them full control over the machine. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#datiphy #CVE #infosec", "creation_timestamp": "2026-08-21T02:40:04.969680Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dd6d32e5-6094-4b9d-8766-5f9ae8675e36/export"/>
    <published>2026-08-21T02:40:04.969680+00:00</published>
  </entry>
</feed>
