<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-22T10:50:11.646317+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9cb51eb-648a-4c87-be89-ab8563f5e0ea/export</id>
    <title>d9cb51eb-648a-4c87-be89-ab8563f5e0ea</title>
    <updated>2026-08-22T10:50:11.666883+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9cb51eb-648a-4c87-be89-ab8563f5e0ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkvb3a6zq2j", "content": "\ud83d\udea8 CVE-2026-76158 \u2014 CVSS 9.3 CRITICAL\n\nExternal Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76158\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T04:09:38.675547Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9cb51eb-648a-4c87-be89-ab8563f5e0ea/export"/>
    <published>2026-08-21T04:09:38.675547+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2d6e254c-591a-4802-9e74-21696c4121a4/export</id>
    <title>2d6e254c-591a-4802-9e74-21696c4121a4</title>
    <updated>2026-08-22T10:50:11.669714+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2d6e254c-591a-4802-9e74-21696c4121a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4gox73pk2mqpr", "content": "CVE-2026-76158 - Datiphy Data Management Center - External Control of File Name or Path\nCVE ID : CVE-2026-76158\n \n Published : Aug. 21, 2026, 3:16 a.m. | 39\u00a0minutes ago\n \n Description : External Control of File Name or Path in the upload API endpoint of Datiphy Data Management...", "creation_timestamp": "2026-08-21T04:07:24.771008Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2d6e254c-591a-4802-9e74-21696c4121a4/export"/>
    <published>2026-08-21T04:07:24.771008+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/59168aa5-c217-427e-a10e-6b6605f45901/export</id>
    <title>59168aa5-c217-427e-a10e-6b6605f45901</title>
    <updated>2026-08-22T10:50:11.669862+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "59168aa5-c217-427e-a10e-6b6605f45901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtku63r6uh2u", "content": "CVE-2026-76158 - data management center\nThe upload feature in Datiphy Data Management Center versions 8.3.0 through 8.5.1 can be tricked into writing files to locations you didn't intend. This could let a remote\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#datiphy #CVE #infosec", "creation_timestamp": "2026-08-21T03:50:05.223047Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/59168aa5-c217-427e-a10e-6b6605f45901/export"/>
    <published>2026-08-21T03:50:05.223047+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/43466339-74c5-41b0-91b3-79d0762f7677/export</id>
    <title>43466339-74c5-41b0-91b3-79d0762f7677</title>
    <updated>2026-08-22T10:50:11.669983+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "43466339-74c5-41b0-91b3-79d0762f7677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76158", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtkrfdbwjx2w", "content": "CRITICAL: Datiphy Data Management Center 8.3.0 vulnerable (CVE-2026-76158). Unauthenticated attackers can write files anywhere via upload API. Restrict access &amp;amp; monitor uploads now. https://radar.offseq.com/threat/cve-2026-76158-cwe-73-external-control-of-file-name-or-path-in-datiphy-inc-data-man...", "creation_timestamp": "2026-08-21T03:00:27.505892Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/43466339-74c5-41b0-91b3-79d0762f7677/export"/>
    <published>2026-08-21T03:00:27.505892+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c4107ddc-a58d-4463-bbb5-3c32cbad64da/export</id>
    <title>c4107ddc-a58d-4463-bbb5-3c32cbad64da</title>
    <updated>2026-08-22T10:50:11.670098+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c4107ddc-a58d-4463-bbb5-3c32cbad64da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76158", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117131262323183747", "content": "CVE-2026-76158: Datiphy Data Management Center 8.3.0 faces CRITICAL vuln (CVSS 9.3) \u2014 upload API allows unauthenticated file writes anywhere via path traversal \ud83d\uddc2\ufe0f. Restrict access &amp;amp; monitor uploads until patch. https://radar.offseq.com/threat/cve-2026-76158-cwe-73-external-control-of-file-name-or-path-in-datiphy-inc-data-management-center-6c6f4960c6201d48 #OffSeq #Vuln #Datiphy #CVE202676158", "creation_timestamp": "2026-08-21T03:00:25.137508Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c4107ddc-a58d-4463-bbb5-3c32cbad64da/export"/>
    <published>2026-08-21T03:00:25.137508+00:00</published>
  </entry>
</feed>
