<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T22:39:29.605313+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2606b543-42b8-42fe-8555-0ec279e47160/export</id>
    <title>2606b543-42b8-42fe-8555-0ec279e47160</title>
    <updated>2026-09-14T22:39:29.629834+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2606b543-42b8-42fe-8555-0ec279e47160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztceznea2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attac\u2026\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:42.906613Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2606b543-42b8-42fe-8555-0ec279e47160/export"/>
    <published>2026-09-08T20:09:42.906613+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ef2e8f2d-57c4-4853-9c70-22de4a3c9c34/export</id>
    <title>ef2e8f2d-57c4-4853-9c70-22de4a3c9c34</title>
    <updated>2026-09-14T22:39:29.631685+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ef2e8f2d-57c4-4853-9c70-22de4a3c9c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvstoz52z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 Unauthenticated Webhook Message Injection\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:08:59.801690Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ef2e8f2d-57c4-4853-9c70-22de4a3c9c34/export"/>
    <published>2026-09-08T19:08:59.801690+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/16fc360b-4756-4970-b469-419cc04a38a1/export</id>
    <title>16fc360b-4756-4970-b469-419cc04a38a1</title>
    <updated>2026-09-14T22:39:29.631778+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "16fc360b-4756-4970-b469-419cc04a38a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphxefwnt2w", "content": "CVE-2026-85667 - xiaobei\nThe Xiaobei application (versions up to 5.5.2) accepts incoming messages without checking who sent them. This allows anyone on the internet to post messages that the system will\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xiaobei #teamwiseflow #CVE #infosec", "creation_timestamp": "2026-09-04T17:20:04.896906Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/16fc360b-4756-4970-b469-419cc04a38a1/export"/>
    <published>2026-09-04T17:20:04.896906+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/654e3982-9db7-4cf7-9333-7e8b2d721f90/export</id>
    <title>654e3982-9db7-4cf7-9333-7e8b2d721f90</title>
    <updated>2026-09-14T22:39:29.631850+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "654e3982-9db7-4cf7-9333-7e8b2d721f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwtnnhg2d", "content": "\ud83d\udea8 CVE-2026-85667 \u2014 CVSS 9.3 CRITICAL\n\nxiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85667\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:12.041689Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/654e3982-9db7-4cf7-9333-7e8b2d721f90/export"/>
    <published>2026-09-04T16:08:12.041689+00:00</published>
  </entry>
</feed>
