<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-07T17:19:21.276229+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/57e91388-6c06-4141-9ad6-6595528a17a0/export</id>
    <title>57e91388-6c06-4141-9ad6-6595528a17a0</title>
    <updated>2026-10-07T17:19:21.303259+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "57e91388-6c06-4141-9ad6-6595528a17a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxbs5wwe5f2p", "content": "Kritieke kwetsbaarheid ontdekt in DataDirect Autonomous REST Connector AI Model \n\nEen ernstige kwetsbaarheid, bekend als CVE-2026-91140, is aangetroffen in agents van DataDirect Autonomous REST Connector AI Model Generator. Deze kwetsbaarheid maakt onbevoegde uitvoering van willekeurige best...", "creation_timestamp": "2026-10-07T11:01:01.575752Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/57e91388-6c06-4141-9ad6-6595528a17a0/export"/>
    <published>2026-10-07T11:01:01.575752+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/522d7c6e-6c7c-4966-9e99-e98332169833/export</id>
    <title>522d7c6e-6c7c-4966-9e99-e98332169833</title>
    <updated>2026-10-07T17:19:21.305953+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "522d7c6e-6c7c-4966-9e99-e98332169833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbi2hupts2n", "content": "CVE-2026-91140 - autonomous rest connector genai agents\nThe Autonomous REST Connector GenAI Agents version 2.0 can be tricked by a specially crafted API description file to run any command on the developer\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#progress #CVE #infosec", "creation_timestamp": "2026-10-07T08:00:07.313357Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/522d7c6e-6c7c-4966-9e99-e98332169833/export"/>
    <published>2026-10-07T08:00:07.313357+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cd9e8b4e-5153-467e-802e-5d5bed28205d/export</id>
    <title>cd9e8b4e-5153-467e-802e-5d5bed28205d</title>
    <updated>2026-10-07T17:19:21.306345+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cd9e8b4e-5153-467e-802e-5d5bed28205d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7sstcncb2z", "content": "\ud83d\udea8 CVE-2026-91140 \u2014 CVSS 9.6 CRITICAL\n\nAn OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress So...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91140\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T16:07:22.668674Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cd9e8b4e-5153-467e-802e-5d5bed28205d/export"/>
    <published>2026-10-06T16:07:22.668674+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c62e0c40-25fc-4ce1-9560-102ce26ac724/export</id>
    <title>c62e0c40-25fc-4ce1-9560-102ce26ac724</title>
    <updated>2026-10-07T17:19:21.306471+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c62e0c40-25fc-4ce1-9560-102ce26ac724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7mg2r35q2t", "content": "Progress DataDirect vulnerability CVE-2026-91140 enables command injection via crafted OpenAPI files in AI agents. Pull version 2.1 now.\n\n#Progress #DataDirect #CVE202691140 #CommandInjection #AIAgents #OpenAPI #DevSecOps #Vulnerability", "creation_timestamp": "2026-10-06T14:12:51.920363Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c62e0c40-25fc-4ce1-9560-102ce26ac724/export"/>
    <published>2026-10-06T14:12:51.920363+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/575a87d1-9caa-4643-8246-205f0cc6a5a6/export</id>
    <title>575a87d1-9caa-4643-8246-205f0cc6a5a6</title>
    <updated>2026-10-07T17:19:21.306574+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "575a87d1-9caa-4643-8246-205f0cc6a5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-1005", "content": "", "creation_timestamp": "2026-10-06T12:42:39.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/575a87d1-9caa-4643-8246-205f0cc6a5a6/export"/>
    <published>2026-10-06T12:42:39+00:00</published>
  </entry>
</feed>
