<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-18T03:08:33.143185+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f2cfa758-7c8f-45c1-8360-1de2cc883e26/export</id>
    <title>f2cfa758-7c8f-45c1-8360-1de2cc883e26</title>
    <updated>2026-09-18T03:08:33.164083+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f2cfa758-7c8f-45c1-8360-1de2cc883e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92578", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoezgasdb2g", "content": "CVE-2026-92578 - avideo\nAVideo stores password hashes in a way that, if someone obtains those hashes, they can use them to sign in as any user without knowing the actual passwords. This means an attacker who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-17T00:20:04.395600Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f2cfa758-7c8f-45c1-8360-1de2cc883e26/export"/>
    <published>2026-09-17T00:20:04.395600+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f11742bd-8744-4797-a11d-cb8f24732246/export</id>
    <title>f11742bd-8744-4797-a11d-cb8f24732246</title>
    <updated>2026-09-18T03:08:33.167171+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f11742bd-8744-4797-a11d-cb8f24732246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoegpr4yb24", "content": "\ud83d\udea8 CVE-2026-92578 \u2014 CVSS 9.2 CRITICAL\n\nWWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92578\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T00:09:36.590509Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f11742bd-8744-4797-a11d-cb8f24732246/export"/>
    <published>2026-09-17T00:09:36.590509+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a52bcc25-73b1-4e8d-8032-1d41f8c80eed/export</id>
    <title>a52bcc25-73b1-4e8d-8032-1d41f8c80eed</title>
    <updated>2026-09-18T03:08:33.167306+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a52bcc25-73b1-4e8d-8032-1d41f8c80eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92578", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvodwnk63f2b", "content": "WWBN AVideo \u226429.0 hit by CRITICAL auth bypass (CVE-2026-92578): attackers with a password hash can access any account. Restrict hash access, monitor systems, and check vendor advisories. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq...", "creation_timestamp": "2026-09-17T00:00:39.325696Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a52bcc25-73b1-4e8d-8032-1d41f8c80eed/export"/>
    <published>2026-09-17T00:00:39.325696+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/11d6b433-7be2-4cdc-9348-200fa236bb69/export</id>
    <title>11d6b433-7be2-4cdc-9348-200fa236bb69</title>
    <updated>2026-09-18T03:08:33.167409+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "11d6b433-7be2-4cdc-9348-200fa236bb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92578", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117283437631671586", "content": "CVE-2026-92578: CRITICAL auth bypass in WWBN AVideo (\u226429.0) allows attackers with stolen password hashes to log in as any user \u2014 no password needed. Patch pending \u2014 restrict hash access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq #CVE202692578 #authentication #infosec", "creation_timestamp": "2026-09-17T00:00:36.148183Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/11d6b433-7be2-4cdc-9348-200fa236bb69/export"/>
    <published>2026-09-17T00:00:36.148183+00:00</published>
  </entry>
</feed>
