<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-24T11:32:02.397143+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/11f7151e-e36b-4059-b575-11da51aaa948/export</id>
    <title>11f7151e-e36b-4059-b575-11da51aaa948</title>
    <updated>2026-09-24T11:32:02.426907+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "11f7151e-e36b-4059-b575-11da51aaa948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94501", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw5wvr4ske2o", "content": "CVE-2026-94501 - jsherp\nIn jshERP versions up to 3.6, a logged\u2011in user can use the system\u2019s create, edit and delete functions to modify the role assignments of any account without proper checks. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsherp #jishenghua #CVE #infosec", "creation_timestamp": "2026-09-23T04:50:05.052999Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/11f7151e-e36b-4059-b575-11da51aaa948/export"/>
    <published>2026-09-23T04:50:05.052999+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/79c08078-3122-4a57-99a7-2356a8a728f0/export</id>
    <title>79c08078-3122-4a57-99a7-2356a8a728f0</title>
    <updated>2026-09-24T11:32:02.429209+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "79c08078-3122-4a57-99a7-2356a8a728f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94501", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2ivod5ko2b", "content": "\ud83d\udfe0 CVE-2026-94501 - High (8.8)\n\njshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness CRUD endpoi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94501/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-21T20:01:31.733432Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/79c08078-3122-4a57-99a7-2356a8a728f0/export"/>
    <published>2026-09-21T20:01:31.733432+00:00</published>
  </entry>
</feed>
