<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 18 Sep 2026 20:25:36 +0000</lastBuildDate>
    <item>
      <title>4add916e-c05a-4a81-b277-6f5ad6c9b3cb</title>
      <link>https://vulnerability.circl.lu/sighting/4add916e-c05a-4a81-b277-6f5ad6c9b3cb/export</link>
      <description>{"uuid": "4add916e-c05a-4a81-b277-6f5ad6c9b3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://t.me/VulnerabilityNews/44265", "content": "Hackers Start Exploiting Critical Langflow Vulnerability\n\nTracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.\nThe post Hackers Start Exploiting Critical Langflow Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/hackers-start-exploiting-critical-langflow-vulnerability/", "creation_timestamp": "2026-09-18T12:00:06.011459Z"}</description>
      <content:encoded>{"uuid": "4add916e-c05a-4a81-b277-6f5ad6c9b3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://t.me/VulnerabilityNews/44265", "content": "Hackers Start Exploiting Critical Langflow Vulnerability\n\nTracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.\nThe post Hackers Start Exploiting Critical Langflow Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/hackers-start-exploiting-critical-langflow-vulnerability/", "creation_timestamp": "2026-09-18T12:00:06.011459Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4add916e-c05a-4a81-b277-6f5ad6c9b3cb/export</guid>
      <pubDate>Fri, 18 Sep 2026 12:00:06 +0000</pubDate>
    </item>
    <item>
      <title>3236e03c-f93e-41c8-b94f-ee251c92b282</title>
      <link>https://vulnerability.circl.lu/sighting/3236e03c-f93e-41c8-b94f-ee251c92b282/export</link>
      <description>{"uuid": "3236e03c-f93e-41c8-b94f-ee251c92b282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://t.me/VulnerabilityNews/44253", "content": "Critical Langflow flaw exploited to steal OpenAI and AWS keys\n\nThreat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/", "creation_timestamp": "2026-09-18T12:00:05.964056Z"}</description>
      <content:encoded>{"uuid": "3236e03c-f93e-41c8-b94f-ee251c92b282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://t.me/VulnerabilityNews/44253", "content": "Critical Langflow flaw exploited to steal OpenAI and AWS keys\n\nThreat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/", "creation_timestamp": "2026-09-18T12:00:05.964056Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3236e03c-f93e-41c8-b94f-ee251c92b282/export</guid>
      <pubDate>Fri, 18 Sep 2026 12:00:05 +0000</pubDate>
    </item>
    <item>
      <title>de231479-8926-4b7f-be18-456de91fb574</title>
      <link>https://vulnerability.circl.lu/sighting/de231479-8926-4b7f-be18-456de91fb574/export</link>
      <description>{"uuid": "de231479-8926-4b7f-be18-456de91fb574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-18T00:00:04.545643Z"}</description>
      <content:encoded>{"uuid": "de231479-8926-4b7f-be18-456de91fb574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-18T00:00:04.545643Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/de231479-8926-4b7f-be18-456de91fb574/export</guid>
      <pubDate>Fri, 18 Sep 2026 00:00:04 +0000</pubDate>
    </item>
    <item>
      <title>74449144-b3f6-4553-a52a-70fba9a607ba</title>
      <link>https://vulnerability.circl.lu/sighting/74449144-b3f6-4553-a52a-70fba9a607ba/export</link>
      <description>{"uuid": "74449144-b3f6-4553-a52a-70fba9a607ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-17T00:00:05.337471Z"}</description>
      <content:encoded>{"uuid": "74449144-b3f6-4553-a52a-70fba9a607ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-17T00:00:05.337471Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/74449144-b3f6-4553-a52a-70fba9a607ba/export</guid>
      <pubDate>Thu, 17 Sep 2026 00:00:05 +0000</pubDate>
    </item>
    <item>
      <title>49500abf-2ca7-421b-8ab3-ec4b88d86530</title>
      <link>https://vulnerability.circl.lu/sighting/49500abf-2ca7-421b-8ab3-ec4b88d86530/export</link>
      <description>{"uuid": "49500abf-2ca7-421b-8ab3-ec4b88d86530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-16T00:00:05.348809Z"}</description>
      <content:encoded>{"uuid": "49500abf-2ca7-421b-8ab3-ec4b88d86530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-16T00:00:05.348809Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/49500abf-2ca7-421b-8ab3-ec4b88d86530/export</guid>
      <pubDate>Wed, 16 Sep 2026 00:00:05 +0000</pubDate>
    </item>
    <item>
      <title>bdd98d6f-037e-42d2-986e-8aadad363631</title>
      <link>https://vulnerability.circl.lu/sighting/bdd98d6f-037e-42d2-986e-8aadad363631/export</link>
      <description>{"uuid": "bdd98d6f-037e-42d2-986e-8aadad363631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-15T09:00:06.996010Z"}</description>
      <content:encoded>{"uuid": "bdd98d6f-037e-42d2-986e-8aadad363631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-15T09:00:06.996010Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bdd98d6f-037e-42d2-986e-8aadad363631/export</guid>
      <pubDate>Tue, 15 Sep 2026 09:00:06 +0000</pubDate>
    </item>
    <item>
      <title>30a4a4af-1dcb-47ae-bd48-caa42ad123ec</title>
      <link>https://vulnerability.circl.lu/sighting/30a4a4af-1dcb-47ae-bd48-caa42ad123ec/export</link>
      <description>{"uuid": "30a4a4af-1dcb-47ae-bd48-caa42ad123ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.195596Z"}</description>
      <content:encoded>{"uuid": "30a4a4af-1dcb-47ae-bd48-caa42ad123ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.195596Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/30a4a4af-1dcb-47ae-bd48-caa42ad123ec/export</guid>
      <pubDate>Sat, 12 Sep 2026 10:00:16 +0000</pubDate>
    </item>
    <item>
      <title>d7584e4d-e42d-40d4-9eea-b21423d955ea</title>
      <link>https://vulnerability.circl.lu/sighting/d7584e4d-e42d-40d4-9eea-b21423d955ea/export</link>
      <description>{"uuid": "d7584e4d-e42d-40d4-9eea-b21423d955ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:11.973972Z"}</description>
      <content:encoded>{"uuid": "d7584e4d-e42d-40d4-9eea-b21423d955ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:11.973972Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d7584e4d-e42d-40d4-9eea-b21423d955ea/export</guid>
      <pubDate>Fri, 11 Sep 2026 10:00:11 +0000</pubDate>
    </item>
    <item>
      <title>aa77ffbf-3b51-4a53-9414-653dbf1479a5</title>
      <link>https://vulnerability.circl.lu/sighting/aa77ffbf-3b51-4a53-9414-653dbf1479a5/export</link>
      <description>{"uuid": "aa77ffbf-3b51-4a53-9414-653dbf1479a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/theledgr.bsky.social/post/3muzzj2lbvn2t", "content": "CVE-2026-0768: pre-auth RCE in Langflow steals AI API keys. No login needed. Attack hits `/api/v1/run` with zero auth enforcement. Your competitors\u2019 senior engineers read this before standup. Come join them at TheLEDGR.io.\n\ntheledgr.io/join", "creation_timestamp": "2026-09-08T22:00:49.699609Z"}</description>
      <content:encoded>{"uuid": "aa77ffbf-3b51-4a53-9414-653dbf1479a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/theledgr.bsky.social/post/3muzzj2lbvn2t", "content": "CVE-2026-0768: pre-auth RCE in Langflow steals AI API keys. No login needed. Attack hits `/api/v1/run` with zero auth enforcement. Your competitors\u2019 senior engineers read this before standup. Come join them at TheLEDGR.io.\n\ntheledgr.io/join", "creation_timestamp": "2026-09-08T22:00:49.699609Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aa77ffbf-3b51-4a53-9414-653dbf1479a5/export</guid>
      <pubDate>Tue, 08 Sep 2026 22:00:49 +0000</pubDate>
    </item>
    <item>
      <title>051a0e9c-4d88-4936-9b08-cf303ff8e969</title>
      <link>https://vulnerability.circl.lu/sighting/051a0e9c-4d88-4936-9b08-cf303ff8e969/export</link>
      <description>{"uuid": "051a0e9c-4d88-4936-9b08-cf303ff8e969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0768", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/telnet/goodtech_telnet.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"MC \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in GoodTech Systems Telnet Server\\n          versions prior to 5.0.7. By sending an overly long string, an attacker can\\n          overwrite the buffer and control program execution.\", \"disclosure_date\": \"2005-03-15\", \"fullname\": \"exploit/windows/telnet/goodtech_telnet\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"GoodTech Telnet Server Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/telnet/goodtech_telnet.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/telnet/goodtech_telnet\", \"references\": [\"CVE-2005-0768\", \"OSVDB-14806\", \"BID-12815\"], \"rport\": 2380, \"session_types\": false, \"targets\": [\"Windows 2000 Pro English All\", \"Windows XP Pro SP0/SP1 English\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:35.857623Z"}</description>
      <content:encoded>{"uuid": "051a0e9c-4d88-4936-9b08-cf303ff8e969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0768", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/telnet/goodtech_telnet.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"MC \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in GoodTech Systems Telnet Server\\n          versions prior to 5.0.7. By sending an overly long string, an attacker can\\n          overwrite the buffer and control program execution.\", \"disclosure_date\": \"2005-03-15\", \"fullname\": \"exploit/windows/telnet/goodtech_telnet\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"GoodTech Telnet Server Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/telnet/goodtech_telnet.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/telnet/goodtech_telnet\", \"references\": [\"CVE-2005-0768\", \"OSVDB-14806\", \"BID-12815\"], \"rport\": 2380, \"session_types\": false, \"targets\": [\"Windows 2000 Pro English All\", \"Windows XP Pro SP0/SP1 English\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:35.857623Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/051a0e9c-4d88-4936-9b08-cf303ff8e969/export</guid>
      <pubDate>Tue, 08 Sep 2026 06:52:35 +0000</pubDate>
    </item>
  </channel>
</rss>
