<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 27 Sep 2026 06:38:49 +0000</lastBuildDate>
    <item>
      <title>21b38268-6617-4e8b-95f2-7ceffc2692cf</title>
      <link>https://vulnerability.circl.lu/sighting/21b38268-6617-4e8b-95f2-7ceffc2692cf/export</link>
      <description>{"uuid": "21b38268-6617-4e8b-95f2-7ceffc2692cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6nxosl2l", "content": "CVE-2026-100606 - flowise\nWhen Flowise is set up with single sign\u2011on, an email address used for an invitation can be used to log in without the invitation token. Anyone who can sign in to the same SSO\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:05.028608Z"}</description>
      <content:encoded>{"uuid": "21b38268-6617-4e8b-95f2-7ceffc2692cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6nxosl2l", "content": "CVE-2026-100606 - flowise\nWhen Flowise is set up with single sign\u2011on, an email address used for an invitation can be used to log in without the invitation token. Anyone who can sign in to the same SSO\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:05.028608Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/21b38268-6617-4e8b-95f2-7ceffc2692cf/export</guid>
      <pubDate>Sat, 26 Sep 2026 21:30:05 +0000</pubDate>
    </item>
    <item>
      <title>c8fdc87b-f28d-447d-8de5-28c1e847eeca</title>
      <link>https://vulnerability.circl.lu/sighting/c8fdc87b-f28d-447d-8de5-28c1e847eeca/export</link>
      <description>{"uuid": "c8fdc87b-f28d-447d-8de5-28c1e847eeca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo55r2q325", "content": "\ud83d\udea8 CVE-2026-100606 \u2014 CVSS 9.2 CRITICAL\n\nFlowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100606\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:07.077646Z"}</description>
      <content:encoded>{"uuid": "c8fdc87b-f28d-447d-8de5-28c1e847eeca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo55r2q325", "content": "\ud83d\udea8 CVE-2026-100606 \u2014 CVSS 9.2 CRITICAL\n\nFlowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100606\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:07.077646Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c8fdc87b-f28d-447d-8de5-28c1e847eeca/export</guid>
      <pubDate>Sat, 26 Sep 2026 16:07:07 +0000</pubDate>
    </item>
  </channel>
</rss>
