<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 20 Oct 2026 10:37:56 +0000</lastBuildDate>
    <item>
      <title>e27139cc-633f-4686-af49-a2c3c23181db</title>
      <link>https://vulnerability.circl.lu/sighting/e27139cc-633f-4686-af49-a2c3c23181db/export</link>
      <description>{"uuid": "e27139cc-633f-4686-af49-a2c3c23181db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102037", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117441596157362659", "content": "CVE-2026-102037 Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102037https://supportportal.juniper.net/JSA112186#juniper #JuniperNetworks #JunosOS#CVE_2026_102037#bot", "creation_timestamp": "2026-10-14T22:22:23.620850Z"}</description>
      <content:encoded>{"uuid": "e27139cc-633f-4686-af49-a2c3c23181db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102037", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117441596157362659", "content": "CVE-2026-102037 Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server.\nhttps://www.cve.org/CVERecord?id=CVE-2026-102037https://supportportal.juniper.net/JSA112186#juniper #JuniperNetworks #JunosOS#CVE_2026_102037#bot", "creation_timestamp": "2026-10-14T22:22:23.620850Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e27139cc-633f-4686-af49-a2c3c23181db/export</guid>
      <pubDate>Wed, 14 Oct 2026 22:22:23 +0000</pubDate>
    </item>
    <item>
      <title>5b7660c9-e3c6-49a5-931b-ea10c3d8ac26</title>
      <link>https://vulnerability.circl.lu/sighting/5b7660c9-e3c6-49a5-931b-ea10c3d8ac26/export</link>
      <description>{"uuid": "5b7660c9-e3c6-49a5-931b-ea10c3d8ac26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-102037", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2112", "content": "", "creation_timestamp": "2026-10-14T21:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "5b7660c9-e3c6-49a5-931b-ea10c3d8ac26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-102037", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2112", "content": "", "creation_timestamp": "2026-10-14T21:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5b7660c9-e3c6-49a5-931b-ea10c3d8ac26/export</guid>
      <pubDate>Wed, 14 Oct 2026 21:00:00 +0000</pubDate>
    </item>
    <item>
      <title>68354fa9-9a5e-4371-b81b-b2973bb92fc2</title>
      <link>https://vulnerability.circl.lu/sighting/68354fa9-9a5e-4371-b81b-b2973bb92fc2/export</link>
      <description>{"uuid": "68354fa9-9a5e-4371-b81b-b2973bb92fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102037", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxu7n5ton22n", "content": "CVE-2026-102037 - junos os\nThe threat\u2011feed feature in Junos OS on SRX firewalls can be tricked by a malicious response from the custom URL you configure. An attacker on the network could then change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#junosos #junipernetworks #CVE #infosec", "creation_timestamp": "2026-10-14T18:50:05.921344Z"}</description>
      <content:encoded>{"uuid": "68354fa9-9a5e-4371-b81b-b2973bb92fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102037", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxu7n5ton22n", "content": "CVE-2026-102037 - junos os\nThe threat\u2011feed feature in Junos OS on SRX firewalls can be tricked by a malicious response from the custom URL you configure. An attacker on the network could then change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#junosos #junipernetworks #CVE #infosec", "creation_timestamp": "2026-10-14T18:50:05.921344Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/68354fa9-9a5e-4371-b81b-b2973bb92fc2/export</guid>
      <pubDate>Wed, 14 Oct 2026 18:50:05 +0000</pubDate>
    </item>
    <item>
      <title>046a130e-8acd-46a1-a3dd-73a21281918e</title>
      <link>https://vulnerability.circl.lu/sighting/046a130e-8acd-46a1-a3dd-73a21281918e/export</link>
      <description>{"uuid": "046a130e-8acd-46a1-a3dd-73a21281918e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102037", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxu5grkyau22", "content": "\ud83d\udea8 CVE-2026-102037 \u2014 CVSS 9.2 CRITICAL\n\nAn XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102037\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-14T18:10:43.980373Z"}</description>
      <content:encoded>{"uuid": "046a130e-8acd-46a1-a3dd-73a21281918e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102037", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxu5grkyau22", "content": "\ud83d\udea8 CVE-2026-102037 \u2014 CVSS 9.2 CRITICAL\n\nAn XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102037\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-14T18:10:43.980373Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/046a130e-8acd-46a1-a3dd-73a21281918e/export</guid>
      <pubDate>Wed, 14 Oct 2026 18:10:43 +0000</pubDate>
    </item>
  </channel>
</rss>
