<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 16:33:09 +0000</lastBuildDate>
    <item>
      <title>f5421494-18fd-498a-a070-7efac1134784</title>
      <link>https://vulnerability.circl.lu/sighting/f5421494-18fd-498a-a070-7efac1134784/export</link>
      <description>{"uuid": "f5421494-18fd-498a-a070-7efac1134784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105110", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxefx67qvd2x", "content": "Iskratel Innbox GPON ONT: CVE-2026-105110 (CRITICAL, 9.8 CVSS) enables unauthenticated remote OS command injection as root. Restrict access, monitor login.xgi, await patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-...", "creation_timestamp": "2026-10-08T12:00:29.059741Z"}</description>
      <content:encoded>{"uuid": "f5421494-18fd-498a-a070-7efac1134784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105110", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxefx67qvd2x", "content": "Iskratel Innbox GPON ONT: CVE-2026-105110 (CRITICAL, 9.8 CVSS) enables unauthenticated remote OS command injection as root. Restrict access, monitor login.xgi, await patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-...", "creation_timestamp": "2026-10-08T12:00:29.059741Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f5421494-18fd-498a-a070-7efac1134784/export</guid>
      <pubDate>Thu, 08 Oct 2026 12:00:29 +0000</pubDate>
    </item>
    <item>
      <title>70ec86a1-7df2-4979-8bae-515c0e80c9dd</title>
      <link>https://vulnerability.circl.lu/sighting/70ec86a1-7df2-4979-8bae-515c0e80c9dd/export</link>
      <description>{"uuid": "70ec86a1-7df2-4979-8bae-515c0e80c9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105110", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117405176710830698", "content": "CVE-2026-105110 (CRITICAL, CVSS 9.8): Iskratel Innbox GPON ONT devices have an OS command injection flaw in login.xgi. Remote, unauthenticated code execution as root possible. Restrict access &amp;amp; monitor until patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-2e83a9c5703badaa #OffSeq #infosec #zeroday #vuln", "creation_timestamp": "2026-10-08T12:00:27.049978Z"}</description>
      <content:encoded>{"uuid": "70ec86a1-7df2-4979-8bae-515c0e80c9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105110", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117405176710830698", "content": "CVE-2026-105110 (CRITICAL, CVSS 9.8): Iskratel Innbox GPON ONT devices have an OS command injection flaw in login.xgi. Remote, unauthenticated code execution as root possible. Restrict access &amp;amp; monitor until patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-2e83a9c5703badaa #OffSeq #infosec #zeroday #vuln", "creation_timestamp": "2026-10-08T12:00:27.049978Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/70ec86a1-7df2-4979-8bae-515c0e80c9dd/export</guid>
      <pubDate>Thu, 08 Oct 2026 12:00:27 +0000</pubDate>
    </item>
    <item>
      <title>b0b455f8-8378-4ba9-bc3a-e02a49a01459</title>
      <link>https://vulnerability.circl.lu/sighting/b0b455f8-8378-4ba9-bc3a-e02a49a01459/export</link>
      <description>{"uuid": "b0b455f8-8378-4ba9-bc3a-e02a49a01459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105110", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxebzc2vfh2z", "content": "CVE-2026-105110 - innbox\nThe login page on Iskratel Innbox GPON devices can be tricked into running any command without needing to log in. This lets an outsider gain full control of the device. Apply the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#innbox #iskratel #CVE #infosec", "creation_timestamp": "2026-10-08T10:50:04.686360Z"}</description>
      <content:encoded>{"uuid": "b0b455f8-8378-4ba9-bc3a-e02a49a01459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105110", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxebzc2vfh2z", "content": "CVE-2026-105110 - innbox\nThe login page on Iskratel Innbox GPON devices can be tricked into running any command without needing to log in. This lets an outsider gain full control of the device. Apply the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#innbox #iskratel #CVE #infosec", "creation_timestamp": "2026-10-08T10:50:04.686360Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b0b455f8-8378-4ba9-bc3a-e02a49a01459/export</guid>
      <pubDate>Thu, 08 Oct 2026 10:50:04 +0000</pubDate>
    </item>
    <item>
      <title>acd492b1-45ef-4811-844a-90f641b47f84</title>
      <link>https://vulnerability.circl.lu/sighting/acd492b1-45ef-4811-844a-90f641b47f84/export</link>
      <description>{"uuid": "acd492b1-45ef-4811-844a-90f641b47f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105110", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxe7msct3e2l", "content": "\ud83d\udea8 CVE-2026-105110 \u2014 CVSS 9.3 CRITICAL\n\nOS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105110\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T10:07:18.151219Z"}</description>
      <content:encoded>{"uuid": "acd492b1-45ef-4811-844a-90f641b47f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105110", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxe7msct3e2l", "content": "\ud83d\udea8 CVE-2026-105110 \u2014 CVSS 9.3 CRITICAL\n\nOS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105110\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T10:07:18.151219Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/acd492b1-45ef-4811-844a-90f641b47f84/export</guid>
      <pubDate>Thu, 08 Oct 2026 10:07:18 +0000</pubDate>
    </item>
  </channel>
</rss>
