<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 21:40:54 +0000</lastBuildDate>
    <item>
      <title>200f16b5-03a6-4d5e-88d3-e5e05ea920f5</title>
      <link>https://vulnerability.circl.lu/sighting/200f16b5-03a6-4d5e-88d3-e5e05ea920f5/export</link>
      <description>{"uuid": "200f16b5-03a6-4d5e-88d3-e5e05ea920f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107824", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxiacjuyb42q", "content": "CVE-2026-107824 - x64dbg-mcp-server\nThe x64dbg-MCP Server plugin listens on all network interfaces and does not require a login, so anyone who can reach its default port can run debugger commands, attach to programs,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#duty1g #CVE #infosec", "creation_timestamp": "2026-10-10T00:30:06.145343Z"}</description>
      <content:encoded>{"uuid": "200f16b5-03a6-4d5e-88d3-e5e05ea920f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107824", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxiacjuyb42q", "content": "CVE-2026-107824 - x64dbg-mcp-server\nThe x64dbg-MCP Server plugin listens on all network interfaces and does not require a login, so anyone who can reach its default port can run debugger commands, attach to programs,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#duty1g #CVE #infosec", "creation_timestamp": "2026-10-10T00:30:06.145343Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/200f16b5-03a6-4d5e-88d3-e5e05ea920f5/export</guid>
      <pubDate>Sat, 10 Oct 2026 00:30:06 +0000</pubDate>
    </item>
    <item>
      <title>3338586c-7c2d-44dc-8d1e-2449b53cc717</title>
      <link>https://vulnerability.circl.lu/sighting/3338586c-7c2d-44dc-8d1e-2449b53cc717/export</link>
      <description>{"uuid": "3338586c-7c2d-44dc-8d1e-2449b53cc717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107824", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxhrnjum2t2q", "content": "\ud83d\udea8 CVE-2026-107824 \u2014 CVSS 9.3 CRITICAL\n\nx64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's fu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107824\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T20:07:49.209385Z"}</description>
      <content:encoded>{"uuid": "3338586c-7c2d-44dc-8d1e-2449b53cc717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107824", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxhrnjum2t2q", "content": "\ud83d\udea8 CVE-2026-107824 \u2014 CVSS 9.3 CRITICAL\n\nx64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's fu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107824\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T20:07:49.209385Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3338586c-7c2d-44dc-8d1e-2449b53cc717/export</guid>
      <pubDate>Fri, 09 Oct 2026 20:07:49 +0000</pubDate>
    </item>
    <item>
      <title>b8921d01-758e-40a7-b259-f10c4a373510</title>
      <link>https://vulnerability.circl.lu/sighting/b8921d01-758e-40a7-b259-f10c4a373510/export</link>
      <description>{"uuid": "b8921d01-758e-40a7-b259-f10c4a373510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107824", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117412227514970141", "content": "CVE-2026-107824 x64dbg-MCP Server exposes debugger operations to unauthenticated network clients x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated network client that can reach the default port, 9094 for x64 or 9095 for x32, can execute arbitrary x64dbg commands, attach to processes by PID, read and write debuggee memory, and write files to arbitrary paths. This issue is fixed in version 1.1.\nhttps://www.cve.org/CVERecord?id=CVE-2026-107824https://github.com/duty1g/x64dbg-mcp-server/security/advisories/GHSA-4478-h5jv-647mhttps://github.com/duty1g/x64dbg-mcp-server/security/advisories/GHSA-jgj3-97w2-9v9rhttps://github.com/duty1g/x64dbg-mcp-server/commit/1aad0f88b9c27233d11dbccf08ca415eb5f49203https://github.com/duty1g/x64dbg-mcp-server/commit/e1daba0038959f88d25ff3376b2a7f922ffeb448https://github.com/duty1g/x64dbg-mcp-server/releases/tag/1.0https://github.com/duty1g/x64dbg-mcp-server/releases/tag/v1.1#duty1g #x64dbg-mcp-server#CVE_2026_107824#bot", "creation_timestamp": "2026-10-09T17:53:33.479751Z"}</description>
      <content:encoded>{"uuid": "b8921d01-758e-40a7-b259-f10c4a373510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107824", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117412227514970141", "content": "CVE-2026-107824 x64dbg-MCP Server exposes debugger operations to unauthenticated network clients x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated network client that can reach the default port, 9094 for x64 or 9095 for x32, can execute arbitrary x64dbg commands, attach to processes by PID, read and write debuggee memory, and write files to arbitrary paths. This issue is fixed in version 1.1.\nhttps://www.cve.org/CVERecord?id=CVE-2026-107824https://github.com/duty1g/x64dbg-mcp-server/security/advisories/GHSA-4478-h5jv-647mhttps://github.com/duty1g/x64dbg-mcp-server/security/advisories/GHSA-jgj3-97w2-9v9rhttps://github.com/duty1g/x64dbg-mcp-server/commit/1aad0f88b9c27233d11dbccf08ca415eb5f49203https://github.com/duty1g/x64dbg-mcp-server/commit/e1daba0038959f88d25ff3376b2a7f922ffeb448https://github.com/duty1g/x64dbg-mcp-server/releases/tag/1.0https://github.com/duty1g/x64dbg-mcp-server/releases/tag/v1.1#duty1g #x64dbg-mcp-server#CVE_2026_107824#bot", "creation_timestamp": "2026-10-09T17:53:33.479751Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b8921d01-758e-40a7-b259-f10c4a373510/export</guid>
      <pubDate>Fri, 09 Oct 2026 17:53:33 +0000</pubDate>
    </item>
  </channel>
</rss>
