<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 15 Sep 2026 20:34:33 +0000</lastBuildDate>
    <item>
      <title>64a7e500-d5e8-4230-88aa-61e64cf91ebe</title>
      <link>https://vulnerability.circl.lu/sighting/64a7e500-d5e8-4230-88aa-61e64cf91ebe/export</link>
      <description>{"uuid": "64a7e500-d5e8-4230-88aa-61e64cf91ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5f5qgq2h", "content": "Daily IT Security Digest \u2014 2026-09-09\nrecommendation is to restrict local administrative access on affected HP systems.\n   Source: [Radar/Offseq](https://radar.offseq.com/threat/cve-2026-12855) \u00b7 [Mastodon (@offseq)](https://infosec.exchange/@offseq/117239200044346852)", "creation_timestamp": "2026-09-09T05:03:47.966353Z"}</description>
      <content:encoded>{"uuid": "64a7e500-d5e8-4230-88aa-61e64cf91ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5f5qgq2h", "content": "Daily IT Security Digest \u2014 2026-09-09\nrecommendation is to restrict local administrative access on affected HP systems.\n   Source: [Radar/Offseq](https://radar.offseq.com/threat/cve-2026-12855) \u00b7 [Mastodon (@offseq)](https://infosec.exchange/@offseq/117239200044346852)", "creation_timestamp": "2026-09-09T05:03:47.966353Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/64a7e500-d5e8-4230-88aa-61e64cf91ebe/export</guid>
      <pubDate>Wed, 09 Sep 2026 05:03:47 +0000</pubDate>
    </item>
    <item>
      <title>a623c559-f7e9-4fe9-8b40-61bd36e34b13</title>
      <link>https://vulnerability.circl.lu/sighting/a623c559-f7e9-4fe9-8b40-61bd36e34b13/export</link>
      <description>{"uuid": "a623c559-f7e9-4fe9-8b40-61bd36e34b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5evfl625", "content": "Daily IT Security Digest \u2014 2026-09-09\nInsydeH2O, a widely deployed BIOS/UEFI firmware, contains a high-severity vulnerability (CVE-2026-12855) allowing local attackers with high privileges to execute arbitrary code via improper input validation. As of this report, no", "creation_timestamp": "2026-09-09T05:03:47.436897Z"}</description>
      <content:encoded>{"uuid": "a623c559-f7e9-4fe9-8b40-61bd36e34b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5evfl625", "content": "Daily IT Security Digest \u2014 2026-09-09\nInsydeH2O, a widely deployed BIOS/UEFI firmware, contains a high-severity vulnerability (CVE-2026-12855) allowing local attackers with high privileges to execute arbitrary code via improper input validation. As of this report, no", "creation_timestamp": "2026-09-09T05:03:47.436897Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a623c559-f7e9-4fe9-8b40-61bd36e34b13/export</guid>
      <pubDate>Wed, 09 Sep 2026 05:03:47 +0000</pubDate>
    </item>
    <item>
      <title>d2e2838b-901f-4c92-af15-11981db141fb</title>
      <link>https://vulnerability.circl.lu/sighting/d2e2838b-901f-4c92-af15-11981db141fb/export</link>
      <description>{"uuid": "d2e2838b-901f-4c92-af15-11981db141fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5emsb72z", "content": "Daily IT Security Digest \u2014 2026-09-09\nSource: [Mastodon (@beyondmachines1)](https://infosec.exchange/@beyondmachines1/117236490150977841)\n\n6. **InsydeH2O Firmware: Unrestricted Code Execution (CVE-2026-12855)**", "creation_timestamp": "2026-09-09T05:03:46.863368Z"}</description>
      <content:encoded>{"uuid": "d2e2838b-901f-4c92-af15-11981db141fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5emsb72z", "content": "Daily IT Security Digest \u2014 2026-09-09\nSource: [Mastodon (@beyondmachines1)](https://infosec.exchange/@beyondmachines1/117236490150977841)\n\n6. **InsydeH2O Firmware: Unrestricted Code Execution (CVE-2026-12855)**", "creation_timestamp": "2026-09-09T05:03:46.863368Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d2e2838b-901f-4c92-af15-11981db141fb/export</guid>
      <pubDate>Wed, 09 Sep 2026 05:03:46 +0000</pubDate>
    </item>
    <item>
      <title>7cfadddc-746e-4f0e-bdfb-025fcb1f8121</title>
      <link>https://vulnerability.circl.lu/sighting/7cfadddc-746e-4f0e-bdfb-025fcb1f8121/export</link>
      <description>{"uuid": "7cfadddc-746e-4f0e-bdfb-025fcb1f8121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2pbpue7o24", "content": "InsydeH2O firmware for HP hit by HIGH-severity vuln (CVE-2026-12855). Flawed input validation may allow code execution if local high privileges are compromised. No patch \u2014 limit admin rights &amp;amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-12855-cwe-20-improper-input-validation-in-...", "creation_timestamp": "2026-09-09T04:30:25.973495Z"}</description>
      <content:encoded>{"uuid": "7cfadddc-746e-4f0e-bdfb-025fcb1f8121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2pbpue7o24", "content": "InsydeH2O firmware for HP hit by HIGH-severity vuln (CVE-2026-12855). Flawed input validation may allow code execution if local high privileges are compromised. No patch \u2014 limit admin rights &amp;amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-12855-cwe-20-improper-input-validation-in-...", "creation_timestamp": "2026-09-09T04:30:25.973495Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7cfadddc-746e-4f0e-bdfb-025fcb1f8121/export</guid>
      <pubDate>Wed, 09 Sep 2026 04:30:25 +0000</pubDate>
    </item>
    <item>
      <title>47b3ea71-70e8-406f-b290-70d25b67ab8d</title>
      <link>https://vulnerability.circl.lu/sighting/47b3ea71-70e8-406f-b290-70d25b67ab8d/export</link>
      <description>{"uuid": "47b3ea71-70e8-406f-b290-70d25b67ab8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239200044346852", "content": "CVE-2026-12855: HIGH-severity vuln in InsydeH2O firmware (HP). Local attackers with high privileges may execute arbitrary code due to improper input validation. No patch yet \u2014 restrict local admin access. https://radar.offseq.com/threat/cve-2026-12855-cwe-20-improper-input-validation-in-insyde-software-insydeh2o-96c11fc7beb122a7 #OffSeq #Vulnerability #Firmware #Infosec", "creation_timestamp": "2026-09-09T04:30:25.698257Z"}</description>
      <content:encoded>{"uuid": "47b3ea71-70e8-406f-b290-70d25b67ab8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239200044346852", "content": "CVE-2026-12855: HIGH-severity vuln in InsydeH2O firmware (HP). Local attackers with high privileges may execute arbitrary code due to improper input validation. No patch yet \u2014 restrict local admin access. https://radar.offseq.com/threat/cve-2026-12855-cwe-20-improper-input-validation-in-insyde-software-insydeh2o-96c11fc7beb122a7 #OffSeq #Vulnerability #Firmware #Infosec", "creation_timestamp": "2026-09-09T04:30:25.698257Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/47b3ea71-70e8-406f-b290-70d25b67ab8d/export</guid>
      <pubDate>Wed, 09 Sep 2026 04:30:25 +0000</pubDate>
    </item>
  </channel>
</rss>
