<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 27 Jul 2026 21:46:50 +0000</lastBuildDate>
    <item>
      <title>dcd13163-e0ef-4914-bc70-ced94a2dc9aa</title>
      <link>https://vulnerability.circl.lu/sighting/dcd13163-e0ef-4914-bc70-ced94a2dc9aa/export</link>
      <description>{"uuid": "dcd13163-e0ef-4914-bc70-ced94a2dc9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnf3zxmbj2s", "content": "CVE-2026-16766 - catalyst::view::wkhtmltopdf\nCatalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl can be exploited by attackers to inject malicious code when generating PDFs. This can happen if your application\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rrwo #CVE #infosec", "creation_timestamp": "2026-07-27T17:08:05.714541Z"}</description>
      <content:encoded>{"uuid": "dcd13163-e0ef-4914-bc70-ced94a2dc9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnf3zxmbj2s", "content": "CVE-2026-16766 - catalyst::view::wkhtmltopdf\nCatalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl can be exploited by attackers to inject malicious code when generating PDFs. This can happen if your application\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rrwo #CVE #infosec", "creation_timestamp": "2026-07-27T17:08:05.714541Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dcd13163-e0ef-4914-bc70-ced94a2dc9aa/export</guid>
      <pubDate>Mon, 27 Jul 2026 17:08:05 +0000</pubDate>
    </item>
    <item>
      <title>eb851439-43f2-4a71-80ae-190f1d2df896</title>
      <link>https://vulnerability.circl.lu/sighting/eb851439-43f2-4a71-80ae-190f1d2df896/export</link>
      <description>{"uuid": "eb851439-43f2-4a71-80ae-190f1d2df896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrj2wcdbus2g", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-16766](https://github.com/mc7244/Catalyst-View-Wkhtmltopdf/issues/6)\nCatalyst::View::Wk...\nhttps://github.com/mc7244/Catalyst-View-Wkhtmltopdf/issues/6 #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-25T23:55:16.865184Z"}</description>
      <content:encoded>{"uuid": "eb851439-43f2-4a71-80ae-190f1d2df896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrj2wcdbus2g", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-16766](https://github.com/mc7244/Catalyst-View-Wkhtmltopdf/issues/6)\nCatalyst::View::Wk...\nhttps://github.com/mc7244/Catalyst-View-Wkhtmltopdf/issues/6 #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-25T23:55:16.865184Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eb851439-43f2-4a71-80ae-190f1d2df896/export</guid>
      <pubDate>Sat, 25 Jul 2026 23:55:16 +0000</pubDate>
    </item>
    <item>
      <title>c9bc22a6-e246-48a7-a173-018c49a4695a</title>
      <link>https://vulnerability.circl.lu/sighting/c9bc22a6-e246-48a7-a173-018c49a4695a/export</link>
      <description>{"uuid": "c9bc22a6-e246-48a7-a173-018c49a4695a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mriflkqhw526", "content": "CVE-2026-16766: Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options", "creation_timestamp": "2026-07-25T17:33:28.157881Z"}</description>
      <content:encoded>{"uuid": "c9bc22a6-e246-48a7-a173-018c49a4695a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mriflkqhw526", "content": "CVE-2026-16766: Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options", "creation_timestamp": "2026-07-25T17:33:28.157881Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c9bc22a6-e246-48a7-a173-018c49a4695a/export</guid>
      <pubDate>Sat, 25 Jul 2026 17:33:28 +0000</pubDate>
    </item>
    <item>
      <title>70e32351-8b56-4d82-9235-8070efa2d920</title>
      <link>https://vulnerability.circl.lu/sighting/70e32351-8b56-4d82-9235-8070efa2d920/export</link>
      <description>{"uuid": "70e32351-8b56-4d82-9235-8070efa2d920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16766", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrhiwcpizo2g", "content": "CVE-2026-16766: Catalyst::View::Wkhtmltopdf (&amp;lt;0.6.1) suffers CRITICAL OS command injection via PDF options. Upgrade to 0.6.1+ or migrate \u2014 no maintained patch. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-i...", "creation_timestamp": "2026-07-25T09:00:30.887845Z"}</description>
      <content:encoded>{"uuid": "70e32351-8b56-4d82-9235-8070efa2d920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16766", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrhiwcpizo2g", "content": "CVE-2026-16766: Catalyst::View::Wkhtmltopdf (&amp;lt;0.6.1) suffers CRITICAL OS command injection via PDF options. Upgrade to 0.6.1+ or migrate \u2014 no maintained patch. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-i...", "creation_timestamp": "2026-07-25T09:00:30.887845Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/70e32351-8b56-4d82-9235-8070efa2d920/export</guid>
      <pubDate>Sat, 25 Jul 2026 09:00:30 +0000</pubDate>
    </item>
    <item>
      <title>335e0947-66a8-4f03-9553-87157956d4d1</title>
      <link>https://vulnerability.circl.lu/sighting/335e0947-66a8-4f03-9553-87157956d4d1/export</link>
      <description>{"uuid": "335e0947-66a8-4f03-9553-87157956d4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16766", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116979795764810841", "content": "CVE-2026-16766: CRITICAL OS command injection in Catalyst::View::Wkhtmltopdf (&amp;lt;0.6.1). Exploitable via unsanitized PDF options \u2014 remote code execution possible. No maintained patch; upgrade to 0.6.1+ or migrate. https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-9e7c09567b0712f8 #OffSeq #infosec #perl #vuln", "creation_timestamp": "2026-07-25T09:00:29.001890Z"}</description>
      <content:encoded>{"uuid": "335e0947-66a8-4f03-9553-87157956d4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16766", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116979795764810841", "content": "CVE-2026-16766: CRITICAL OS command injection in Catalyst::View::Wkhtmltopdf (&amp;lt;0.6.1). Exploitable via unsanitized PDF options \u2014 remote code execution possible. No maintained patch; upgrade to 0.6.1+ or migrate. https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-9e7c09567b0712f8 #OffSeq #infosec #perl #vuln", "creation_timestamp": "2026-07-25T09:00:29.001890Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/335e0947-66a8-4f03-9553-87157956d4d1/export</guid>
      <pubDate>Sat, 25 Jul 2026 09:00:29 +0000</pubDate>
    </item>
  </channel>
</rss>
