<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 10 May 2026 20:23:56 +0000</lastBuildDate>
    <item>
      <title>be71e0e7-c7ed-4a9c-912a-17019388b854</title>
      <link>https://vulnerability.circl.lu/sighting/be71e0e7-c7ed-4a9c-912a-17019388b854/export</link>
      <description>{"uuid": "be71e0e7-c7ed-4a9c-912a-17019388b854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml537ce7c32i", "content": "CVE-2026-34458 - Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly\nCVE ID : CVE-2026-34458\n \n Published : May 5, 2026, 7:24 p.m. | 57\u00a0minutes ago\n \n Description : Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In...", "creation_timestamp": "2026-05-05T20:57:12.349843Z"}</description>
      <content:encoded>{"uuid": "be71e0e7-c7ed-4a9c-912a-17019388b854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml537ce7c32i", "content": "CVE-2026-34458 - Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly\nCVE ID : CVE-2026-34458\n \n Published : May 5, 2026, 7:24 p.m. | 57\u00a0minutes ago\n \n Description : Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In...", "creation_timestamp": "2026-05-05T20:57:12.349843Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/be71e0e7-c7ed-4a9c-912a-17019388b854/export</guid>
      <pubDate>Tue, 05 May 2026 20:57:12 +0000</pubDate>
    </item>
    <item>
      <title>4bc0ae9f-3ee8-4d67-a883-af97ee472f3d</title>
      <link>https://vulnerability.circl.lu/sighting/4bc0ae9f-3ee8-4d67-a883-af97ee472f3d/export</link>
      <description>{"uuid": "4bc0ae9f-3ee8-4d67-a883-af97ee472f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34458", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116524688383360552", "content": "\ud83d\udea8 CVE-2026-34458: Sandboxie-Plus (&amp;lt;=1.17.2) has a CRITICAL CRLF injection bug. Local users can inject config, escape sandboxes, and escalate to SYSTEM. Patch to 1.17.3 ASAP! https://radar.offseq.com/threat/cve-2026-34458-cwe-93-improper-neutralization-of-c-e575dfc0 #OffSeq #SandboxiePlus #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-05-06T00:00:41.746842Z"}</description>
      <content:encoded>{"uuid": "4bc0ae9f-3ee8-4d67-a883-af97ee472f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34458", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116524688383360552", "content": "\ud83d\udea8 CVE-2026-34458: Sandboxie-Plus (&amp;lt;=1.17.2) has a CRITICAL CRLF injection bug. Local users can inject config, escape sandboxes, and escalate to SYSTEM. Patch to 1.17.3 ASAP! https://radar.offseq.com/threat/cve-2026-34458-cwe-93-improper-neutralization-of-c-e575dfc0 #OffSeq #SandboxiePlus #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-05-06T00:00:41.746842Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4bc0ae9f-3ee8-4d67-a883-af97ee472f3d/export</guid>
      <pubDate>Wed, 06 May 2026 00:00:41 +0000</pubDate>
    </item>
    <item>
      <title>6feac070-e23a-4ff7-8367-1f82499a2c94</title>
      <link>https://vulnerability.circl.lu/sighting/6feac070-e23a-4ff7-8367-1f82499a2c94/export</link>
      <description>{"uuid": "6feac070-e23a-4ff7-8367-1f82499a2c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34458", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ml5fhgqxev2y", "content": "Sandboxie-Plus CRITICAL vuln: CVE-2026-34458 allows local escape &amp;amp; SYSTEM escalation via CRLF injection (&amp;lt;=1.17.2). Upgrade to 1.17.3 urgently! https://radar.offseq.com/threat/cve-2026-34458-cwe-93-improper-neutralization-of-c-e575dfc0 #OffSeq #SandboxiePlus #SecurityAlert", "creation_timestamp": "2026-05-06T00:00:43.824988Z"}</description>
      <content:encoded>{"uuid": "6feac070-e23a-4ff7-8367-1f82499a2c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34458", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ml5fhgqxev2y", "content": "Sandboxie-Plus CRITICAL vuln: CVE-2026-34458 allows local escape &amp;amp; SYSTEM escalation via CRLF injection (&amp;lt;=1.17.2). Upgrade to 1.17.3 urgently! https://radar.offseq.com/threat/cve-2026-34458-cwe-93-improper-neutralization-of-c-e575dfc0 #OffSeq #SandboxiePlus #SecurityAlert", "creation_timestamp": "2026-05-06T00:00:43.824988Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6feac070-e23a-4ff7-8367-1f82499a2c94/export</guid>
      <pubDate>Wed, 06 May 2026 00:00:43 +0000</pubDate>
    </item>
    <item>
      <title>8d8f6dcb-ca4b-43c8-80b9-45bf4f0b138f</title>
      <link>https://vulnerability.circl.lu/sighting/8d8f6dcb-ca4b-43c8-80b9-45bf4f0b138f/export</link>
      <description>{"uuid": "8d8f6dcb-ca4b-43c8-80b9-45bf4f0b138f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34458", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-sandboxie-per-windows", "content": "", "creation_timestamp": "2026-05-06T05:36:40.000000Z"}</description>
      <content:encoded>{"uuid": "8d8f6dcb-ca4b-43c8-80b9-45bf4f0b138f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34458", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-sandboxie-per-windows", "content": "", "creation_timestamp": "2026-05-06T05:36:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d8f6dcb-ca4b-43c8-80b9-45bf4f0b138f/export</guid>
      <pubDate>Wed, 06 May 2026 05:36:40 +0000</pubDate>
    </item>
  </channel>
</rss>
