<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 01 Jun 2026 15:27:13 +0000</lastBuildDate>
    <item>
      <title>4067f22b-a36c-4e71-bb6f-cdbcc6262477</title>
      <link>https://vulnerability.circl.lu/sighting/4067f22b-a36c-4e71-bb6f-cdbcc6262477/export</link>
      <description>{"uuid": "4067f22b-a36c-4e71-bb6f-cdbcc6262477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaj6f7qlo2k", "content": "CVE-2026-41203 - ci4ms Theme::upload is vulnerable to Zip Slip leading to RCE\nCVE ID : CVE-2026-41203\n \n Published : May 7, 2026, 3:19 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architectu...", "creation_timestamp": "2026-05-07T05:45:13.498081Z"}</description>
      <content:encoded>{"uuid": "4067f22b-a36c-4e71-bb6f-cdbcc6262477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaj6f7qlo2k", "content": "CVE-2026-41203 - ci4ms Theme::upload is vulnerable to Zip Slip leading to RCE\nCVE ID : CVE-2026-41203\n \n Published : May 7, 2026, 3:19 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architectu...", "creation_timestamp": "2026-05-07T05:45:13.498081Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4067f22b-a36c-4e71-bb6f-cdbcc6262477/export</guid>
      <pubDate>Thu, 07 May 2026 05:45:13 +0000</pubDate>
    </item>
    <item>
      <title>bd1fbd73-ca32-46b7-8611-f98d7f2162e8</title>
      <link>https://vulnerability.circl.lu/sighting/bd1fbd73-ca32-46b7-8611-f98d7f2162e8/export</link>
      <description>{"uuid": "bd1fbd73-ca32-46b7-8611-f98d7f2162e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41203", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlap2odhxt2o", "content": "Critical ci4ms path traversal \ud83d\udee1\ufe0f (pre-0.31.5.0): Authenticated users can upload ZIPs to write files anywhere, risking RCE. Upgrade to 0.31.5.0+ now! https://radar.offseq.com/threat/cve-2026-41203-cwe-22-improper-limitation-of-a-pat-c63ffac4 #OffSeq #RCE #PatchNow", "creation_timestamp": "2026-05-07T07:30:31.922745Z"}</description>
      <content:encoded>{"uuid": "bd1fbd73-ca32-46b7-8611-f98d7f2162e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41203", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlap2odhxt2o", "content": "Critical ci4ms path traversal \ud83d\udee1\ufe0f (pre-0.31.5.0): Authenticated users can upload ZIPs to write files anywhere, risking RCE. Upgrade to 0.31.5.0+ now! https://radar.offseq.com/threat/cve-2026-41203-cwe-22-improper-limitation-of-a-pat-c63ffac4 #OffSeq #RCE #PatchNow", "creation_timestamp": "2026-05-07T07:30:31.922745Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bd1fbd73-ca32-46b7-8611-f98d7f2162e8/export</guid>
      <pubDate>Thu, 07 May 2026 07:30:31 +0000</pubDate>
    </item>
    <item>
      <title>9749e40b-da38-43f5-ba15-9dbb3d1d9e97</title>
      <link>https://vulnerability.circl.lu/sighting/9749e40b-da38-43f5-ba15-9dbb3d1d9e97/export</link>
      <description>{"uuid": "9749e40b-da38-43f5-ba15-9dbb3d1d9e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41203", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116532119400079005", "content": "\ud83d\udea8 CRITICAL: CVE-2026-41203 in ci4ms (&amp;lt;0.31.5.0) allows authenticated users to exploit a path traversal bug and write files anywhere \u2014 including web root \u2014 for potential RCE. Patch to 0.31.5.0 ASAP! https://radar.offseq.com/threat/cve-2026-41203-cwe-22-improper-limitation-of-a-pat-c63ffac4 #OffSeq #Vuln #RCE #PathTraversal", "creation_timestamp": "2026-05-07T07:30:41.075310Z"}</description>
      <content:encoded>{"uuid": "9749e40b-da38-43f5-ba15-9dbb3d1d9e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41203", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116532119400079005", "content": "\ud83d\udea8 CRITICAL: CVE-2026-41203 in ci4ms (&amp;lt;0.31.5.0) allows authenticated users to exploit a path traversal bug and write files anywhere \u2014 including web root \u2014 for potential RCE. Patch to 0.31.5.0 ASAP! https://radar.offseq.com/threat/cve-2026-41203-cwe-22-improper-limitation-of-a-pat-c63ffac4 #OffSeq #Vuln #RCE #PathTraversal", "creation_timestamp": "2026-05-07T07:30:41.075310Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9749e40b-da38-43f5-ba15-9dbb3d1d9e97/export</guid>
      <pubDate>Thu, 07 May 2026 07:30:41 +0000</pubDate>
    </item>
  </channel>
</rss>
