<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 31 Aug 2026 05:18:20 +0000</lastBuildDate>
    <item>
      <title>dc6307d3-c26c-42df-956b-4a5d5964b3fd</title>
      <link>https://vulnerability.circl.lu/sighting/dc6307d3-c26c-42df-956b-4a5d5964b3fd/export</link>
      <description>{"uuid": "dc6307d3-c26c-42df-956b-4a5d5964b3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtbgzksx7c26", "content": "CVE-2026-41452 is trending. Hype score 9, currently #3 on cvemon.\n\nKrayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-41452", "creation_timestamp": "2026-08-17T10:00:56.657864Z"}</description>
      <content:encoded>{"uuid": "dc6307d3-c26c-42df-956b-4a5d5964b3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtbgzksx7c26", "content": "CVE-2026-41452 is trending. Hype score 9, currently #3 on cvemon.\n\nKrayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-41452", "creation_timestamp": "2026-08-17T10:00:56.657864Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dc6307d3-c26c-42df-956b-4a5d5964b3fd/export</guid>
      <pubDate>Mon, 17 Aug 2026 10:00:56 +0000</pubDate>
    </item>
    <item>
      <title>3fe7da0e-d4eb-4b7f-8232-966f9386933c</title>
      <link>https://vulnerability.circl.lu/sighting/3fe7da0e-d4eb-4b7f-8232-966f9386933c/export</link>
      <description>{"uuid": "3fe7da0e-d4eb-4b7f-8232-966f9386933c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:22.235211Z"}</description>
      <content:encoded>{"uuid": "3fe7da0e-d4eb-4b7f-8232-966f9386933c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:22.235211Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3fe7da0e-d4eb-4b7f-8232-966f9386933c/export</guid>
      <pubDate>Sun, 16 Aug 2026 00:00:22 +0000</pubDate>
    </item>
    <item>
      <title>a7dccc5f-72c5-4a43-948e-247a62febdba</title>
      <link>https://vulnerability.circl.lu/sighting/a7dccc5f-72c5-4a43-948e-247a62febdba/export</link>
      <description>{"uuid": "a7dccc5f-72c5-4a43-948e-247a62febdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/I7xd-Kq67NPH6i2L8D3KjrppB3yStp0aHSPNiKmrW8iM8IU", "content": "", "creation_timestamp": "2026-08-16T00:00:21.827892Z"}</description>
      <content:encoded>{"uuid": "a7dccc5f-72c5-4a43-948e-247a62febdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/I7xd-Kq67NPH6i2L8D3KjrppB3yStp0aHSPNiKmrW8iM8IU", "content": "", "creation_timestamp": "2026-08-16T00:00:21.827892Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a7dccc5f-72c5-4a43-948e-247a62febdba/export</guid>
      <pubDate>Sun, 16 Aug 2026 00:00:21 +0000</pubDate>
    </item>
    <item>
      <title>b9f1fa1f-060d-40f9-a768-49a1ff376a88</title>
      <link>https://vulnerability.circl.lu/sighting/b9f1fa1f-060d-40f9-a768-49a1ff376a88/export</link>
      <description>{"uuid": "b9f1fa1f-060d-40f9-a768-49a1ff376a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:07.160923Z"}</description>
      <content:encoded>{"uuid": "b9f1fa1f-060d-40f9-a768-49a1ff376a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:07.160923Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b9f1fa1f-060d-40f9-a768-49a1ff376a88/export</guid>
      <pubDate>Sat, 15 Aug 2026 08:00:07 +0000</pubDate>
    </item>
    <item>
      <title>267cb182-1765-45ff-acf2-ed25523dc208</title>
      <link>https://vulnerability.circl.lu/sighting/267cb182-1765-45ff-acf2-ed25523dc208/export</link>
      <description>{"uuid": "267cb182-1765-45ff-acf2-ed25523dc208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/I7xd-Kq67NPH6i2L8D3KjrppB3yStp0aHSPNiKmrW8iM8IU", "content": "", "creation_timestamp": "2026-08-15T08:00:06.828359Z"}</description>
      <content:encoded>{"uuid": "267cb182-1765-45ff-acf2-ed25523dc208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/I7xd-Kq67NPH6i2L8D3KjrppB3yStp0aHSPNiKmrW8iM8IU", "content": "", "creation_timestamp": "2026-08-15T08:00:06.828359Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/267cb182-1765-45ff-acf2-ed25523dc208/export</guid>
      <pubDate>Sat, 15 Aug 2026 08:00:06 +0000</pubDate>
    </item>
    <item>
      <title>28b8753a-a601-4ffd-b9ac-90c72880b00a</title>
      <link>https://vulnerability.circl.lu/sighting/28b8753a-a601-4ffd-b9ac-90c72880b00a/export</link>
      <description>{"uuid": "28b8753a-a601-4ffd-b9ac-90c72880b00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97772", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41452-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 18:36:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41452 \u2014 Krayin CRM unauth installer bypass (X-Requested-With) \u2192 admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T00:00:06.973085Z"}</description>
      <content:encoded>{"uuid": "28b8753a-a601-4ffd-b9ac-90c72880b00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97772", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41452-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 18:36:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41452 \u2014 Krayin CRM unauth installer bypass (X-Requested-With) \u2192 admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T00:00:06.973085Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/28b8753a-a601-4ffd-b9ac-90c72880b00a/export</guid>
      <pubDate>Thu, 13 Aug 2026 00:00:06 +0000</pubDate>
    </item>
    <item>
      <title>aea7241b-a8c7-4830-86da-aca4ce09c2df</title>
      <link>https://vulnerability.circl.lu/sighting/aea7241b-a8c7-4830-86da-aca4ce09c2df/export</link>
      <description>{"uuid": "aea7241b-a8c7-4830-86da-aca4ce09c2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97772", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41452-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 18:36:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41452 \u2014 Krayin CRM unauth installer bypass (X-Requested-With) \u2192 admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T20:00:03.512592Z"}</description>
      <content:encoded>{"uuid": "aea7241b-a8c7-4830-86da-aca4ce09c2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97772", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41452-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 18:36:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41452 \u2014 Krayin CRM unauth installer bypass (X-Requested-With) \u2192 admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T20:00:03.512592Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aea7241b-a8c7-4830-86da-aca4ce09c2df/export</guid>
      <pubDate>Wed, 12 Aug 2026 20:00:03 +0000</pubDate>
    </item>
    <item>
      <title>b1ac62ed-25de-4c69-aafc-02daf2111532</title>
      <link>https://vulnerability.circl.lu/sighting/b1ac62ed-25de-4c69-aafc-02daf2111532/export</link>
      <description>{"uuid": "b1ac62ed-25de-4c69-aafc-02daf2111532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msadpzw6dd2i", "content": "CVE-2026-41452\nAn attacker can access Krayin CRM's admin account and data without a password. This happens when the CRM is being installed. To fix this, update Krayin CRM to the latest version or apply a patch provided by the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T06:04:04.307964Z"}</description>
      <content:encoded>{"uuid": "b1ac62ed-25de-4c69-aafc-02daf2111532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msadpzw6dd2i", "content": "CVE-2026-41452\nAn attacker can access Krayin CRM's admin account and data without a password. This happens when the CRM is being installed. To fix this, update Krayin CRM to the latest version or apply a patch provided by the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T06:04:04.307964Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b1ac62ed-25de-4c69-aafc-02daf2111532/export</guid>
      <pubDate>Tue, 04 Aug 2026 06:04:04 +0000</pubDate>
    </item>
  </channel>
</rss>
