<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 21 Sep 2026 22:23:07 +0000</lastBuildDate>
    <item>
      <title>1210a94f-079d-4e40-a063-54be8da73917</title>
      <link>https://vulnerability.circl.lu/sighting/1210a94f-079d-4e40-a063-54be8da73917/export</link>
      <description>{"uuid": "1210a94f-079d-4e40-a063-54be8da73917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42072", "type": "seen", "source": "https://t.me/shimiscyberworld/1312", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42072 \u2014 CVSS 9.8\nCVE-2026-42072: Nornicdb Exposes Graph Database via Default Credentials on LAN\n\nCVE-2026-42072 \u2014 Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --\n\n\ud83d\udd34 Critical \u00b7 3 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42072 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:39.198303Z"}</description>
      <content:encoded>{"uuid": "1210a94f-079d-4e40-a063-54be8da73917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42072", "type": "seen", "source": "https://t.me/shimiscyberworld/1312", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42072 \u2014 CVSS 9.8\nCVE-2026-42072: Nornicdb Exposes Graph Database via Default Credentials on LAN\n\nCVE-2026-42072 \u2014 Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --\n\n\ud83d\udd34 Critical \u00b7 3 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42072 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:39.198303Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1210a94f-079d-4e40-a063-54be8da73917/export</guid>
      <pubDate>Sun, 13 Sep 2026 00:00:39 +0000</pubDate>
    </item>
    <item>
      <title>8e256e6d-c229-4d8f-a328-6cc7701b62a5</title>
      <link>https://vulnerability.circl.lu/sighting/8e256e6d-c229-4d8f-a328-6cc7701b62a5/export</link>
      <description>{"uuid": "8e256e6d-c229-4d8f-a328-6cc7701b62a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42076", "type": "seen", "source": "https://t.me/shimiscyberworld/1184", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42076 \u2014 CVSS 9.8\nCVE-2026-42076: Evolver Engine RCE Puts AI Agents at Risk\n\nCVE-2026-42076 \u2014 Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attack\n\n\ud83d\udd34 Critical \u00b7 2 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42076 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:09.811835Z"}</description>
      <content:encoded>{"uuid": "8e256e6d-c229-4d8f-a328-6cc7701b62a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42076", "type": "seen", "source": "https://t.me/shimiscyberworld/1184", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42076 \u2014 CVSS 9.8\nCVE-2026-42076: Evolver Engine RCE Puts AI Agents at Risk\n\nCVE-2026-42076 \u2014 Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attack\n\n\ud83d\udd34 Critical \u00b7 2 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42076 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:09.811835Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8e256e6d-c229-4d8f-a328-6cc7701b62a5/export</guid>
      <pubDate>Sun, 13 Sep 2026 00:00:09 +0000</pubDate>
    </item>
    <item>
      <title>229cf4b4-2e88-4b44-a99a-8ca9eccf3f9e</title>
      <link>https://vulnerability.circl.lu/sighting/229cf4b4-2e88-4b44-a99a-8ca9eccf3f9e/export</link>
      <description>{"uuid": "229cf4b4-2e88-4b44-a99a-8ca9eccf3f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42076", "type": "seen", "source": "https://t.me/shimiscyberworld/1184", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42076 \u2014 CVSS 9.8\nCVE-2026-42076: Evolver Engine RCE Puts AI Agents at Risk\n\nCVE-2026-42076 \u2014 Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attack\n\n\ud83d\udd34 Critical \u00b7 2 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42076 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:17.940688Z"}</description>
      <content:encoded>{"uuid": "229cf4b4-2e88-4b44-a99a-8ca9eccf3f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42076", "type": "seen", "source": "https://t.me/shimiscyberworld/1184", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42076 \u2014 CVSS 9.8\nCVE-2026-42076: Evolver Engine RCE Puts AI Agents at Risk\n\nCVE-2026-42076 \u2014 Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attack\n\n\ud83d\udd34 Critical \u00b7 2 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42076 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:17.940688Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/229cf4b4-2e88-4b44-a99a-8ca9eccf3f9e/export</guid>
      <pubDate>Sat, 12 Sep 2026 10:00:17 +0000</pubDate>
    </item>
    <item>
      <title>55c6bb8a-1890-4b90-847c-183f319638e5</title>
      <link>https://vulnerability.circl.lu/sighting/55c6bb8a-1890-4b90-847c-183f319638e5/export</link>
      <description>{"uuid": "55c6bb8a-1890-4b90-847c-183f319638e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42072", "type": "seen", "source": "https://t.me/shimiscyberworld/1312", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42072 \u2014 CVSS 9.8\nCVE-2026-42072: Nornicdb Exposes Graph Database via Default Credentials on LAN\n\nCVE-2026-42072 \u2014 Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --\n\n\ud83d\udd34 Critical \u00b7 3 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42072 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:12.564811Z"}</description>
      <content:encoded>{"uuid": "55c6bb8a-1890-4b90-847c-183f319638e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42072", "type": "seen", "source": "https://t.me/shimiscyberworld/1312", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42072 \u2014 CVSS 9.8\nCVE-2026-42072: Nornicdb Exposes Graph Database via Default Credentials on LAN\n\nCVE-2026-42072 \u2014 Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --\n\n\ud83d\udd34 Critical \u00b7 3 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42072 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:12.564811Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/55c6bb8a-1890-4b90-847c-183f319638e5/export</guid>
      <pubDate>Sat, 12 Sep 2026 10:00:12 +0000</pubDate>
    </item>
    <item>
      <title>2af4d787-2e91-49c7-be73-253912be2f92</title>
      <link>https://vulnerability.circl.lu/sighting/2af4d787-2e91-49c7-be73-253912be2f92/export</link>
      <description>{"uuid": "2af4d787-2e91-49c7-be73-253912be2f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42074", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mrnbvzjkpe2x", "content": "A critical-severity fix just shipped for Gitlawb Openclaude. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-42074", "creation_timestamp": "2026-07-27T16:11:03.191495Z"}</description>
      <content:encoded>{"uuid": "2af4d787-2e91-49c7-be73-253912be2f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42074", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mrnbvzjkpe2x", "content": "A critical-severity fix just shipped for Gitlawb Openclaude. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-42074", "creation_timestamp": "2026-07-27T16:11:03.191495Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2af4d787-2e91-49c7-be73-253912be2f92/export</guid>
      <pubDate>Mon, 27 Jul 2026 16:11:03 +0000</pubDate>
    </item>
    <item>
      <title>63e6de97-18fc-4964-9984-f30efe43ab24</title>
      <link>https://vulnerability.circl.lu/sighting/63e6de97-18fc-4964-9984-f30efe43ab24/export</link>
      <description>{"uuid": "63e6de97-18fc-4964-9984-f30efe43ab24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42074", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh2ggyv6525", "content": "\ud83d\udd34 CVE-2026-42074 - Critical (9.8)\n\nOpenClaude is an open-source coding-agent command line interface for cloud and local model provid...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42074/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T07:00:20.206182Z"}</description>
      <content:encoded>{"uuid": "63e6de97-18fc-4964-9984-f30efe43ab24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42074", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnh2ggyv6525", "content": "\ud83d\udd34 CVE-2026-42074 - Critical (9.8)\n\nOpenClaude is an open-source coding-agent command line interface for cloud and local model provid...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42074/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T07:00:20.206182Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/63e6de97-18fc-4964-9984-f30efe43ab24/export</guid>
      <pubDate>Thu, 04 Jun 2026 07:00:20 +0000</pubDate>
    </item>
    <item>
      <title>8c3eb214-bd8a-4b7a-8403-cc6175adcb09</title>
      <link>https://vulnerability.circl.lu/sighting/8c3eb214-bd8a-4b7a-8403-cc6175adcb09/export</link>
      <description>{"uuid": "8c3eb214-bd8a-4b7a-8403-cc6175adcb09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndd3o6o4n24", "content": "CVE-2026-42074 - OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input\nCVE ID : CVE-2026-42074\n \n Published : June 2, 2026, 5:16 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : OpenClaude is an open-source coding-agent command line interface for clou...", "creation_timestamp": "2026-06-02T19:24:42.173758Z"}</description>
      <content:encoded>{"uuid": "8c3eb214-bd8a-4b7a-8403-cc6175adcb09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndd3o6o4n24", "content": "CVE-2026-42074 - OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input\nCVE ID : CVE-2026-42074\n \n Published : June 2, 2026, 5:16 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : OpenClaude is an open-source coding-agent command line interface for clou...", "creation_timestamp": "2026-06-02T19:24:42.173758Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8c3eb214-bd8a-4b7a-8403-cc6175adcb09/export</guid>
      <pubDate>Tue, 02 Jun 2026 19:24:42 +0000</pubDate>
    </item>
    <item>
      <title>c6c70979-2e8a-4577-9858-e83576af8692</title>
      <link>https://vulnerability.circl.lu/sighting/c6c70979-2e8a-4577-9858-e83576af8692/export</link>
      <description>{"uuid": "c6c70979-2e8a-4577-9858-e83576af8692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42074", "type": "published-proof-of-concept", "source": "https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m77w-p5jj-xmhg", "content": "", "creation_timestamp": "2026-05-12T15:22:53.000000Z"}</description>
      <content:encoded>{"uuid": "c6c70979-2e8a-4577-9858-e83576af8692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42074", "type": "published-proof-of-concept", "source": "https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m77w-p5jj-xmhg", "content": "", "creation_timestamp": "2026-05-12T15:22:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c6c70979-2e8a-4577-9858-e83576af8692/export</guid>
      <pubDate>Tue, 12 May 2026 15:22:53 +0000</pubDate>
    </item>
    <item>
      <title>6b316a40-ccfa-4fd7-a5c0-8e9a6d938f3e</title>
      <link>https://vulnerability.circl.lu/sighting/6b316a40-ccfa-4fd7-a5c0-8e9a6d938f3e/export</link>
      <description>{"uuid": "6b316a40-ccfa-4fd7-a5c0-8e9a6d938f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42073", "type": "published-proof-of-concept", "source": "https://github.com/Gitlawb/openclaude/security/advisories/GHSA-c73c-x77g-854r", "content": "", "creation_timestamp": "2026-05-12T15:22:12.000000Z"}</description>
      <content:encoded>{"uuid": "6b316a40-ccfa-4fd7-a5c0-8e9a6d938f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42073", "type": "published-proof-of-concept", "source": "https://github.com/Gitlawb/openclaude/security/advisories/GHSA-c73c-x77g-854r", "content": "", "creation_timestamp": "2026-05-12T15:22:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6b316a40-ccfa-4fd7-a5c0-8e9a6d938f3e/export</guid>
      <pubDate>Tue, 12 May 2026 15:22:12 +0000</pubDate>
    </item>
    <item>
      <title>4cdb49b2-9104-4bc6-a456-b2a7a5222d04</title>
      <link>https://vulnerability.circl.lu/sighting/4cdb49b2-9104-4bc6-a456-b2a7a5222d04/export</link>
      <description>{"uuid": "4cdb49b2-9104-4bc6-a456-b2a7a5222d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42072", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlg22dseio2y", "content": "NornicDB (&amp;lt;1.0.42-hotfix) critical vuln: Bolt server exposed on LAN with default admin creds. Upgrade to 1.0.42-hotfix ASAP to prevent DB compromise! \ud83d\udea8 https://radar.offseq.com/threat/cve-2026-42072-cwe-1392-use-of-default-credentials-cb1c5acf #OffSeq #CVE202642072", "creation_timestamp": "2026-05-09T10:30:30.417316Z"}</description>
      <content:encoded>{"uuid": "4cdb49b2-9104-4bc6-a456-b2a7a5222d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42072", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlg22dseio2y", "content": "NornicDB (&amp;lt;1.0.42-hotfix) critical vuln: Bolt server exposed on LAN with default admin creds. Upgrade to 1.0.42-hotfix ASAP to prevent DB compromise! \ud83d\udea8 https://radar.offseq.com/threat/cve-2026-42072-cwe-1392-use-of-default-credentials-cb1c5acf #OffSeq #CVE202642072", "creation_timestamp": "2026-05-09T10:30:30.417316Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4cdb49b2-9104-4bc6-a456-b2a7a5222d04/export</guid>
      <pubDate>Sat, 09 May 2026 10:30:30 +0000</pubDate>
    </item>
  </channel>
</rss>
