<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 07 Aug 2026 18:06:59 +0000</lastBuildDate>
    <item>
      <title>7371e62b-d075-4c51-a48a-e789798b7f0f</title>
      <link>https://vulnerability.circl.lu/sighting/7371e62b-d075-4c51-a48a-e789798b7f0f/export</link>
      <description>{"uuid": "7371e62b-d075-4c51-a48a-e789798b7f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4431", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msd75geivo2i", "content": "CVE-2026-4431\nThe Easy Post Submission plugin for WordPress has a security issue that lets anyone change post titles, content, and other details without permission. This is a concern because it could be used by attackers to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T09:20:04.195604Z"}</description>
      <content:encoded>{"uuid": "7371e62b-d075-4c51-a48a-e789798b7f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4431", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msd75geivo2i", "content": "CVE-2026-4431\nThe Easy Post Submission plugin for WordPress has a security issue that lets anyone change post titles, content, and other details without permission. This is a concern because it could be used by attackers to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T09:20:04.195604Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7371e62b-d075-4c51-a48a-e789798b7f0f/export</guid>
      <pubDate>Wed, 05 Aug 2026 09:20:04 +0000</pubDate>
    </item>
    <item>
      <title>13c253f5-2daa-48a7-8181-ba87e67353cf</title>
      <link>https://vulnerability.circl.lu/sighting/13c253f5-2daa-48a7-8181-ba87e67353cf/export</link>
      <description>{"uuid": "13c253f5-2daa-48a7-8181-ba87e67353cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4431", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msd62grcf32o", "content": "Easy Post Submission plugin (\u22642.3.0) for WordPress has a CRITICAL flaw: missing auth lets attackers edit or unpublish any post via AJAX. No fix yet \u2014 disable plugin now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-4431-cwe-862-missing-authorization-in-themeruby-easy-post-submission-frontend-postin...", "creation_timestamp": "2026-08-05T09:00:31.139407Z"}</description>
      <content:encoded>{"uuid": "13c253f5-2daa-48a7-8181-ba87e67353cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4431", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msd62grcf32o", "content": "Easy Post Submission plugin (\u22642.3.0) for WordPress has a CRITICAL flaw: missing auth lets attackers edit or unpublish any post via AJAX. No fix yet \u2014 disable plugin now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-4431-cwe-862-missing-authorization-in-themeruby-easy-post-submission-frontend-postin...", "creation_timestamp": "2026-08-05T09:00:31.139407Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/13c253f5-2daa-48a7-8181-ba87e67353cf/export</guid>
      <pubDate>Wed, 05 Aug 2026 09:00:31 +0000</pubDate>
    </item>
    <item>
      <title>8587df9c-dc64-42da-86c7-02fa31bf1de0</title>
      <link>https://vulnerability.circl.lu/sighting/8587df9c-dc64-42da-86c7-02fa31bf1de0/export</link>
      <description>{"uuid": "8587df9c-dc64-42da-86c7-02fa31bf1de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4431", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117042081155295833", "content": "CVE-2026-4431: CRITICAL vuln in Easy Post Submission \u22642.3.0 for WordPress. Missing auth lets unauthenticated attackers modify or unpublish any post via AJAX. No patch yet \u2014 disable plugin if possible. https://radar.offseq.com/threat/cve-2026-4431-cwe-862-missing-authorization-in-themeruby-easy-post-submission-frontend-posting-guest-a356c334d549556e #OffSeq #WordPress #Vuln #CVE20264431", "creation_timestamp": "2026-08-05T09:00:28.514936Z"}</description>
      <content:encoded>{"uuid": "8587df9c-dc64-42da-86c7-02fa31bf1de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4431", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117042081155295833", "content": "CVE-2026-4431: CRITICAL vuln in Easy Post Submission \u22642.3.0 for WordPress. Missing auth lets unauthenticated attackers modify or unpublish any post via AJAX. No patch yet \u2014 disable plugin if possible. https://radar.offseq.com/threat/cve-2026-4431-cwe-862-missing-authorization-in-themeruby-easy-post-submission-frontend-posting-guest-a356c334d549556e #OffSeq #WordPress #Vuln #CVE20264431", "creation_timestamp": "2026-08-05T09:00:28.514936Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8587df9c-dc64-42da-86c7-02fa31bf1de0/export</guid>
      <pubDate>Wed, 05 Aug 2026 09:00:28 +0000</pubDate>
    </item>
    <item>
      <title>e6045de1-b8ed-4bb8-948d-0855231a29ad</title>
      <link>https://vulnerability.circl.lu/sighting/e6045de1-b8ed-4bb8-948d-0855231a29ad/export</link>
      <description>{"uuid": "e6045de1-b8ed-4bb8-948d-0855231a29ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44311", "type": "published-proof-of-concept", "source": "https://github.com/fabricjs/fabric.js/security/advisories/GHSA-w22m-hvvm-xmwx", "content": "", "creation_timestamp": "2026-06-11T21:48:31.000000Z"}</description>
      <content:encoded>{"uuid": "e6045de1-b8ed-4bb8-948d-0855231a29ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44311", "type": "published-proof-of-concept", "source": "https://github.com/fabricjs/fabric.js/security/advisories/GHSA-w22m-hvvm-xmwx", "content": "", "creation_timestamp": "2026-06-11T21:48:31.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e6045de1-b8ed-4bb8-948d-0855231a29ad/export</guid>
      <pubDate>Thu, 11 Jun 2026 21:48:31 +0000</pubDate>
    </item>
    <item>
      <title>a287b465-a186-4990-9c13-34eda3336e06</title>
      <link>https://vulnerability.circl.lu/sighting/a287b465-a186-4990-9c13-34eda3336e06/export</link>
      <description>{"uuid": "a287b465-a186-4990-9c13-34eda3336e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44315", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmwwi7f4w22f", "content": "\ud83d\udccc CVE-2026-44315 - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-pfd-management API without inbound OAut... https://www.cyberhub.blog/cves/CVE-2026-44315", "creation_timestamp": "2026-05-28T21:07:07.515712Z"}</description>
      <content:encoded>{"uuid": "a287b465-a186-4990-9c13-34eda3336e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44315", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmwwi7f4w22f", "content": "\ud83d\udccc CVE-2026-44315 - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-pfd-management API without inbound OAut... https://www.cyberhub.blog/cves/CVE-2026-44315", "creation_timestamp": "2026-05-28T21:07:07.515712Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a287b465-a186-4990-9c13-34eda3336e06/export</guid>
      <pubDate>Thu, 28 May 2026 21:07:07 +0000</pubDate>
    </item>
    <item>
      <title>3c07dcab-0742-48eb-acb6-ceea480b05ed</title>
      <link>https://vulnerability.circl.lu/sighting/3c07dcab-0742-48eb-acb6-ceea480b05ed/export</link>
      <description>{"uuid": "3c07dcab-0742-48eb-acb6-ceea480b05ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44313", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgvnqcqgb2w", "content": "\ud83d\udd34 CVE-2026-44313 - Critical (9.1)\n\nLinkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44313/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-09T18:44:32.237948Z"}</description>
      <content:encoded>{"uuid": "3c07dcab-0742-48eb-acb6-ceea480b05ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44313", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgvnqcqgb2w", "content": "\ud83d\udd34 CVE-2026-44313 - Critical (9.1)\n\nLinkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44313/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-09T18:44:32.237948Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3c07dcab-0742-48eb-acb6-ceea480b05ed/export</guid>
      <pubDate>Sat, 09 May 2026 18:44:32 +0000</pubDate>
    </item>
    <item>
      <title>dd78b6a5-31e7-4cda-94c1-1928a4e993e3</title>
      <link>https://vulnerability.circl.lu/sighting/dd78b6a5-31e7-4cda-94c1-1928a4e993e3/export</link>
      <description>{"uuid": "dd78b6a5-31e7-4cda-94c1-1928a4e993e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44313", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfallignb2e", "content": "CVE-2026-44313 - LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Function\nCVE ID : CVE-2026-44313\n \n Published : May 9, 2026, 12:16 a.m. | 28\u00a0minutes ago\n \n Description : Linkwarden is a self-hosted, open-source collaborative bookmark m...", "creation_timestamp": "2026-05-09T02:54:51.205619Z"}</description>
      <content:encoded>{"uuid": "dd78b6a5-31e7-4cda-94c1-1928a4e993e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44313", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfallignb2e", "content": "CVE-2026-44313 - LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Function\nCVE ID : CVE-2026-44313\n \n Published : May 9, 2026, 12:16 a.m. | 28\u00a0minutes ago\n \n Description : Linkwarden is a self-hosted, open-source collaborative bookmark m...", "creation_timestamp": "2026-05-09T02:54:51.205619Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dd78b6a5-31e7-4cda-94c1-1928a4e993e3/export</guid>
      <pubDate>Sat, 09 May 2026 02:54:51 +0000</pubDate>
    </item>
    <item>
      <title>4c85c78d-1ed8-4237-9357-84f3c447bd34</title>
      <link>https://vulnerability.circl.lu/sighting/4c85c78d-1ed8-4237-9357-84f3c447bd34/export</link>
      <description>{"uuid": "4c85c78d-1ed8-4237-9357-84f3c447bd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44319", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rxrq-fv76-26pr", "content": "", "creation_timestamp": "2026-05-08T22:44:35.000000Z"}</description>
      <content:encoded>{"uuid": "4c85c78d-1ed8-4237-9357-84f3c447bd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44319", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rxrq-fv76-26pr", "content": "", "creation_timestamp": "2026-05-08T22:44:35.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4c85c78d-1ed8-4237-9357-84f3c447bd34/export</guid>
      <pubDate>Fri, 08 May 2026 22:44:35 +0000</pubDate>
    </item>
    <item>
      <title>2ba6ff41-1036-431a-89e9-6cc7fcc59422</title>
      <link>https://vulnerability.circl.lu/sighting/2ba6ff41-1036-431a-89e9-6cc7fcc59422/export</link>
      <description>{"uuid": "2ba6ff41-1036-431a-89e9-6cc7fcc59422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44317", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wwqh-7jm5-gj7w", "content": "", "creation_timestamp": "2026-05-08T22:40:11.000000Z"}</description>
      <content:encoded>{"uuid": "2ba6ff41-1036-431a-89e9-6cc7fcc59422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44317", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wwqh-7jm5-gj7w", "content": "", "creation_timestamp": "2026-05-08T22:40:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2ba6ff41-1036-431a-89e9-6cc7fcc59422/export</guid>
      <pubDate>Fri, 08 May 2026 22:40:11 +0000</pubDate>
    </item>
    <item>
      <title>1579e6f5-b23a-41e2-a1ff-d96975449982</title>
      <link>https://vulnerability.circl.lu/sighting/1579e6f5-b23a-41e2-a1ff-d96975449982/export</link>
      <description>{"uuid": "1579e6f5-b23a-41e2-a1ff-d96975449982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44316", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wr8j-6chw-gm6p", "content": "", "creation_timestamp": "2026-05-08T22:39:43.000000Z"}</description>
      <content:encoded>{"uuid": "1579e6f5-b23a-41e2-a1ff-d96975449982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44316", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wr8j-6chw-gm6p", "content": "", "creation_timestamp": "2026-05-08T22:39:43.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1579e6f5-b23a-41e2-a1ff-d96975449982/export</guid>
      <pubDate>Fri, 08 May 2026 22:39:43 +0000</pubDate>
    </item>
  </channel>
</rss>
