<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 28 May 2026 18:25:20 +0000</lastBuildDate>
    <item>
      <title>94915968-12b4-470a-a1e0-716f8d0ecd85</title>
      <link>https://vulnerability.circl.lu/sighting/94915968-12b4-470a-a1e0-716f8d0ecd85/export</link>
      <description>{"uuid": "94915968-12b4-470a-a1e0-716f8d0ecd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhnbxfeion2n", "content": "", "creation_timestamp": "2026-03-22T09:59:52.659794Z"}</description>
      <content:encoded>{"uuid": "94915968-12b4-470a-a1e0-716f8d0ecd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhnbxfeion2n", "content": "", "creation_timestamp": "2026-03-22T09:59:52.659794Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/94915968-12b4-470a-a1e0-716f8d0ecd85/export</guid>
      <pubDate>Sun, 22 Mar 2026 09:59:52 +0000</pubDate>
    </item>
    <item>
      <title>cefcf264-a666-4b7d-a4a4-9b3f48a526af</title>
      <link>https://vulnerability.circl.lu/sighting/cefcf264-a666-4b7d-a4a4-9b3f48a526af/export</link>
      <description>{"uuid": "cefcf264-a666-4b7d-a4a4-9b3f48a526af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4543", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116272360861679204", "content": "", "creation_timestamp": "2026-03-22T10:30:29.830415Z"}</description>
      <content:encoded>{"uuid": "cefcf264-a666-4b7d-a4a4-9b3f48a526af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4543", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116272360861679204", "content": "", "creation_timestamp": "2026-03-22T10:30:29.830415Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cefcf264-a666-4b7d-a4a4-9b3f48a526af/export</guid>
      <pubDate>Sun, 22 Mar 2026 10:30:29 +0000</pubDate>
    </item>
    <item>
      <title>7e8856a3-0fa6-4639-97d5-bd8872dc656e</title>
      <link>https://vulnerability.circl.lu/sighting/7e8856a3-0fa6-4639-97d5-bd8872dc656e/export</link>
      <description>{"uuid": "7e8856a3-0fa6-4639-97d5-bd8872dc656e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4543", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhndo5yzo22o", "content": "", "creation_timestamp": "2026-03-22T10:30:30.818297Z"}</description>
      <content:encoded>{"uuid": "7e8856a3-0fa6-4639-97d5-bd8872dc656e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4543", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhndo5yzo22o", "content": "", "creation_timestamp": "2026-03-22T10:30:30.818297Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7e8856a3-0fa6-4639-97d5-bd8872dc656e/export</guid>
      <pubDate>Sun, 22 Mar 2026 10:30:30 +0000</pubDate>
    </item>
    <item>
      <title>bd7e55ef-297d-4b83-9586-9b84b38e1617</title>
      <link>https://vulnerability.circl.lu/sighting/bd7e55ef-297d-4b83-9586-9b84b38e1617/export</link>
      <description>{"uuid": "bd7e55ef-297d-4b83-9586-9b84b38e1617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlmzhu6mkl2e", "content": "CVE-2026-45430 - Salesforce Backdrop CMS CSRF Authorization Bypass\nCVE ID : CVE-2026-45430\n \n Published : May 12, 2026, 4:16 a.m. | 14\u00a0minutes ago\n \n Description : The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect...", "creation_timestamp": "2026-05-12T05:08:47.836663Z"}</description>
      <content:encoded>{"uuid": "bd7e55ef-297d-4b83-9586-9b84b38e1617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlmzhu6mkl2e", "content": "CVE-2026-45430 - Salesforce Backdrop CMS CSRF Authorization Bypass\nCVE ID : CVE-2026-45430\n \n Published : May 12, 2026, 4:16 a.m. | 14\u00a0minutes ago\n \n Description : The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect...", "creation_timestamp": "2026-05-12T05:08:47.836663Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bd7e55ef-297d-4b83-9586-9b84b38e1617/export</guid>
      <pubDate>Tue, 12 May 2026 05:08:47 +0000</pubDate>
    </item>
    <item>
      <title>49170e9b-f634-417f-bdfd-7232ab7cb412</title>
      <link>https://vulnerability.circl.lu/sighting/49170e9b-f634-417f-bdfd-7232ab7cb412/export</link>
      <description>{"uuid": "49170e9b-f634-417f-bdfd-7232ab7cb412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45434", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116600774685376629", "content": "\ud83d\udea8 CRITICAL: CVE-2026-45434 in Apache OFBiz (pre-24.09.06) allows attackers to bypass authentication and execute code remotely. No known exploits yet, but upgrade now to 24.09.06+ for protection. https://radar.offseq.com/threat/cve-2026-45434-cwe-287-improper-authentication-in--047a8a00 #OffSeq #CVE202645434 #ApacheOFBiz #infosec", "creation_timestamp": "2026-05-19T10:30:26.898854Z"}</description>
      <content:encoded>{"uuid": "49170e9b-f634-417f-bdfd-7232ab7cb412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45434", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116600774685376629", "content": "\ud83d\udea8 CRITICAL: CVE-2026-45434 in Apache OFBiz (pre-24.09.06) allows attackers to bypass authentication and execute code remotely. No known exploits yet, but upgrade now to 24.09.06+ for protection. https://radar.offseq.com/threat/cve-2026-45434-cwe-287-improper-authentication-in--047a8a00 #OffSeq #CVE202645434 #ApacheOFBiz #infosec", "creation_timestamp": "2026-05-19T10:30:26.898854Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/49170e9b-f634-417f-bdfd-7232ab7cb412/export</guid>
      <pubDate>Tue, 19 May 2026 10:30:26 +0000</pubDate>
    </item>
    <item>
      <title>2720ba19-9ebb-45b7-a9ad-2bf4b17172d2</title>
      <link>https://vulnerability.circl.lu/sighting/2720ba19-9ebb-45b7-a9ad-2bf4b17172d2/export</link>
      <description>{"uuid": "2720ba19-9ebb-45b7-a9ad-2bf4b17172d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45434", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mm76pj6yzv2j", "content": "Apache OFBiz faces a CRITICAL auth flaw (CVE-2026-45434) pre-24.09.06. Remote code execution possible \u2014 no exploits seen yet. Upgrade to 24.09.06+ ASAP! https://radar.offseq.com/threat/cve-2026-45434-cwe-287-improper-authentication-in--047a8a00 #OffSeq #ApacheOFBiz #vuln", "creation_timestamp": "2026-05-19T10:30:29.917456Z"}</description>
      <content:encoded>{"uuid": "2720ba19-9ebb-45b7-a9ad-2bf4b17172d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45434", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mm76pj6yzv2j", "content": "Apache OFBiz faces a CRITICAL auth flaw (CVE-2026-45434) pre-24.09.06. Remote code execution possible \u2014 no exploits seen yet. Upgrade to 24.09.06+ ASAP! https://radar.offseq.com/threat/cve-2026-45434-cwe-287-improper-authentication-in--047a8a00 #OffSeq #ApacheOFBiz #vuln", "creation_timestamp": "2026-05-19T10:30:29.917456Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2720ba19-9ebb-45b7-a9ad-2bf4b17172d2/export</guid>
      <pubDate>Tue, 19 May 2026 10:30:29 +0000</pubDate>
    </item>
    <item>
      <title>82007117-2002-4b00-a602-141807b5a711</title>
      <link>https://vulnerability.circl.lu/sighting/82007117-2002-4b00-a602-141807b5a711/export</link>
      <description>{"uuid": "82007117-2002-4b00-a602-141807b5a711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45434", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7xaheq4t2z", "content": "CVE-2026-45434: Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE", "creation_timestamp": "2026-05-19T17:49:26.849091Z"}</description>
      <content:encoded>{"uuid": "82007117-2002-4b00-a602-141807b5a711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45434", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7xaheq4t2z", "content": "CVE-2026-45434: Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE", "creation_timestamp": "2026-05-19T17:49:26.849091Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/82007117-2002-4b00-a602-141807b5a711/export</guid>
      <pubDate>Tue, 19 May 2026 17:49:26 +0000</pubDate>
    </item>
    <item>
      <title>50e40544-c91f-40b6-9971-6997f9e6bfb8</title>
      <link>https://vulnerability.circl.lu/sighting/50e40544-c91f-40b6-9971-6997f9e6bfb8/export</link>
      <description>{"uuid": "50e40544-c91f-40b6-9971-6997f9e6bfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45430", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mmalh2iywd2i", "content": "Breaking OAuth Trust: An Analysis of CVE-2026\u201345430 in Backdrop CMS\n\nhttps://medium.com/@me5476793/breaking-oauth-trust-an-analysis-of-cve-2026-45430-in-backdrop-cms-67192dd3d9ab?source=rss------bug_bounty-5", "creation_timestamp": "2026-05-19T23:51:03.786082Z"}</description>
      <content:encoded>{"uuid": "50e40544-c91f-40b6-9971-6997f9e6bfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45430", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mmalh2iywd2i", "content": "Breaking OAuth Trust: An Analysis of CVE-2026\u201345430 in Backdrop CMS\n\nhttps://medium.com/@me5476793/breaking-oauth-trust-an-analysis-of-cve-2026-45430-in-backdrop-cms-67192dd3d9ab?source=rss------bug_bounty-5", "creation_timestamp": "2026-05-19T23:51:03.786082Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/50e40544-c91f-40b6-9971-6997f9e6bfb8/export</guid>
      <pubDate>Tue, 19 May 2026 23:51:03 +0000</pubDate>
    </item>
    <item>
      <title>320b973e-dfaa-4d39-9bbe-f5514667121d</title>
      <link>https://vulnerability.circl.lu/sighting/320b973e-dfaa-4d39-9bbe-f5514667121d/export</link>
      <description>{"uuid": "320b973e-dfaa-4d39-9bbe-f5514667121d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45434", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmeezy6en42u", "content": "Apache OFBiz RCE\u306e\u8106\u5f31\u6027\u304c\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4\u5236\u9650\u3092\u60aa\u7528\u3057\u3066\u8a8d\u8a3c\u3092\u56de\u907f\n\nApache OFBiz\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u5f37\u5236\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4\u30d5\u30ed\u30fc\u3092\u4e57\u3063\u53d6\u308a\u3001\u5358\u4e00\u306eHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u4ecb\u3057\u3066\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u3092\u9054\u6210\u3067\u304d\u307e\u3059\u300224.09.06\u3088\u308a\u524d\u306e\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u3059\u3002 CVE ID: CVE-2026-45434 CVSS 3.1\u30b9\u30b3\u30a2: 8.", "creation_timestamp": "2026-05-21T12:07:01.217545Z"}</description>
      <content:encoded>{"uuid": "320b973e-dfaa-4d39-9bbe-f5514667121d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45434", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmeezy6en42u", "content": "Apache OFBiz RCE\u306e\u8106\u5f31\u6027\u304c\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4\u5236\u9650\u3092\u60aa\u7528\u3057\u3066\u8a8d\u8a3c\u3092\u56de\u907f\n\nApache OFBiz\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u5f37\u5236\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4\u30d5\u30ed\u30fc\u3092\u4e57\u3063\u53d6\u308a\u3001\u5358\u4e00\u306eHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u4ecb\u3057\u3066\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u3092\u9054\u6210\u3067\u304d\u307e\u3059\u300224.09.06\u3088\u308a\u524d\u306e\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u3059\u3002 CVE ID: CVE-2026-45434 CVSS 3.1\u30b9\u30b3\u30a2: 8.", "creation_timestamp": "2026-05-21T12:07:01.217545Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/320b973e-dfaa-4d39-9bbe-f5514667121d/export</guid>
      <pubDate>Thu, 21 May 2026 12:07:01 +0000</pubDate>
    </item>
  </channel>
</rss>
