<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 30 May 2026 07:09:18 +0000</lastBuildDate>
    <item>
      <title>8c98d8a6-84ea-4c99-bff6-a240df8e5aea</title>
      <link>https://vulnerability.circl.lu/sighting/8c98d8a6-84ea-4c99-bff6-a240df8e5aea/export</link>
      <description>{"uuid": "8c98d8a6-84ea-4c99-bff6-a240df8e5aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45667", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-m69w-p7m4-585j", "content": "", "creation_timestamp": "2026-05-11T19:07:10.000000Z"}</description>
      <content:encoded>{"uuid": "8c98d8a6-84ea-4c99-bff6-a240df8e5aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45667", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-m69w-p7m4-585j", "content": "", "creation_timestamp": "2026-05-11T19:07:10.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8c98d8a6-84ea-4c99-bff6-a240df8e5aea/export</guid>
      <pubDate>Mon, 11 May 2026 19:07:10 +0000</pubDate>
    </item>
    <item>
      <title>7a50255a-dcba-4a81-9b2b-3219d85649ff</title>
      <link>https://vulnerability.circl.lu/sighting/7a50255a-dcba-4a81-9b2b-3219d85649ff/export</link>
      <description>{"uuid": "7a50255a-dcba-4a81-9b2b-3219d85649ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45667", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlwlgnytx32i", "content": "CVE-2026-45667 - Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)\nCVE ID : CVE-2026-45667\n \n Published : May 15, 2026, 10:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Open WebUI is a self-hosted artificial intelligence platform designed to ...", "creation_timestamp": "2026-05-16T00:24:12.628754Z"}</description>
      <content:encoded>{"uuid": "7a50255a-dcba-4a81-9b2b-3219d85649ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45667", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlwlgnytx32i", "content": "CVE-2026-45667 - Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)\nCVE ID : CVE-2026-45667\n \n Published : May 15, 2026, 10:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Open WebUI is a self-hosted artificial intelligence platform designed to ...", "creation_timestamp": "2026-05-16T00:24:12.628754Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7a50255a-dcba-4a81-9b2b-3219d85649ff/export</guid>
      <pubDate>Sat, 16 May 2026 00:24:12 +0000</pubDate>
    </item>
    <item>
      <title>52fd930d-99fa-4160-ba34-653bbfaad97e</title>
      <link>https://vulnerability.circl.lu/sighting/52fd930d-99fa-4160-ba34-653bbfaad97e/export</link>
      <description>{"uuid": "52fd930d-99fa-4160-ba34-653bbfaad97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlwmkigryb2e", "content": "CVE-2026-45665 - Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order\nCVE ID : CVE-2026-45665\n \n Published : May 15, 2026, 10:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Open WebUI is a self-hosted artificial intelligence platform designed to operat...", "creation_timestamp": "2026-05-16T00:45:51.124560Z"}</description>
      <content:encoded>{"uuid": "52fd930d-99fa-4160-ba34-653bbfaad97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlwmkigryb2e", "content": "CVE-2026-45665 - Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order\nCVE ID : CVE-2026-45665\n \n Published : May 15, 2026, 10:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Open WebUI is a self-hosted artificial intelligence platform designed to operat...", "creation_timestamp": "2026-05-16T00:45:51.124560Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/52fd930d-99fa-4160-ba34-653bbfaad97e/export</guid>
      <pubDate>Sat, 16 May 2026 00:45:51 +0000</pubDate>
    </item>
    <item>
      <title>6fd51006-c811-4dcc-ad64-7662e693d64a</title>
      <link>https://vulnerability.circl.lu/sighting/6fd51006-c811-4dcc-ad64-7662e693d64a/export</link>
      <description>{"uuid": "6fd51006-c811-4dcc-ad64-7662e693d64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45669", "type": "published-proof-of-concept", "source": "https://github.com/nuxt/nuxt/security/advisories/GHSA-fx6j-w5w5-h468", "content": "", "creation_timestamp": "2026-05-18T11:07:53.000000Z"}</description>
      <content:encoded>{"uuid": "6fd51006-c811-4dcc-ad64-7662e693d64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45669", "type": "published-proof-of-concept", "source": "https://github.com/nuxt/nuxt/security/advisories/GHSA-fx6j-w5w5-h468", "content": "", "creation_timestamp": "2026-05-18T11:07:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6fd51006-c811-4dcc-ad64-7662e693d64a/export</guid>
      <pubDate>Mon, 18 May 2026 11:07:53 +0000</pubDate>
    </item>
    <item>
      <title>f99f71cc-6f15-4b18-a5e0-566080952764</title>
      <link>https://vulnerability.circl.lu/sighting/f99f71cc-6f15-4b18-a5e0-566080952764/export</link>
      <description>{"uuid": "f99f71cc-6f15-4b18-a5e0-566080952764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4566", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmxrcjp5ki23", "content": "\ud83d\udccc CVE-2026-4566 - A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulat... https://www.cyberhub.blog/cves/CVE-2026-4566", "creation_timestamp": "2026-05-29T05:07:07.823329Z"}</description>
      <content:encoded>{"uuid": "f99f71cc-6f15-4b18-a5e0-566080952764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4566", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmxrcjp5ki23", "content": "\ud83d\udccc CVE-2026-4566 - A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulat... https://www.cyberhub.blog/cves/CVE-2026-4566", "creation_timestamp": "2026-05-29T05:07:07.823329Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f99f71cc-6f15-4b18-a5e0-566080952764/export</guid>
      <pubDate>Fri, 29 May 2026 05:07:07 +0000</pubDate>
    </item>
    <item>
      <title>da12445f-8987-47c4-a0ab-18fda498b271</title>
      <link>https://vulnerability.circl.lu/sighting/da12445f-8987-47c4-a0ab-18fda498b271/export</link>
      <description>{"uuid": "da12445f-8987-47c4-a0ab-18fda498b271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45662", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyz6act6z2v", "content": "\ud83d\udfe0 CVE-2026-45662 - High (8.8)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.0 and earlier, the deleteR...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45662/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T17:00:34.534032Z"}</description>
      <content:encoded>{"uuid": "da12445f-8987-47c4-a0ab-18fda498b271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45662", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyz6act6z2v", "content": "\ud83d\udfe0 CVE-2026-45662 - High (8.8)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.0 and earlier, the deleteR...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45662/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T17:00:34.534032Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/da12445f-8987-47c4-a0ab-18fda498b271/export</guid>
      <pubDate>Fri, 29 May 2026 17:00:34 +0000</pubDate>
    </item>
    <item>
      <title>9ed41954-2bfe-4c52-bc07-f7ffeb70443a</title>
      <link>https://vulnerability.circl.lu/sighting/9ed41954-2bfe-4c52-bc07-f7ffeb70443a/export</link>
      <description>{"uuid": "9ed41954-2bfe-4c52-bc07-f7ffeb70443a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45663", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyz6hazlc2d", "content": "\ud83d\udd34 CVE-2026-45663 - Critical (9.9)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.1 and earlier, a command i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45663/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T17:00:41.318067Z"}</description>
      <content:encoded>{"uuid": "9ed41954-2bfe-4c52-bc07-f7ffeb70443a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45663", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyz6hazlc2d", "content": "\ud83d\udd34 CVE-2026-45663 - Critical (9.9)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.1 and earlier, a command i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45663/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T17:00:41.318067Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9ed41954-2bfe-4c52-bc07-f7ffeb70443a/export</guid>
      <pubDate>Fri, 29 May 2026 17:00:41 +0000</pubDate>
    </item>
    <item>
      <title>4aa2ca38-e256-4ff2-b6bb-9019f6f63abf</title>
      <link>https://vulnerability.circl.lu/sighting/4aa2ca38-e256-4ff2-b6bb-9019f6f63abf/export</link>
      <description>{"uuid": "4aa2ca38-e256-4ff2-b6bb-9019f6f63abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzebcqru52h", "content": "CVE-2026-45661 - Dokploy: Remote Code Execution through Path Traversal\nCVE ID : CVE-2026-45661\n \n Published : May 29, 2026, 6:17 p.m. | 54\u00a0minutes ago\n \n Description : Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path travers...", "creation_timestamp": "2026-05-29T20:19:07.895907Z"}</description>
      <content:encoded>{"uuid": "4aa2ca38-e256-4ff2-b6bb-9019f6f63abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzebcqru52h", "content": "CVE-2026-45661 - Dokploy: Remote Code Execution through Path Traversal\nCVE ID : CVE-2026-45661\n \n Published : May 29, 2026, 6:17 p.m. | 54\u00a0minutes ago\n \n Description : Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path travers...", "creation_timestamp": "2026-05-29T20:19:07.895907Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4aa2ca38-e256-4ff2-b6bb-9019f6f63abf/export</guid>
      <pubDate>Fri, 29 May 2026 20:19:07 +0000</pubDate>
    </item>
    <item>
      <title>67d6e7b2-f64b-4229-83d7-2cbfa31e6fa4</title>
      <link>https://vulnerability.circl.lu/sighting/67d6e7b2-f64b-4229-83d7-2cbfa31e6fa4/export</link>
      <description>{"uuid": "67d6e7b2-f64b-4229-83d7-2cbfa31e6fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzgibblfi2g", "content": "CVE-2026-45668 - Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)\nCVE ID : CVE-2026-45668\n \n Published : May 29, 2026, 6:17 p.m. | 54\u00a0minutes ago\n \n Description : Trilium Notes is a cross-platform, hierarchical note taking application focuse...", "creation_timestamp": "2026-05-29T20:58:48.578019Z"}</description>
      <content:encoded>{"uuid": "67d6e7b2-f64b-4229-83d7-2cbfa31e6fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzgibblfi2g", "content": "CVE-2026-45668 - Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)\nCVE ID : CVE-2026-45668\n \n Published : May 29, 2026, 6:17 p.m. | 54\u00a0minutes ago\n \n Description : Trilium Notes is a cross-platform, hierarchical note taking application focuse...", "creation_timestamp": "2026-05-29T20:58:48.578019Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/67d6e7b2-f64b-4229-83d7-2cbfa31e6fa4/export</guid>
      <pubDate>Fri, 29 May 2026 20:58:48 +0000</pubDate>
    </item>
    <item>
      <title>ed010e79-158b-4e84-9dd1-6ae0f6e4269d</title>
      <link>https://vulnerability.circl.lu/sighting/ed010e79-158b-4e84-9dd1-6ae0f6e4269d/export</link>
      <description>{"uuid": "ed010e79-158b-4e84-9dd1-6ae0f6e4269d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45661", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn2632dgwx2g", "content": "\ud83d\udd34 CVE-2026-45661 - Critical (9.9)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45661/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-30T04:00:55.721576Z"}</description>
      <content:encoded>{"uuid": "ed010e79-158b-4e84-9dd1-6ae0f6e4269d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45661", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn2632dgwx2g", "content": "\ud83d\udd34 CVE-2026-45661 - Critical (9.9)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45661/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-30T04:00:55.721576Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ed010e79-158b-4e84-9dd1-6ae0f6e4269d/export</guid>
      <pubDate>Sat, 30 May 2026 04:00:55 +0000</pubDate>
    </item>
  </channel>
</rss>
