<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 02 Sep 2026 03:37:59 +0000</lastBuildDate>
    <item>
      <title>9bd37b50-f719-4fe9-ba74-706cb4f86a72</title>
      <link>https://vulnerability.circl.lu/sighting/9bd37b50-f719-4fe9-ba74-706cb4f86a72/export</link>
      <description>{"uuid": "9bd37b50-f719-4fe9-ba74-706cb4f86a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.375604Z"}</description>
      <content:encoded>{"uuid": "9bd37b50-f719-4fe9-ba74-706cb4f86a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.375604Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9bd37b50-f719-4fe9-ba74-706cb4f86a72/export</guid>
      <pubDate>Sun, 30 Aug 2026 00:00:38 +0000</pubDate>
    </item>
    <item>
      <title>bcff94a9-c237-4160-80d2-e447f738c7e0</title>
      <link>https://vulnerability.circl.lu/sighting/bcff94a9-c237-4160-80d2-e447f738c7e0/export</link>
      <description>{"uuid": "bcff94a9-c237-4160-80d2-e447f738c7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.614630Z"}</description>
      <content:encoded>{"uuid": "bcff94a9-c237-4160-80d2-e447f738c7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.614630Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bcff94a9-c237-4160-80d2-e447f738c7e0/export</guid>
      <pubDate>Sat, 29 Aug 2026 20:00:05 +0000</pubDate>
    </item>
    <item>
      <title>b3aa6b51-861b-4553-866f-7b816e6abd4b</title>
      <link>https://vulnerability.circl.lu/sighting/b3aa6b51-861b-4553-866f-7b816e6abd4b/export</link>
      <description>{"uuid": "b3aa6b51-861b-4553-866f-7b816e6abd4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.528689Z"}</description>
      <content:encoded>{"uuid": "b3aa6b51-861b-4553-866f-7b816e6abd4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.528689Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b3aa6b51-861b-4553-866f-7b816e6abd4b/export</guid>
      <pubDate>Sun, 16 Aug 2026 00:00:21 +0000</pubDate>
    </item>
    <item>
      <title>a21e4a98-11d8-4db2-9cc5-08f5a94ad155</title>
      <link>https://vulnerability.circl.lu/sighting/a21e4a98-11d8-4db2-9cc5-08f5a94ad155/export</link>
      <description>{"uuid": "a21e4a98-11d8-4db2-9cc5-08f5a94ad155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-15T08:00:07.804862Z"}</description>
      <content:encoded>{"uuid": "a21e4a98-11d8-4db2-9cc5-08f5a94ad155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-15T08:00:07.804862Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a21e4a98-11d8-4db2-9cc5-08f5a94ad155/export</guid>
      <pubDate>Sat, 15 Aug 2026 08:00:07 +0000</pubDate>
    </item>
    <item>
      <title>919a7290-8c63-4398-a461-c1260b39d8b5</title>
      <link>https://vulnerability.circl.lu/sighting/919a7290-8c63-4398-a461-c1260b39d8b5/export</link>
      <description>{"uuid": "919a7290-8c63-4398-a461-c1260b39d8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msz35jdqeb2x", "content": "\ud83d\udccc CVE-2026-48362 - ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could resul... https://www.cyberhub.blog/cves/CVE-2026-48362", "creation_timestamp": "2026-08-14T02:07:06.879946Z"}</description>
      <content:encoded>{"uuid": "919a7290-8c63-4398-a461-c1260b39d8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msz35jdqeb2x", "content": "\ud83d\udccc CVE-2026-48362 - ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could resul... https://www.cyberhub.blog/cves/CVE-2026-48362", "creation_timestamp": "2026-08-14T02:07:06.879946Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/919a7290-8c63-4398-a461-c1260b39d8b5/export</guid>
      <pubDate>Fri, 14 Aug 2026 02:07:06 +0000</pubDate>
    </item>
    <item>
      <title>e29702fc-d54b-49ff-9075-4c139d4e7cdc</title>
      <link>https://vulnerability.circl.lu/sighting/e29702fc-d54b-49ff-9075-4c139d4e7cdc/export</link>
      <description>{"uuid": "e29702fc-d54b-49ff-9075-4c139d4e7cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msxgtrqfkz2d", "content": "CVE-2026-48362 is trending. Hype score 3, currently #10 on cvemon.\n\nColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-48362", "creation_timestamp": "2026-08-13T10:31:05.329735Z"}</description>
      <content:encoded>{"uuid": "e29702fc-d54b-49ff-9075-4c139d4e7cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msxgtrqfkz2d", "content": "CVE-2026-48362 is trending. Hype score 3, currently #10 on cvemon.\n\nColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-48362", "creation_timestamp": "2026-08-13T10:31:05.329735Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e29702fc-d54b-49ff-9075-4c139d4e7cdc/export</guid>
      <pubDate>Thu, 13 Aug 2026 10:31:05 +0000</pubDate>
    </item>
    <item>
      <title>1bf9cf11-4ffb-42c6-8a55-d8854ebcee88</title>
      <link>https://vulnerability.circl.lu/sighting/1bf9cf11-4ffb-42c6-8a55-d8854ebcee88/export</link>
      <description>{"uuid": "1bf9cf11-4ffb-42c6-8a55-d8854ebcee88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html", "content": "Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.\n\nThe most severe of the flaws are listed below -\n\n\n  CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could", "creation_timestamp": "2026-08-13T01:00:35.445462Z"}</description>
      <content:encoded>{"uuid": "1bf9cf11-4ffb-42c6-8a55-d8854ebcee88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html", "content": "Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.\n\nThe most severe of the flaws are listed below -\n\n\n  CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could", "creation_timestamp": "2026-08-13T01:00:35.445462Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1bf9cf11-4ffb-42c6-8a55-d8854ebcee88/export</guid>
      <pubDate>Thu, 13 Aug 2026 01:00:35 +0000</pubDate>
    </item>
    <item>
      <title>f0d5f206-dd02-45f9-85bc-bf930f85a27f</title>
      <link>https://vulnerability.circl.lu/sighting/f0d5f206-dd02-45f9-85bc-bf930f85a27f/export</link>
      <description>{"uuid": "f0d5f206-dd02-45f9-85bc-bf930f85a27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html", "content": "Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.\n\nThe most severe of the flaws are listed below -\n\n\n  CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could", "creation_timestamp": "2026-08-12T13:02:06.995434Z"}</description>
      <content:encoded>{"uuid": "f0d5f206-dd02-45f9-85bc-bf930f85a27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html", "content": "Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.\n\nThe most severe of the flaws are listed below -\n\n\n  CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could", "creation_timestamp": "2026-08-12T13:02:06.995434Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f0d5f206-dd02-45f9-85bc-bf930f85a27f/export</guid>
      <pubDate>Wed, 12 Aug 2026 13:02:06 +0000</pubDate>
    </item>
    <item>
      <title>1e76820b-d6a0-4ebc-b0ad-c5c8cb4ec8cb</title>
      <link>https://vulnerability.circl.lu/sighting/1e76820b-d6a0-4ebc-b0ad-c5c8cb4ec8cb/export</link>
      <description>{"uuid": "1e76820b-d6a0-4ebc-b0ad-c5c8cb4ec8cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstelly3tl2b", "content": "CVE-2026-48362 - coldfusion 2025\nAn attacker can run unauthorized code on your ColdFusion server without needing user interaction, potentially causing damage or disruption. This vulnerability affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-08-11T19:40:04.277830Z"}</description>
      <content:encoded>{"uuid": "1e76820b-d6a0-4ebc-b0ad-c5c8cb4ec8cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstelly3tl2b", "content": "CVE-2026-48362 - coldfusion 2025\nAn attacker can run unauthorized code on your ColdFusion server without needing user interaction, potentially causing damage or disruption. This vulnerability affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-08-11T19:40:04.277830Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1e76820b-d6a0-4ebc-b0ad-c5c8cb4ec8cb/export</guid>
      <pubDate>Tue, 11 Aug 2026 19:40:04 +0000</pubDate>
    </item>
  </channel>
</rss>
