https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 12 Sep 2026 06:58:03 +0000 https://vulnerability.circl.lu/sighting/9512ec11-bd61-4eb3-a165-7b2af635e3b7/export {"uuid": "9512ec11-bd61-4eb3-a165-7b2af635e3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbaf6pqrd2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: SkillTree is a micro-learning gamification platform\nCVSS 9.6\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:33.704889Z"} {"uuid": "9512ec11-bd61-4eb3-a165-7b2af635e3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbaf6pqrd2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: SkillTree is a micro-learning gamification platform\nCVSS 9.6\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:33.704889Z"} https://vulnerability.circl.lu/sighting/9512ec11-bd61-4eb3-a165-7b2af635e3b7/export Fri, 11 Sep 2026 18:52:33 +0000 https://vulnerability.circl.lu/sighting/959ddbeb-12c3-472d-958d-c206e4f9f588/export {"uuid": "959ddbeb-12c3-472d-958d-c206e4f9f588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjjk3zs2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVSS 9.6 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T14:44:26.770649Z"} {"uuid": "959ddbeb-12c3-472d-958d-c206e4f9f588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjjk3zs2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVSS 9.6 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T14:44:26.770649Z"} https://vulnerability.circl.lu/sighting/959ddbeb-12c3-472d-958d-c206e4f9f588/export Fri, 11 Sep 2026 14:44:26 +0000 https://vulnerability.circl.lu/sighting/451e796f-816c-4099-86c2-c9a8d5bb13da/export {"uuid": "451e796f-816c-4099-86c2-c9a8d5bb13da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahz6dgxo2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVSS 9.6 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T11:36:21.939827Z"} {"uuid": "451e796f-816c-4099-86c2-c9a8d5bb13da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahz6dgxo2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-54694: NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVSS 9.6 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-54694\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T11:36:21.939827Z"} https://vulnerability.circl.lu/sighting/451e796f-816c-4099-86c2-c9a8d5bb13da/export Fri, 11 Sep 2026 11:36:21 +0000 https://vulnerability.circl.lu/sighting/a5e2936e-7e79-4b78-8dc8-5c2b197f941c/export {"uuid": "a5e2936e-7e79-4b78-8dc8-5c2b197f941c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4ntsaox525", "content": "CVE-2026-54694 - skills-service\nSkillTree versions before 4.4.2 let a user store raw text in their name fields, which is later shown on a quiz page without cleaning it. An attacker can register with a specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#skillsservice #CVE #infosec", "creation_timestamp": "2026-09-09T23:10:04.207030Z"} {"uuid": "a5e2936e-7e79-4b78-8dc8-5c2b197f941c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4ntsaox525", "content": "CVE-2026-54694 - skills-service\nSkillTree versions before 4.4.2 let a user store raw text in their name fields, which is later shown on a quiz page without cleaning it. An attacker can register with a specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#skillsservice #CVE #infosec", "creation_timestamp": "2026-09-09T23:10:04.207030Z"} https://vulnerability.circl.lu/sighting/a5e2936e-7e79-4b78-8dc8-5c2b197f941c/export Wed, 09 Sep 2026 23:10:04 +0000 https://vulnerability.circl.lu/sighting/b0b73db5-076c-4a05-9124-34147ad4061c/export {"uuid": "b0b73db5-076c-4a05-9124-34147ad4061c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv4dniwvyn2j", "content": "\ud83d\udea8 CVE-2026-54694 \u2014 CVSS 9.6 CRITICAL\n\nSkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws com...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54694\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T20:07:35.660862Z"} {"uuid": "b0b73db5-076c-4a05-9124-34147ad4061c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv4dniwvyn2j", "content": "\ud83d\udea8 CVE-2026-54694 \u2014 CVSS 9.6 CRITICAL\n\nSkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws com...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54694\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T20:07:35.660862Z"} https://vulnerability.circl.lu/sighting/b0b73db5-076c-4a05-9124-34147ad4061c/export Wed, 09 Sep 2026 20:07:35 +0000 https://vulnerability.circl.lu/sighting/6e36c635-ca19-4d3c-89fe-a50690263471/export {"uuid": "6e36c635-ca19-4d3c-89fe-a50690263471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4dblktp72w", "content": "\ud83d\udd34 CVE-2026-54694 - Critical (9.6)\n\nSkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54694/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T20:00:56.887615Z"} {"uuid": "6e36c635-ca19-4d3c-89fe-a50690263471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4dblktp72w", "content": "\ud83d\udd34 CVE-2026-54694 - Critical (9.6)\n\nSkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54694/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T20:00:56.887615Z"} https://vulnerability.circl.lu/sighting/6e36c635-ca19-4d3c-89fe-a50690263471/export Wed, 09 Sep 2026 20:00:56 +0000 https://vulnerability.circl.lu/sighting/2ccb92bf-6be2-41c3-aa40-163e20d8a766/export {"uuid": "2ccb92bf-6be2-41c3-aa40-163e20d8a766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ewnnnaseqi6h5", "content": "CVE-2026-54694 - NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVE ID : CVE-2026-54694\n \n Published : Sept. 9, 2026, 7:17 p.m. | 18\u00a0minutes ago\n \n Description : SkillTree is a micro-learning gamification platform. Pr...", "creation_timestamp": "2026-09-09T19:46:53.941569Z"} {"uuid": "2ccb92bf-6be2-41c3-aa40-163e20d8a766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ewnnnaseqi6h5", "content": "CVE-2026-54694 - NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover\nCVE ID : CVE-2026-54694\n \n Published : Sept. 9, 2026, 7:17 p.m. | 18\u00a0minutes ago\n \n Description : SkillTree is a micro-learning gamification platform. Pr...", "creation_timestamp": "2026-09-09T19:46:53.941569Z"} https://vulnerability.circl.lu/sighting/2ccb92bf-6be2-41c3-aa40-163e20d8a766/export Wed, 09 Sep 2026 19:46:53 +0000