<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 01 Sep 2026 17:58:26 +0000</lastBuildDate>
    <item>
      <title>764ad49c-5296-4497-ac8d-610b2bd7abfc</title>
      <link>https://vulnerability.circl.lu/sighting/764ad49c-5296-4497-ac8d-610b2bd7abfc/export</link>
      <description>{"uuid": "764ad49c-5296-4497-ac8d-610b2bd7abfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "exploited", "source": "https://t.me/CyberDispatch/2570", "content": "SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch.", "creation_timestamp": "2026-08-30T00:00:38.280434Z"}</description>
      <content:encoded>{"uuid": "764ad49c-5296-4497-ac8d-610b2bd7abfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "exploited", "source": "https://t.me/CyberDispatch/2570", "content": "SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch.", "creation_timestamp": "2026-08-30T00:00:38.280434Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/764ad49c-5296-4497-ac8d-610b2bd7abfc/export</guid>
      <pubDate>Sun, 30 Aug 2026 00:00:38 +0000</pubDate>
    </item>
    <item>
      <title>b43ad564-ada2-4733-852e-404a7f8e1e08</title>
      <link>https://vulnerability.circl.lu/sighting/b43ad564-ada2-4733-852e-404a7f8e1e08/export</link>
      <description>{"uuid": "b43ad564-ada2-4733-852e-404a7f8e1e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://t.me/CyberDispatch/2570", "content": "SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch.", "creation_timestamp": "2026-08-29T20:00:05.710115Z"}</description>
      <content:encoded>{"uuid": "b43ad564-ada2-4733-852e-404a7f8e1e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://t.me/CyberDispatch/2570", "content": "SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch.", "creation_timestamp": "2026-08-29T20:00:05.710115Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b43ad564-ada2-4733-852e-404a7f8e1e08/export</guid>
      <pubDate>Sat, 29 Aug 2026 20:00:05 +0000</pubDate>
    </item>
    <item>
      <title>1ae5b0ca-9bfe-449e-a717-40d5ab64ed28</title>
      <link>https://vulnerability.circl.lu/sighting/1ae5b0ca-9bfe-449e-a717-40d5ab64ed28/export</link>
      <description>{"uuid": "1ae5b0ca-9bfe-449e-a717-40d5ab64ed28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mu4i5f2wsa2o", "content": "\ud83c\udfe2 SAP: Commerce Cloud CVE-2026-58231 \u2014 CVSS 10.0 unauth RCE, actively exploited in wild. No public PoC yet. Attackers targeting enterprise e-commerce platforms. SAP security note released \u2014 apply immediately. Src: Cybersecurity News", "creation_timestamp": "2026-08-28T04:02:51.548223Z"}</description>
      <content:encoded>{"uuid": "1ae5b0ca-9bfe-449e-a717-40d5ab64ed28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mu4i5f2wsa2o", "content": "\ud83c\udfe2 SAP: Commerce Cloud CVE-2026-58231 \u2014 CVSS 10.0 unauth RCE, actively exploited in wild. No public PoC yet. Attackers targeting enterprise e-commerce platforms. SAP security note released \u2014 apply immediately. Src: Cybersecurity News", "creation_timestamp": "2026-08-28T04:02:51.548223Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1ae5b0ca-9bfe-449e-a717-40d5ab64ed28/export</guid>
      <pubDate>Fri, 28 Aug 2026 04:02:51 +0000</pubDate>
    </item>
    <item>
      <title>1a49c43a-1dd4-4b77-904b-bf247ac5e187</title>
      <link>https://vulnerability.circl.lu/sighting/1a49c43a-1dd4-4b77-904b-bf247ac5e187/export</link>
      <description>{"uuid": "1a49c43a-1dd4-4b77-904b-bf247ac5e187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/495", "content": "CVE-2026-58231", "creation_timestamp": "2026-08-28T00:00:39.335130Z"}</description>
      <content:encoded>{"uuid": "1a49c43a-1dd4-4b77-904b-bf247ac5e187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/495", "content": "CVE-2026-58231", "creation_timestamp": "2026-08-28T00:00:39.335130Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1a49c43a-1dd4-4b77-904b-bf247ac5e187/export</guid>
      <pubDate>Fri, 28 Aug 2026 00:00:39 +0000</pubDate>
    </item>
    <item>
      <title>0890d470-c57b-42b8-8830-e76050c1323c</title>
      <link>https://vulnerability.circl.lu/sighting/0890d470-c57b-42b8-8830-e76050c1323c/export</link>
      <description>{"uuid": "0890d470-c57b-42b8-8830-e76050c1323c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/495", "content": "CVE-2026-58231", "creation_timestamp": "2026-08-27T15:00:05.671988Z"}</description>
      <content:encoded>{"uuid": "0890d470-c57b-42b8-8830-e76050c1323c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/495", "content": "CVE-2026-58231", "creation_timestamp": "2026-08-27T15:00:05.671988Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0890d470-c57b-42b8-8830-e76050c1323c/export</guid>
      <pubDate>Thu, 27 Aug 2026 15:00:05 +0000</pubDate>
    </item>
    <item>
      <title>385ec0d0-4563-4d79-a300-0baf4c93f15c</title>
      <link>https://vulnerability.circl.lu/sighting/385ec0d0-4563-4d79-a300-0baf4c93f15c/export</link>
      <description>{"uuid": "385ec0d0-4563-4d79-a300-0baf4c93f15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-25T00:00:05.308223Z"}</description>
      <content:encoded>{"uuid": "385ec0d0-4563-4d79-a300-0baf4c93f15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-25T00:00:05.308223Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/385ec0d0-4563-4d79-a300-0baf4c93f15c/export</guid>
      <pubDate>Tue, 25 Aug 2026 00:00:05 +0000</pubDate>
    </item>
    <item>
      <title>bb7936e4-354e-4db1-b9d6-5e6440e5a73e</title>
      <link>https://vulnerability.circl.lu/sighting/bb7936e4-354e-4db1-b9d6-5e6440e5a73e/export</link>
      <description>{"uuid": "bb7936e4-354e-4db1-b9d6-5e6440e5a73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.461113Z"}</description>
      <content:encoded>{"uuid": "bb7936e4-354e-4db1-b9d6-5e6440e5a73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.461113Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bb7936e4-354e-4db1-b9d6-5e6440e5a73e/export</guid>
      <pubDate>Mon, 24 Aug 2026 21:00:06 +0000</pubDate>
    </item>
    <item>
      <title>27ccc609-d67a-4819-8c9c-ba4c372c61a5</title>
      <link>https://vulnerability.circl.lu/sighting/27ccc609-d67a-4819-8c9c-ba4c372c61a5/export</link>
      <description>{"uuid": "27ccc609-d67a-4819-8c9c-ba4c372c61a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "exploited", "source": "https://t.me/information_security_channel/55751", "content": "Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure\nhttps://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/\n\nThe vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.\nThe post Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure (https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-24T00:00:09.386677Z"}</description>
      <content:encoded>{"uuid": "27ccc609-d67a-4819-8c9c-ba4c372c61a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "exploited", "source": "https://t.me/information_security_channel/55751", "content": "Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure\nhttps://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/\n\nThe vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.\nThe post Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure (https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-24T00:00:09.386677Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/27ccc609-d67a-4819-8c9c-ba4c372c61a5/export</guid>
      <pubDate>Mon, 24 Aug 2026 00:00:09 +0000</pubDate>
    </item>
    <item>
      <title>a8e43294-f7e8-4b86-81cc-32b9a7bbb120</title>
      <link>https://vulnerability.circl.lu/sighting/a8e43294-f7e8-4b86-81cc-32b9a7bbb120/export</link>
      <description>{"uuid": "a8e43294-f7e8-4b86-81cc-32b9a7bbb120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtr2ze3gdz2v", "content": "CVE-2026-58231: Active Exploits Hit SAP Commerce Cloud Three Days After Patch", "creation_timestamp": "2026-08-23T15:08:41.028356Z"}</description>
      <content:encoded>{"uuid": "a8e43294-f7e8-4b86-81cc-32b9a7bbb120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtr2ze3gdz2v", "content": "CVE-2026-58231: Active Exploits Hit SAP Commerce Cloud Three Days After Patch", "creation_timestamp": "2026-08-23T15:08:41.028356Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a8e43294-f7e8-4b86-81cc-32b9a7bbb120/export</guid>
      <pubDate>Sun, 23 Aug 2026 15:08:41 +0000</pubDate>
    </item>
    <item>
      <title>99c58f2d-f496-481f-a017-c07f3bac67a6</title>
      <link>https://vulnerability.circl.lu/sighting/99c58f2d-f496-481f-a017-c07f3bac67a6/export</link>
      <description>{"uuid": "99c58f2d-f496-481f-a017-c07f3bac67a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://t.me/pphm_HackerNews/2592", "content": "\ud83d\udd34 SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code\n\nSAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.\n\nThe vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.\n\n\"SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation,\" according to a description of the flaw on CVE.org.", "creation_timestamp": "2026-08-23T00:00:47.798235Z"}</description>
      <content:encoded>{"uuid": "99c58f2d-f496-481f-a017-c07f3bac67a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://t.me/pphm_HackerNews/2592", "content": "\ud83d\udd34 SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code\n\nSAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.\n\nThe vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.\n\n\"SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation,\" according to a description of the flaw on CVE.org.", "creation_timestamp": "2026-08-23T00:00:47.798235Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/99c58f2d-f496-481f-a017-c07f3bac67a6/export</guid>
      <pubDate>Sun, 23 Aug 2026 00:00:47 +0000</pubDate>
    </item>
  </channel>
</rss>
