<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 22 Aug 2026 04:21:47 +0000</lastBuildDate>
    <item>
      <title>6e09dca8-0e01-4668-b049-d4a9667d8ace</title>
      <link>https://vulnerability.circl.lu/sighting/6e09dca8-0e01-4668-b049-d4a9667d8ace/export</link>
      <description>{"uuid": "6e09dca8-0e01-4668-b049-d4a9667d8ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtlccup23w2n", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T08:03:17.799178Z"}</description>
      <content:encoded>{"uuid": "6e09dca8-0e01-4668-b049-d4a9667d8ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtlccup23w2n", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T08:03:17.799178Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6e09dca8-0e01-4668-b049-d4a9667d8ace/export</guid>
      <pubDate>Fri, 21 Aug 2026 08:03:17 +0000</pubDate>
    </item>
    <item>
      <title>a279fc94-179b-4984-8a7f-34dd7216a4a9</title>
      <link>https://vulnerability.circl.lu/sighting/a279fc94-179b-4984-8a7f-34dd7216a4a9/export</link>
      <description>{"uuid": "a279fc94-179b-4984-8a7f-34dd7216a4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtkhk56rki25", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T00:04:10.916596Z"}</description>
      <content:encoded>{"uuid": "a279fc94-179b-4984-8a7f-34dd7216a4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtkhk56rki25", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T00:04:10.916596Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a279fc94-179b-4984-8a7f-34dd7216a4a9/export</guid>
      <pubDate>Fri, 21 Aug 2026 00:04:10 +0000</pubDate>
    </item>
    <item>
      <title>22fb0357-43c1-4cd1-88a9-01296a287b3a</title>
      <link>https://vulnerability.circl.lu/sighting/22fb0357-43c1-4cd1-88a9-01296a287b3a/export</link>
      <description>{"uuid": "22fb0357-43c1-4cd1-88a9-01296a287b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtjmnvifjp2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-20T16:03:05.867495Z"}</description>
      <content:encoded>{"uuid": "22fb0357-43c1-4cd1-88a9-01296a287b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtjmnvifjp2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-20T16:03:05.867495Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/22fb0357-43c1-4cd1-88a9-01296a287b3a/export</guid>
      <pubDate>Thu, 20 Aug 2026 16:03:05 +0000</pubDate>
    </item>
    <item>
      <title>de775adc-2948-41aa-8c11-0454807e0c4c</title>
      <link>https://vulnerability.circl.lu/sighting/de775adc-2948-41aa-8c11-0454807e0c4c/export</link>
      <description>{"uuid": "de775adc-2948-41aa-8c11-0454807e0c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdg4lqyb52f", "content": "CVE-2026-74880 - openssl-encrypt\nOpenSSL's keyserver and telemetry servers accept refresh tokens in URLs, making them visible in server logs, browser history, and other places. This puts sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:50:04.295540Z"}</description>
      <content:encoded>{"uuid": "de775adc-2948-41aa-8c11-0454807e0c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdg4lqyb52f", "content": "CVE-2026-74880 - openssl-encrypt\nOpenSSL's keyserver and telemetry servers accept refresh tokens in URLs, making them visible in server logs, browser history, and other places. This puts sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:50:04.295540Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/de775adc-2948-41aa-8c11-0454807e0c4c/export</guid>
      <pubDate>Tue, 18 Aug 2026 04:50:04 +0000</pubDate>
    </item>
    <item>
      <title>86253f42-0330-4653-8d87-e6776c2d15a2</title>
      <link>https://vulnerability.circl.lu/sighting/86253f42-0330-4653-8d87-e6776c2d15a2/export</link>
      <description>{"uuid": "86253f42-0330-4653-8d87-e6776c2d15a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcdhz5ina25", "content": "CVE-2026-74880 - openssl_encrypt\nOld versions of the OpenSSL Encrypt library in certain routes allow attackers to extract refresh tokens from server logs, potentially giving them unauthorized access.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:30:06.968093Z"}</description>
      <content:encoded>{"uuid": "86253f42-0330-4653-8d87-e6776c2d15a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcdhz5ina25", "content": "CVE-2026-74880 - openssl_encrypt\nOld versions of the OpenSSL Encrypt library in certain routes allow attackers to extract refresh tokens from server logs, potentially giving them unauthorized access.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:30:06.968093Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/86253f42-0330-4653-8d87-e6776c2d15a2/export</guid>
      <pubDate>Mon, 17 Aug 2026 18:30:06 +0000</pubDate>
    </item>
    <item>
      <title>09d323e7-9b5a-433a-9ab8-08f4d65f0605</title>
      <link>https://vulnerability.circl.lu/sighting/09d323e7-9b5a-433a-9ab8-08f4d65f0605/export</link>
      <description>{"uuid": "09d323e7-9b5a-433a-9ab8-08f4d65f0605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo5ecwnl2p", "content": "\ud83d\udea8 CVE-2026-74880 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and teleme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74880\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:20.377070Z"}</description>
      <content:encoded>{"uuid": "09d323e7-9b5a-433a-9ab8-08f4d65f0605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo5ecwnl2p", "content": "\ud83d\udea8 CVE-2026-74880 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and teleme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74880\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:20.377070Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/09d323e7-9b5a-433a-9ab8-08f4d65f0605/export</guid>
      <pubDate>Mon, 17 Aug 2026 12:08:20 +0000</pubDate>
    </item>
  </channel>
</rss>
