<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 20 Aug 2026 18:18:27 +0000</lastBuildDate>
    <item>
      <title>1ab3a273-ee41-473b-813f-6d115a082716</title>
      <link>https://vulnerability.circl.lu/sighting/1ab3a273-ee41-473b-813f-6d115a082716/export</link>
      <description>{"uuid": "1ab3a273-ee41-473b-813f-6d115a082716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrtfv6f2p", "content": "Daily IT Security Digest \u2014 2026-08-20\nAI/ML infrastructure deployments. (Source: [OFFSEQ Radar](https://radar.offseq.com/threat/cve-2026-76850-internlm-lmdeploy-rce/), [Mastodon](https://infosec.exchange/@offseq/117125246166620239))\n\n## 6. ServiceNow RCE CVE-2026-6875 Exploited to Bypass Sandbox", "creation_timestamp": "2026-08-20T05:03:09.198099Z"}</description>
      <content:encoded>{"uuid": "1ab3a273-ee41-473b-813f-6d115a082716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrtfv6f2p", "content": "Daily IT Security Digest \u2014 2026-08-20\nAI/ML infrastructure deployments. (Source: [OFFSEQ Radar](https://radar.offseq.com/threat/cve-2026-76850-internlm-lmdeploy-rce/), [Mastodon](https://infosec.exchange/@offseq/117125246166620239))\n\n## 6. ServiceNow RCE CVE-2026-6875 Exploited to Bypass Sandbox", "creation_timestamp": "2026-08-20T05:03:09.198099Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1ab3a273-ee41-473b-813f-6d115a082716/export</guid>
      <pubDate>Thu, 20 Aug 2026 05:03:09 +0000</pubDate>
    </item>
    <item>
      <title>5a2ca255-9fd4-4a3a-8659-d1a545650412</title>
      <link>https://vulnerability.circl.lu/sighting/5a2ca255-9fd4-4a3a-8659-d1a545650412/export</link>
      <description>{"uuid": "5a2ca255-9fd4-4a3a-8659-d1a545650412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrsumdt2f", "content": "Daily IT Security Digest \u2014 2026-08-20\nRadar](https://radar.offseq.com/threat/hackers-exploit-geoserver-sqli-zero-day-rce/), [Mastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 5. InternetLM lmdeploy RCE via Pickle Deserialization \u2014 CVE-2026-76850\n\nA critical remote code execution", "creation_timestamp": "2026-08-20T05:03:08.555308Z"}</description>
      <content:encoded>{"uuid": "5a2ca255-9fd4-4a3a-8659-d1a545650412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrsumdt2f", "content": "Daily IT Security Digest \u2014 2026-08-20\nRadar](https://radar.offseq.com/threat/hackers-exploit-geoserver-sqli-zero-day-rce/), [Mastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 5. InternetLM lmdeploy RCE via Pickle Deserialization \u2014 CVE-2026-76850\n\nA critical remote code execution", "creation_timestamp": "2026-08-20T05:03:08.555308Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5a2ca255-9fd4-4a3a-8659-d1a545650412/export</guid>
      <pubDate>Thu, 20 Aug 2026 05:03:08 +0000</pubDate>
    </item>
    <item>
      <title>82f84e8d-3b1b-44f8-980e-3a30c399ea78</title>
      <link>https://vulnerability.circl.lu/sighting/82f84e8d-3b1b-44f8-980e-3a30c399ea78/export</link>
      <description>{"uuid": "82f84e8d-3b1b-44f8-980e-3a30c399ea78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtibhmda3t2c", "content": "CVE-2026-76850 - lmdeploy\nLMDeploy's disaggregated serving feature allows a malicious peer to inject code that can be executed by the server, potentially leading to unauthorized access or data tampering.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #CVE #infosec", "creation_timestamp": "2026-08-20T03:10:04.096849Z"}</description>
      <content:encoded>{"uuid": "82f84e8d-3b1b-44f8-980e-3a30c399ea78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtibhmda3t2c", "content": "CVE-2026-76850 - lmdeploy\nLMDeploy's disaggregated serving feature allows a malicious peer to inject code that can be executed by the server, potentially leading to unauthorized access or data tampering.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #CVE #infosec", "creation_timestamp": "2026-08-20T03:10:04.096849Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/82f84e8d-3b1b-44f8-980e-3a30c399ea78/export</guid>
      <pubDate>Thu, 20 Aug 2026 03:10:04 +0000</pubDate>
    </item>
    <item>
      <title>c89c16ac-1a62-40b0-b913-7ac7df626cc8</title>
      <link>https://vulnerability.circl.lu/sighting/c89c16ac-1a62-40b0-b913-7ac7df626cc8/export</link>
      <description>{"uuid": "c89c16ac-1a62-40b0-b913-7ac7df626cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mti3vinry42x", "content": "InternLM lmdeploy (0.9.2 \u2013 &amp;lt;0.16.0) CRITICAL vuln: Untrusted pickle deserialization allows remote code execution if disaggregated serving is enabled. Enable API keys or disable the feature. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fd...", "creation_timestamp": "2026-08-20T01:30:27.737253Z"}</description>
      <content:encoded>{"uuid": "c89c16ac-1a62-40b0-b913-7ac7df626cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mti3vinry42x", "content": "InternLM lmdeploy (0.9.2 \u2013 &amp;lt;0.16.0) CRITICAL vuln: Untrusted pickle deserialization allows remote code execution if disaggregated serving is enabled. Enable API keys or disable the feature. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fd...", "creation_timestamp": "2026-08-20T01:30:27.737253Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c89c16ac-1a62-40b0-b913-7ac7df626cc8/export</guid>
      <pubDate>Thu, 20 Aug 2026 01:30:27 +0000</pubDate>
    </item>
    <item>
      <title>d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664</title>
      <link>https://vulnerability.circl.lu/sighting/d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664/export</link>
      <description>{"uuid": "d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125246166620239", "content": "CVE-2026-76850 (CRITICAL): InternLM lmdeploy &amp;lt;0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850", "creation_timestamp": "2026-08-20T01:30:26.298765Z"}</description>
      <content:encoded>{"uuid": "d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125246166620239", "content": "CVE-2026-76850 (CRITICAL): InternLM lmdeploy &amp;lt;0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850", "creation_timestamp": "2026-08-20T01:30:26.298765Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664/export</guid>
      <pubDate>Thu, 20 Aug 2026 01:30:26 +0000</pubDate>
    </item>
    <item>
      <title>d8e7590e-d01b-48ec-98fb-1378fe759004</title>
      <link>https://vulnerability.circl.lu/sighting/d8e7590e-d01b-48ec-98fb-1378fe759004/export</link>
      <description>{"uuid": "d8e7590e-d01b-48ec-98fb-1378fe759004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfyxigq25", "content": "\ud83d\udea8 CVE-2026-76850 \u2014 CVSS 9.3 CRITICAL\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76850\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:12.370811Z"}</description>
      <content:encoded>{"uuid": "d8e7590e-d01b-48ec-98fb-1378fe759004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfyxigq25", "content": "\ud83d\udea8 CVE-2026-76850 \u2014 CVSS 9.3 CRITICAL\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76850\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:12.370811Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d8e7590e-d01b-48ec-98fb-1378fe759004/export</guid>
      <pubDate>Thu, 20 Aug 2026 00:10:12 +0000</pubDate>
    </item>
    <item>
      <title>cc7a005b-128b-4e1d-8f46-a559be82cdd5</title>
      <link>https://vulnerability.circl.lu/sighting/cc7a005b-128b-4e1d-8f46-a559be82cdd5/export</link>
      <description>{"uuid": "cc7a005b-128b-4e1d-8f46-a559be82cdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r", "content": "\ud83d\udd34 CVE-2026-76850 - Critical (9.8)\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv corout...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:35.359390Z"}</description>
      <content:encoded>{"uuid": "cc7a005b-128b-4e1d-8f46-a559be82cdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r", "content": "\ud83d\udd34 CVE-2026-76850 - Critical (9.8)\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv corout...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:35.359390Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cc7a005b-128b-4e1d-8f46-a559be82cdd5/export</guid>
      <pubDate>Wed, 19 Aug 2026 23:00:35 +0000</pubDate>
    </item>
    <item>
      <title>68025dda-9bf0-4f4b-9760-317d1077fc88</title>
      <link>https://vulnerability.circl.lu/sighting/68025dda-9bf0-4f4b-9760-317d1077fc88/export</link>
      <description>{"uuid": "68025dda-9bf0-4f4b-9760-317d1077fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx", "content": "CVE-2026-76850 - LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector\nCVE ID : CVE-2026-76850\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : LMDeploy deserializes disaggregated-serving peer mes...", "creation_timestamp": "2026-08-19T22:56:46.323082Z"}</description>
      <content:encoded>{"uuid": "68025dda-9bf0-4f4b-9760-317d1077fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx", "content": "CVE-2026-76850 - LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector\nCVE ID : CVE-2026-76850\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : LMDeploy deserializes disaggregated-serving peer mes...", "creation_timestamp": "2026-08-19T22:56:46.323082Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/68025dda-9bf0-4f4b-9760-317d1077fc88/export</guid>
      <pubDate>Wed, 19 Aug 2026 22:56:46 +0000</pubDate>
    </item>
  </channel>
</rss>
