<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 25 Aug 2026 14:15:06 +0000</lastBuildDate>
    <item>
      <title>2d0d80db-c45d-4ea4-8e2e-a806f5848230</title>
      <link>https://vulnerability.circl.lu/sighting/2d0d80db-c45d-4ea4-8e2e-a806f5848230/export</link>
      <description>{"uuid": "2d0d80db-c45d-4ea4-8e2e-a806f5848230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtveknyotu2y", "content": "CVE-2026-77337\nOlder versions of CakePHP's login system could be tricked into accepting a fake cookie, letting someone get into an account without a password and possibly slowing the server down. This affects versions before\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T08:10:04.140262Z"}</description>
      <content:encoded>{"uuid": "2d0d80db-c45d-4ea4-8e2e-a806f5848230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtveknyotu2y", "content": "CVE-2026-77337\nOlder versions of CakePHP's login system could be tricked into accepting a fake cookie, letting someone get into an account without a password and possibly slowing the server down. This affects versions before\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T08:10:04.140262Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2d0d80db-c45d-4ea4-8e2e-a806f5848230/export</guid>
      <pubDate>Tue, 25 Aug 2026 08:10:04 +0000</pubDate>
    </item>
    <item>
      <title>d9453a9c-e336-47df-b743-cace0dbea491</title>
      <link>https://vulnerability.circl.lu/sighting/d9453a9c-e336-47df-b743-cace0dbea491/export</link>
      <description>{"uuid": "d9453a9c-e336-47df-b743-cace0dbea491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtun7zlh3b2w", "content": "Another Critical Web Plugin Bug, Because Reality Hates Calm\nPANIC 78% | Lag 0.0h | CakePHP Authentication is being flagged for a critical CVE, CVE-2026-77337, with a CVSS score of 9.1\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-25T01:12:31.061415Z"}</description>
      <content:encoded>{"uuid": "d9453a9c-e336-47df-b743-cace0dbea491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtun7zlh3b2w", "content": "Another Critical Web Plugin Bug, Because Reality Hates Calm\nPANIC 78% | Lag 0.0h | CakePHP Authentication is being flagged for a critical CVE, CVE-2026-77337, with a CVSS score of 9.1\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-25T01:12:31.061415Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d9453a9c-e336-47df-b743-cace0dbea491/export</guid>
      <pubDate>Tue, 25 Aug 2026 01:12:31 +0000</pubDate>
    </item>
    <item>
      <title>200b2744-9971-42e4-9dbd-27e9a0149119</title>
      <link>https://vulnerability.circl.lu/sighting/200b2744-9971-42e4-9dbd-27e9a0149119/export</link>
      <description>{"uuid": "200b2744-9971-42e4-9dbd-27e9a0149119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujmtqa4j24", "content": "\ud83d\udea8 CVE-2026-77337 \u2014 CVSS 9.1 CRITICAL\n\nCakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77337\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:08:06.369980Z"}</description>
      <content:encoded>{"uuid": "200b2744-9971-42e4-9dbd-27e9a0149119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujmtqa4j24", "content": "\ud83d\udea8 CVE-2026-77337 \u2014 CVSS 9.1 CRITICAL\n\nCakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77337\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:08:06.369980Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/200b2744-9971-42e4-9dbd-27e9a0149119/export</guid>
      <pubDate>Tue, 25 Aug 2026 00:08:06 +0000</pubDate>
    </item>
    <item>
      <title>e486a608-62b4-40cb-8d8b-336823cdd7cd</title>
      <link>https://vulnerability.circl.lu/sighting/e486a608-62b4-40cb-8d8b-336823cdd7cd/export</link>
      <description>{"uuid": "e486a608-62b4-40cb-8d8b-336823cdd7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtugwwvdb72p", "content": "CVE-2026-77337\nIf you are using the CakePHP Authentication plugin in versions before 2.11.2, 3.3.7, or 4.2.1, an attacker could trick the system into accepting fake login cookies and could also cause the server to use\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:20:03.954549Z"}</description>
      <content:encoded>{"uuid": "e486a608-62b4-40cb-8d8b-336823cdd7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtugwwvdb72p", "content": "CVE-2026-77337\nIf you are using the CakePHP Authentication plugin in versions before 2.11.2, 3.3.7, or 4.2.1, an attacker could trick the system into accepting fake login cookies and could also cause the server to use\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:20:03.954549Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e486a608-62b4-40cb-8d8b-336823cdd7cd/export</guid>
      <pubDate>Mon, 24 Aug 2026 23:20:03 +0000</pubDate>
    </item>
  </channel>
</rss>
