<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 10 May 2026 06:59:44 +0000</lastBuildDate>
    <item>
      <title>9bce82e5-2280-4ec1-a0df-b00076097ec5</title>
      <link>https://vulnerability.circl.lu/sighting/9bce82e5-2280-4ec1-a0df-b00076097ec5/export</link>
      <description>{"uuid": "9bce82e5-2280-4ec1-a0df-b00076097ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlceez7izf2i", "content": "CVE-2026-7891 - Mendix Studio Pro Anonymous User Role Inheritance Authorization Bypass\nCVE ID : CVE-2026-7891\n \n Published : May 7, 2026, 9:07 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : The VerySecureApp made by DIVD using Mendix Studio Pro 11.8.0 Beta allows unintended da...", "creation_timestamp": "2026-05-07T23:24:46.566995Z"}</description>
      <content:encoded>{"uuid": "9bce82e5-2280-4ec1-a0df-b00076097ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlceez7izf2i", "content": "CVE-2026-7891 - Mendix Studio Pro Anonymous User Role Inheritance Authorization Bypass\nCVE ID : CVE-2026-7891\n \n Published : May 7, 2026, 9:07 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : The VerySecureApp made by DIVD using Mendix Studio Pro 11.8.0 Beta allows unintended da...", "creation_timestamp": "2026-05-07T23:24:46.566995Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9bce82e5-2280-4ec1-a0df-b00076097ec5/export</guid>
      <pubDate>Thu, 07 May 2026 23:24:46 +0000</pubDate>
    </item>
    <item>
      <title>555d3cba-01cf-4575-b8ba-f1a773a6a580</title>
      <link>https://vulnerability.circl.lu/sighting/555d3cba-01cf-4575-b8ba-f1a773a6a580/export</link>
      <description>{"uuid": "555d3cba-01cf-4575-b8ba-f1a773a6a580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7891", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116536365967570800", "content": "\ud83d\udea8 CVE-2026-7891 (CRITICAL): Insecure inherited permissions in DIVD VerySecureApp let anonymous users read all records. Built with Mendix Studio Pro 11.8.0 Beta \u2014 patch pending. Review anonymous access configs ASAP! https://radar.offseq.com/threat/cve-2026-7891-cwe-277-insecure-inherited-permissio-c2a9d753 #OffSeq #CVE20267891 #Vuln #InfoSec", "creation_timestamp": "2026-05-08T01:30:28.274542Z"}</description>
      <content:encoded>{"uuid": "555d3cba-01cf-4575-b8ba-f1a773a6a580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7891", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116536365967570800", "content": "\ud83d\udea8 CVE-2026-7891 (CRITICAL): Insecure inherited permissions in DIVD VerySecureApp let anonymous users read all records. Built with Mendix Studio Pro 11.8.0 Beta \u2014 patch pending. Review anonymous access configs ASAP! https://radar.offseq.com/threat/cve-2026-7891-cwe-277-insecure-inherited-permissio-c2a9d753 #OffSeq #CVE20267891 #Vuln #InfoSec", "creation_timestamp": "2026-05-08T01:30:28.274542Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/555d3cba-01cf-4575-b8ba-f1a773a6a580/export</guid>
      <pubDate>Fri, 08 May 2026 01:30:28 +0000</pubDate>
    </item>
    <item>
      <title>f000a8aa-41cb-490c-b325-f6ce637dfec2</title>
      <link>https://vulnerability.circl.lu/sighting/f000a8aa-41cb-490c-b325-f6ce637dfec2/export</link>
      <description>{"uuid": "f000a8aa-41cb-490c-b325-f6ce637dfec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7891", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlclfs2m4v2p", "content": "CRITICAL: CVE-2026-7891 in DIVD VerySecureApp (Mendix Studio Pro 11.8.0 Beta) lets anonymous users access all data. Review and restrict anonymous roles \u2014 patch not yet available. https://radar.offseq.com/threat/cve-2026-7891-cwe-277-insecure-inherited-permissio-c2a9d753 #OffSeq #CVE20267891", "creation_timestamp": "2026-05-08T01:30:29.282097Z"}</description>
      <content:encoded>{"uuid": "f000a8aa-41cb-490c-b325-f6ce637dfec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7891", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlclfs2m4v2p", "content": "CRITICAL: CVE-2026-7891 in DIVD VerySecureApp (Mendix Studio Pro 11.8.0 Beta) lets anonymous users access all data. Review and restrict anonymous roles \u2014 patch not yet available. https://radar.offseq.com/threat/cve-2026-7891-cwe-277-insecure-inherited-permissio-c2a9d753 #OffSeq #CVE20267891", "creation_timestamp": "2026-05-08T01:30:29.282097Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f000a8aa-41cb-490c-b325-f6ce637dfec2/export</guid>
      <pubDate>Fri, 08 May 2026 01:30:29 +0000</pubDate>
    </item>
  </channel>
</rss>
