<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 10 Sep 2026 18:59:10 +0000</lastBuildDate>
    <item>
      <title>15e8c105-fca5-47cb-9ae9-1f7a836ec9bf</title>
      <link>https://vulnerability.circl.lu/sighting/15e8c105-fca5-47cb-9ae9-1f7a836ec9bf/export</link>
      <description>{"uuid": "15e8c105-fca5-47cb-9ae9-1f7a836ec9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4l2hf72b2y", "content": "CVE-2026-79696 - agent development kit (adk) for python\nThe Google Cloud Agent Development Kit for Python (versions 2.0.0\u20112.6.0) can be fooled into executing any code an attacker sends when the testing tool\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#googlecloud #CVE #infosec", "creation_timestamp": "2026-09-09T22:20:06.238731Z"}</description>
      <content:encoded>{"uuid": "15e8c105-fca5-47cb-9ae9-1f7a836ec9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4l2hf72b2y", "content": "CVE-2026-79696 - agent development kit (adk) for python\nThe Google Cloud Agent Development Kit for Python (versions 2.0.0\u20112.6.0) can be fooled into executing any code an attacker sends when the testing tool\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#googlecloud #CVE #infosec", "creation_timestamp": "2026-09-09T22:20:06.238731Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/15e8c105-fca5-47cb-9ae9-1f7a836ec9bf/export</guid>
      <pubDate>Wed, 09 Sep 2026 22:20:06 +0000</pubDate>
    </item>
    <item>
      <title>4be88aa9-9664-4a85-a67c-e8edd3125dc8</title>
      <link>https://vulnerability.circl.lu/sighting/4be88aa9-9664-4a85-a67c-e8edd3125dc8/export</link>
      <description>{"uuid": "4be88aa9-9664-4a85-a67c-e8edd3125dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ht2klsldv2ehl", "content": "CVE-2026-79696 - Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist\nCVE ID : CVE-2026-79696\n \n Published : Sept. 9, 2026, 9:17 a.m. | 16\u00a0minutes ago\n \n Description : A Code Injection vulnerability in adk web in Google Cloud Agent Developmen...", "creation_timestamp": "2026-09-09T11:10:50.401638Z"}</description>
      <content:encoded>{"uuid": "4be88aa9-9664-4a85-a67c-e8edd3125dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ht2klsldv2ehl", "content": "CVE-2026-79696 - Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist\nCVE ID : CVE-2026-79696\n \n Published : Sept. 9, 2026, 9:17 a.m. | 16\u00a0minutes ago\n \n Description : A Code Injection vulnerability in adk web in Google Cloud Agent Developmen...", "creation_timestamp": "2026-09-09T11:10:50.401638Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4be88aa9-9664-4a85-a67c-e8edd3125dc8/export</guid>
      <pubDate>Wed, 09 Sep 2026 11:10:50 +0000</pubDate>
    </item>
    <item>
      <title>5ed5d482-a57e-4c19-b9ce-c8f04b234a25</title>
      <link>https://vulnerability.circl.lu/sighting/5ed5d482-a57e-4c19-b9ce-c8f04b234a25/export</link>
      <description>{"uuid": "5ed5d482-a57e-4c19-b9ce-c8f04b234a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79696", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117240615810716517", "content": "CVE-2026-79696: Critical code injection (CVSS 10.0) in Google Cloud ADK for Python (2.0.0 \u2013 2.6.0). Unauth RCE possible via crafted session replay in pytest-enabled Cloud Run &amp;amp; GKE. Patch or update now. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-inputs-in-google-cloud-agent-development-kit-adk-3b96714136b44311 #OffSeq #CVE #CloudSecurity #Python", "creation_timestamp": "2026-09-09T10:30:49.857371Z"}</description>
      <content:encoded>{"uuid": "5ed5d482-a57e-4c19-b9ce-c8f04b234a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79696", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117240615810716517", "content": "CVE-2026-79696: Critical code injection (CVSS 10.0) in Google Cloud ADK for Python (2.0.0 \u2013 2.6.0). Unauth RCE possible via crafted session replay in pytest-enabled Cloud Run &amp;amp; GKE. Patch or update now. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-inputs-in-google-cloud-agent-development-kit-adk-3b96714136b44311 #OffSeq #CVE #CloudSecurity #Python", "creation_timestamp": "2026-09-09T10:30:49.857371Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5ed5d482-a57e-4c19-b9ce-c8f04b234a25/export</guid>
      <pubDate>Wed, 09 Sep 2026 10:30:49 +0000</pubDate>
    </item>
    <item>
      <title>fa6bece6-01f5-40bf-b1ab-450a4b0af9d1</title>
      <link>https://vulnerability.circl.lu/sighting/fa6bece6-01f5-40bf-b1ab-450a4b0af9d1/export</link>
      <description>{"uuid": "fa6bece6-01f5-40bf-b1ab-450a4b0af9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79696", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv3dfjwmtp24", "content": "Critical RCE in Google Cloud ADK for Python (v2.0.0 \u2013 2.6.0) \u26a0\ufe0f. Unauth attackers can exploit via crafted test session replay. Patch or update urgently. Google manages remediation for cloud-hosted services. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-input...", "creation_timestamp": "2026-09-09T10:30:28.735510Z"}</description>
      <content:encoded>{"uuid": "fa6bece6-01f5-40bf-b1ab-450a4b0af9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79696", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv3dfjwmtp24", "content": "Critical RCE in Google Cloud ADK for Python (v2.0.0 \u2013 2.6.0) \u26a0\ufe0f. Unauth attackers can exploit via crafted test session replay. Patch or update urgently. Google manages remediation for cloud-hosted services. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-input...", "creation_timestamp": "2026-09-09T10:30:28.735510Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fa6bece6-01f5-40bf-b1ab-450a4b0af9d1/export</guid>
      <pubDate>Wed, 09 Sep 2026 10:30:28 +0000</pubDate>
    </item>
    <item>
      <title>22251afd-ab59-4375-bbdb-fb57654a66c4</title>
      <link>https://vulnerability.circl.lu/sighting/22251afd-ab59-4375-bbdb-fb57654a66c4/export</link>
      <description>{"uuid": "22251afd-ab59-4375-bbdb-fb57654a66c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3c4gmsk525", "content": "\ud83d\udea8 CVE-2026-79696 \u2014 CVSS 10 CRITICAL\n\nA Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79696\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T10:07:29.152073Z"}</description>
      <content:encoded>{"uuid": "22251afd-ab59-4375-bbdb-fb57654a66c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3c4gmsk525", "content": "\ud83d\udea8 CVE-2026-79696 \u2014 CVSS 10 CRITICAL\n\nA Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79696\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T10:07:29.152073Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/22251afd-ab59-4375-bbdb-fb57654a66c4/export</guid>
      <pubDate>Wed, 09 Sep 2026 10:07:29 +0000</pubDate>
    </item>
  </channel>
</rss>
