<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 17:11:42 +0000</lastBuildDate>
    <item>
      <title>f9aeaf65-3bfa-419a-ba6d-48944b31c2c5</title>
      <link>https://vulnerability.circl.lu/sighting/f9aeaf65-3bfa-419a-ba6d-48944b31c2c5/export</link>
      <description>{"uuid": "f9aeaf65-3bfa-419a-ba6d-48944b31c2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbi2gfzz52n", "content": "CVE-2026-82531 - smarty\nVersions of Smarty before 4.5.8 and 5.8.5 allow specially crafted templates to insert malicious code into the cached PHP file. This can let an attacker run any code on your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#smarty #debian #Debian12 #CVE #infosec", "creation_timestamp": "2026-10-07T08:00:05.918051Z"}</description>
      <content:encoded>{"uuid": "f9aeaf65-3bfa-419a-ba6d-48944b31c2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbi2gfzz52n", "content": "CVE-2026-82531 - smarty\nVersions of Smarty before 4.5.8 and 5.8.5 allow specially crafted templates to insert malicious code into the cached PHP file. This can let an attacker run any code on your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#smarty #debian #Debian12 #CVE #infosec", "creation_timestamp": "2026-10-07T08:00:05.918051Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f9aeaf65-3bfa-419a-ba6d-48944b31c2c5/export</guid>
      <pubDate>Wed, 07 Oct 2026 08:00:05 +0000</pubDate>
    </item>
    <item>
      <title>bfb83f50-2308-4d59-acb4-212b0bbf526e</title>
      <link>https://vulnerability.circl.lu/sighting/bfb83f50-2308-4d59-acb4-212b0bbf526e/export</link>
      <description>{"uuid": "bfb83f50-2308-4d59-acb4-212b0bbf526e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7m6bml3d2l", "content": "\ud83d\udea8 CVE-2026-82531 \u2014 CVSS 9.2 CRITICAL\n\nSmarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocach...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82531\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T14:08:30.598464Z"}</description>
      <content:encoded>{"uuid": "bfb83f50-2308-4d59-acb4-212b0bbf526e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7m6bml3d2l", "content": "\ud83d\udea8 CVE-2026-82531 \u2014 CVSS 9.2 CRITICAL\n\nSmarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocach...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82531\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T14:08:30.598464Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bfb83f50-2308-4d59-acb4-212b0bbf526e/export</guid>
      <pubDate>Tue, 06 Oct 2026 14:08:30 +0000</pubDate>
    </item>
    <item>
      <title>688a67f0-2a3b-4f4e-910c-3f5cb68b6484</title>
      <link>https://vulnerability.circl.lu/sighting/688a67f0-2a3b-4f4e-910c-3f5cb68b6484/export</link>
      <description>{"uuid": "688a67f0-2a3b-4f4e-910c-3f5cb68b6484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82531", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx7k2z3kzw2e", "content": "CRITICAL code injection in smarty-php Smarty (CVE-2026-82531) lets attackers run PHP code remotely. Update to 4.5.8/5.8.5 now to stay protected. https://radar.offseq.com/threat/cve-2026-82531-improper-control-of-generation-of-code-code-injection-in-smarty-php-smarty-eb57bcca29bb7350 #OffSeq #CVE ...", "creation_timestamp": "2026-10-06T13:30:54.605668Z"}</description>
      <content:encoded>{"uuid": "688a67f0-2a3b-4f4e-910c-3f5cb68b6484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82531", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx7k2z3kzw2e", "content": "CRITICAL code injection in smarty-php Smarty (CVE-2026-82531) lets attackers run PHP code remotely. Update to 4.5.8/5.8.5 now to stay protected. https://radar.offseq.com/threat/cve-2026-82531-improper-control-of-generation-of-code-code-injection-in-smarty-php-smarty-eb57bcca29bb7350 #OffSeq #CVE ...", "creation_timestamp": "2026-10-06T13:30:54.605668Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/688a67f0-2a3b-4f4e-910c-3f5cb68b6484/export</guid>
      <pubDate>Tue, 06 Oct 2026 13:30:54 +0000</pubDate>
    </item>
    <item>
      <title>3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c</title>
      <link>https://vulnerability.circl.lu/sighting/3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c/export</link>
      <description>{"uuid": "3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx7ijsphmu27", "content": "CVE-2026-82531: Smarty, the PHP template engine by smarty-php, has a code injection flaw in extends: template inheritance that allows arbitrary PHP execution. Fixed in versions 4.5.8 and 5.8.5. A proof-of-concept is published in the vendor advisory.", "creation_timestamp": "2026-10-06T13:03:22.631961Z"}</description>
      <content:encoded>{"uuid": "3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx7ijsphmu27", "content": "CVE-2026-82531: Smarty, the PHP template engine by smarty-php, has a code injection flaw in extends: template inheritance that allows arbitrary PHP execution. Fixed in versions 4.5.8 and 5.8.5. A proof-of-concept is published in the vendor advisory.", "creation_timestamp": "2026-10-06T13:03:22.631961Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c/export</guid>
      <pubDate>Tue, 06 Oct 2026 13:03:22 +0000</pubDate>
    </item>
  </channel>
</rss>
