<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 21:20:02 +0000</lastBuildDate>
    <item>
      <title>2606b543-42b8-42fe-8555-0ec279e47160</title>
      <link>https://vulnerability.circl.lu/sighting/2606b543-42b8-42fe-8555-0ec279e47160/export</link>
      <description>{"uuid": "2606b543-42b8-42fe-8555-0ec279e47160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztceznea2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attac\u2026\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:42.906613Z"}</description>
      <content:encoded>{"uuid": "2606b543-42b8-42fe-8555-0ec279e47160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztceznea2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attac\u2026\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:42.906613Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2606b543-42b8-42fe-8555-0ec279e47160/export</guid>
      <pubDate>Tue, 08 Sep 2026 20:09:42 +0000</pubDate>
    </item>
    <item>
      <title>ef2e8f2d-57c4-4853-9c70-22de4a3c9c34</title>
      <link>https://vulnerability.circl.lu/sighting/ef2e8f2d-57c4-4853-9c70-22de4a3c9c34/export</link>
      <description>{"uuid": "ef2e8f2d-57c4-4853-9c70-22de4a3c9c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvstoz52z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 Unauthenticated Webhook Message Injection\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:08:59.801690Z"}</description>
      <content:encoded>{"uuid": "ef2e8f2d-57c4-4853-9c70-22de4a3c9c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvstoz52z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 Unauthenticated Webhook Message Injection\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:08:59.801690Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ef2e8f2d-57c4-4853-9c70-22de4a3c9c34/export</guid>
      <pubDate>Tue, 08 Sep 2026 19:08:59 +0000</pubDate>
    </item>
    <item>
      <title>16fc360b-4756-4970-b469-419cc04a38a1</title>
      <link>https://vulnerability.circl.lu/sighting/16fc360b-4756-4970-b469-419cc04a38a1/export</link>
      <description>{"uuid": "16fc360b-4756-4970-b469-419cc04a38a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphxefwnt2w", "content": "CVE-2026-85667 - xiaobei\nThe Xiaobei application (versions up to 5.5.2) accepts incoming messages without checking who sent them. This allows anyone on the internet to post messages that the system will\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xiaobei #teamwiseflow #CVE #infosec", "creation_timestamp": "2026-09-04T17:20:04.896906Z"}</description>
      <content:encoded>{"uuid": "16fc360b-4756-4970-b469-419cc04a38a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphxefwnt2w", "content": "CVE-2026-85667 - xiaobei\nThe Xiaobei application (versions up to 5.5.2) accepts incoming messages without checking who sent them. This allows anyone on the internet to post messages that the system will\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xiaobei #teamwiseflow #CVE #infosec", "creation_timestamp": "2026-09-04T17:20:04.896906Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/16fc360b-4756-4970-b469-419cc04a38a1/export</guid>
      <pubDate>Fri, 04 Sep 2026 17:20:04 +0000</pubDate>
    </item>
    <item>
      <title>654e3982-9db7-4cf7-9333-7e8b2d721f90</title>
      <link>https://vulnerability.circl.lu/sighting/654e3982-9db7-4cf7-9333-7e8b2d721f90/export</link>
      <description>{"uuid": "654e3982-9db7-4cf7-9333-7e8b2d721f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwtnnhg2d", "content": "\ud83d\udea8 CVE-2026-85667 \u2014 CVSS 9.3 CRITICAL\n\nxiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85667\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:12.041689Z"}</description>
      <content:encoded>{"uuid": "654e3982-9db7-4cf7-9333-7e8b2d721f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwtnnhg2d", "content": "\ud83d\udea8 CVE-2026-85667 \u2014 CVSS 9.3 CRITICAL\n\nxiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85667\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:12.041689Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/654e3982-9db7-4cf7-9333-7e8b2d721f90/export</guid>
      <pubDate>Fri, 04 Sep 2026 16:08:12 +0000</pubDate>
    </item>
  </channel>
</rss>
