<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 12 Sep 2026 22:08:45 +0000</lastBuildDate>
    <item>
      <title>da5d03d5-ded2-417f-b60d-7791af66350a</title>
      <link>https://vulnerability.circl.lu/sighting/da5d03d5-ded2-417f-b60d-7791af66350a/export</link>
      <description>{"uuid": "da5d03d5-ded2-417f-b60d-7791af66350a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muysdz66x52j", "content": "CVE-2026-86543 - knowns\nVersions of the Knowns software earlier than 0.30.0 expose a management interface that anyone on the network can reach without a password. This allows an attacker to start a tunnel\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#knowns #knownsdev #CVE #infosec", "creation_timestamp": "2026-09-08T10:20:04.120561Z"}</description>
      <content:encoded>{"uuid": "da5d03d5-ded2-417f-b60d-7791af66350a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muysdz66x52j", "content": "CVE-2026-86543 - knowns\nVersions of the Knowns software earlier than 0.30.0 expose a management interface that anyone on the network can reach without a password. This allows an attacker to start a tunnel\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#knowns #knownsdev #CVE #infosec", "creation_timestamp": "2026-09-08T10:20:04.120561Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/da5d03d5-ded2-417f-b60d-7791af66350a/export</guid>
      <pubDate>Tue, 08 Sep 2026 10:20:04 +0000</pubDate>
    </item>
    <item>
      <title>6e359119-a2b0-414d-bea6-0339149e4ebd</title>
      <link>https://vulnerability.circl.lu/sighting/6e359119-a2b0-414d-bea6-0339149e4ebd/export</link>
      <description>{"uuid": "6e359119-a2b0-414d-bea6-0339149e4ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muxq42qj7f2g", "content": "\ud83d\udea8 CVE-2026-86543 \u2014 CVSS 9.3 CRITICAL\n\nknowns versions before 0.30.0 serve the management API without authentication on all network interfaces by ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86543\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T00:07:10.264447Z"}</description>
      <content:encoded>{"uuid": "6e359119-a2b0-414d-bea6-0339149e4ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muxq42qj7f2g", "content": "\ud83d\udea8 CVE-2026-86543 \u2014 CVSS 9.3 CRITICAL\n\nknowns versions before 0.30.0 serve the management API without authentication on all network interfaces by ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86543\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T00:07:10.264447Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6e359119-a2b0-414d-bea6-0339149e4ebd/export</guid>
      <pubDate>Tue, 08 Sep 2026 00:07:10 +0000</pubDate>
    </item>
    <item>
      <title>deff8bc6-150c-40c3-a37b-4ee960606968</title>
      <link>https://vulnerability.circl.lu/sighting/deff8bc6-150c-40c3-a37b-4ee960606968/export</link>
      <description>{"uuid": "deff8bc6-150c-40c3-a37b-4ee960606968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpv5ru6t2z", "content": "\ud83d\udd34 CVE-2026-86543 - Critical (9.8)\n\nknowns versions before 0.30.0 serve the management API without authentication on all network inte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86543/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T00:03:19.000926Z"}</description>
      <content:encoded>{"uuid": "deff8bc6-150c-40c3-a37b-4ee960606968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpv5ru6t2z", "content": "\ud83d\udd34 CVE-2026-86543 - Critical (9.8)\n\nknowns versions before 0.30.0 serve the management API without authentication on all network inte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86543/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T00:03:19.000926Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/deff8bc6-150c-40c3-a37b-4ee960606968/export</guid>
      <pubDate>Tue, 08 Sep 2026 00:03:19 +0000</pubDate>
    </item>
    <item>
      <title>a013436c-bb4c-4b97-8514-3010552dc37f</title>
      <link>https://vulnerability.circl.lu/sighting/a013436c-bb4c-4b97-8514-3010552dc37f/export</link>
      <description>{"uuid": "a013436c-bb4c-4b97-8514-3010552dc37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86543", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muxpqdzfmn2e", "content": "CRITICAL: knowns-dev knowns &amp;lt;0.30.0 exposes mgmt API without auth \u2014 attackers can create public tunnels. Restrict API access &amp;amp; upgrade to 0.30.0+ as soon as possible. https://radar.offseq.com/threat/cve-2026-86543-missing-authentication-for-critical-function-in-knowns-dev-knowns-3a84bb55b20322bc ...", "creation_timestamp": "2026-09-08T00:00:37.865425Z"}</description>
      <content:encoded>{"uuid": "a013436c-bb4c-4b97-8514-3010552dc37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86543", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muxpqdzfmn2e", "content": "CRITICAL: knowns-dev knowns &amp;lt;0.30.0 exposes mgmt API without auth \u2014 attackers can create public tunnels. Restrict API access &amp;amp; upgrade to 0.30.0+ as soon as possible. https://radar.offseq.com/threat/cve-2026-86543-missing-authentication-for-critical-function-in-knowns-dev-knowns-3a84bb55b20322bc ...", "creation_timestamp": "2026-09-08T00:00:37.865425Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a013436c-bb4c-4b97-8514-3010552dc37f/export</guid>
      <pubDate>Tue, 08 Sep 2026 00:00:37 +0000</pubDate>
    </item>
    <item>
      <title>87a1e4d8-e58f-40a2-af3b-a1769e0ba933</title>
      <link>https://vulnerability.circl.lu/sighting/87a1e4d8-e58f-40a2-af3b-a1769e0ba933/export</link>
      <description>{"uuid": "87a1e4d8-e58f-40a2-af3b-a1769e0ba933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86543", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117232476810981498", "content": "CVE-2026-86543: CRITICAL vuln in knowns-dev knowns &amp;lt;0.30.0. Mgmt API is exposed w/o auth by default, allowing attackers to create public tunnels. Restrict access &amp;amp; upgrade ASAP. https://radar.offseq.com/threat/cve-2026-86543-missing-authentication-for-critical-function-in-knowns-dev-knowns-3a84bb55b20322bc #OffSeq #CVE2026_86543 #Vulnerability #APIsecurity", "creation_timestamp": "2026-09-08T00:00:36.343482Z"}</description>
      <content:encoded>{"uuid": "87a1e4d8-e58f-40a2-af3b-a1769e0ba933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86543", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117232476810981498", "content": "CVE-2026-86543: CRITICAL vuln in knowns-dev knowns &amp;lt;0.30.0. Mgmt API is exposed w/o auth by default, allowing attackers to create public tunnels. Restrict access &amp;amp; upgrade ASAP. https://radar.offseq.com/threat/cve-2026-86543-missing-authentication-for-critical-function-in-knowns-dev-knowns-3a84bb55b20322bc #OffSeq #CVE2026_86543 #Vulnerability #APIsecurity", "creation_timestamp": "2026-09-08T00:00:36.343482Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/87a1e4d8-e58f-40a2-af3b-a1769e0ba933/export</guid>
      <pubDate>Tue, 08 Sep 2026 00:00:36 +0000</pubDate>
    </item>
  </channel>
</rss>
