<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 23:26:46 +0000</lastBuildDate>
    <item>
      <title>c9c8b365-a56e-406a-a32a-a92297d545a1</title>
      <link>https://vulnerability.circl.lu/sighting/c9c8b365-a56e-406a-a32a-a92297d545a1/export</link>
      <description>{"uuid": "c9c8b365-a56e-406a-a32a-a92297d545a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgn6ollck2f", "content": "CVE-2026-88003 - invoiceplane\nIn older versions of InvoicePlane, when an administrator lowers another user's role, the system does not remove the admin rights from the user's current session. This means the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#invoiceplane #CVE #infosec", "creation_timestamp": "2026-09-26T15:50:16.926992Z"}</description>
      <content:encoded>{"uuid": "c9c8b365-a56e-406a-a32a-a92297d545a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgn6ollck2f", "content": "CVE-2026-88003 - invoiceplane\nIn older versions of InvoicePlane, when an administrator lowers another user's role, the system does not remove the admin rights from the user's current session. This means the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#invoiceplane #CVE #infosec", "creation_timestamp": "2026-09-26T15:50:16.926992Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c9c8b365-a56e-406a-a32a-a92297d545a1/export</guid>
      <pubDate>Sat, 26 Sep 2026 15:50:16 +0000</pubDate>
    </item>
    <item>
      <title>35ea5d6a-342a-4494-8e2b-271436e55076</title>
      <link>https://vulnerability.circl.lu/sighting/35ea5d6a-342a-4494-8e2b-271436e55076/export</link>
      <description>{"uuid": "35ea5d6a-342a-4494-8e2b-271436e55076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7d6rdzag32cmg", "content": "CVE-2026-88003 - InvoicePlane: Failure to Revoke Administrative Privileges After Role Downgrade\nCVE ID : CVE-2026-88003\n \n Published : Sept. 25, 2026, 9:20 p.m. | 48\u00a0minutes ago\n \n Description : InvoicePlane is a self-hosted open source application for managing invoices, clien...", "creation_timestamp": "2026-09-25T22:50:06.923179Z"}</description>
      <content:encoded>{"uuid": "35ea5d6a-342a-4494-8e2b-271436e55076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7d6rdzag32cmg", "content": "CVE-2026-88003 - InvoicePlane: Failure to Revoke Administrative Privileges After Role Downgrade\nCVE ID : CVE-2026-88003\n \n Published : Sept. 25, 2026, 9:20 p.m. | 48\u00a0minutes ago\n \n Description : InvoicePlane is a self-hosted open source application for managing invoices, clien...", "creation_timestamp": "2026-09-25T22:50:06.923179Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35ea5d6a-342a-4494-8e2b-271436e55076/export</guid>
      <pubDate>Fri, 25 Sep 2026 22:50:06 +0000</pubDate>
    </item>
  </channel>
</rss>
