<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 05 Sep 2026 02:29:11 +0000</lastBuildDate>
    <item>
      <title>31f72f1d-3893-40e8-b585-cf2feec12cfd</title>
      <link>https://vulnerability.circl.lu/sighting/31f72f1d-3893-40e8-b585-cf2feec12cfd/export</link>
      <description>{"uuid": "31f72f1d-3893-40e8-b585-cf2feec12cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GCVE-128-2026-0001", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/117211846838700856", "content": "Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure (GCVE-128-2026-0001 / CVE-2025-68624 )\nN-able Mail Assure through 2025-12-09 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server accepts arbitrary...\nhttps://vulnerability.circl.lu/vuln/GCVE-128-2026-0001\n#vulnerability #gcve", "creation_timestamp": "2026-09-04T08:34:06.858924Z"}</description>
      <content:encoded>{"uuid": "31f72f1d-3893-40e8-b585-cf2feec12cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GCVE-128-2026-0001", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/117211846838700856", "content": "Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure (GCVE-128-2026-0001 / CVE-2025-68624 )\nN-able Mail Assure through 2025-12-09 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server accepts arbitrary...\nhttps://vulnerability.circl.lu/vuln/GCVE-128-2026-0001\n#vulnerability #gcve", "creation_timestamp": "2026-09-04T08:34:06.858924Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/31f72f1d-3893-40e8-b585-cf2feec12cfd/export</guid>
      <pubDate>Fri, 04 Sep 2026 08:34:06 +0000</pubDate>
    </item>
    <item>
      <title>5ac92b78-7dcb-4e6d-aaf8-ae346ac54a93</title>
      <link>https://vulnerability.circl.lu/sighting/5ac92b78-7dcb-4e6d-aaf8-ae346ac54a93/export</link>
      <description>{"uuid": "5ac92b78-7dcb-4e6d-aaf8-ae346ac54a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "GCVE-128-2026-0001", "type": "seen", "source": "https://gist.github.com/alessandrobertoldi/1ebe0f48aa0119d787ac0ff710057d92", "content": "", "creation_timestamp": "2026-09-04T08:21:56.380271Z"}</description>
      <content:encoded>{"uuid": "5ac92b78-7dcb-4e6d-aaf8-ae346ac54a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "GCVE-128-2026-0001", "type": "seen", "source": "https://gist.github.com/alessandrobertoldi/1ebe0f48aa0119d787ac0ff710057d92", "content": "", "creation_timestamp": "2026-09-04T08:21:56.380271Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5ac92b78-7dcb-4e6d-aaf8-ae346ac54a93/export</guid>
      <pubDate>Fri, 04 Sep 2026 08:21:56 +0000</pubDate>
    </item>
  </channel>
</rss>
