<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 20 Jun 2026 20:13:23 +0000</lastBuildDate>
    <item>
      <title>28c0a483-1ab6-4c30-bee0-22b7fb7d268e</title>
      <link>https://vulnerability.circl.lu/sighting/28c0a483-1ab6-4c30-bee0-22b7fb7d268e/export</link>
      <description>{"uuid": "28c0a483-1ab6-4c30-bee0-22b7fb7d268e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36192", "type": "seen", "source": "https://t.me/cibsecurity/31711", "content": "\u203c CVE-2021-36192 \u203c\n\nAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0 may allow a FortiGate user to see scripts from other ADOMS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-03T13:23:35.000000Z"}</description>
      <content:encoded>{"uuid": "28c0a483-1ab6-4c30-bee0-22b7fb7d268e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36192", "type": "seen", "source": "https://t.me/cibsecurity/31711", "content": "\u203c CVE-2021-36192 \u203c\n\nAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0 may allow a FortiGate user to see scripts from other ADOMS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-03T13:23:35.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/28c0a483-1ab6-4c30-bee0-22b7fb7d268e/export</guid>
      <pubDate>Wed, 03 Nov 2021 13:23:35 +0000</pubDate>
    </item>
    <item>
      <title>d64292de-4ff9-4c66-92ca-ded643be716d</title>
      <link>https://vulnerability.circl.lu/sighting/d64292de-4ff9-4c66-92ca-ded643be716d/export</link>
      <description>{"uuid": "d64292de-4ff9-4c66-92ca-ded643be716d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36198", "type": "seen", "source": "https://t.me/cibsecurity/33395", "content": "\u203c CVE-2021-36198 \u203c\n\nSuccessful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-06T20:20:52.000000Z"}</description>
      <content:encoded>{"uuid": "d64292de-4ff9-4c66-92ca-ded643be716d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36198", "type": "seen", "source": "https://t.me/cibsecurity/33395", "content": "\u203c CVE-2021-36198 \u203c\n\nSuccessful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-06T20:20:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d64292de-4ff9-4c66-92ca-ded643be716d/export</guid>
      <pubDate>Mon, 06 Dec 2021 20:20:52 +0000</pubDate>
    </item>
    <item>
      <title>ee64dceb-577a-4b9d-a446-40d97f743643</title>
      <link>https://vulnerability.circl.lu/sighting/ee64dceb-577a-4b9d-a446-40d97f743643/export</link>
      <description>{"uuid": "ee64dceb-577a-4b9d-a446-40d97f743643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36191", "type": "seen", "source": "https://t.me/cibsecurity/33579", "content": "\u203c CVE-2021-36191 \u203c\n\nA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T16:22:40.000000Z"}</description>
      <content:encoded>{"uuid": "ee64dceb-577a-4b9d-a446-40d97f743643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36191", "type": "seen", "source": "https://t.me/cibsecurity/33579", "content": "\u203c CVE-2021-36191 \u203c\n\nA url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T16:22:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ee64dceb-577a-4b9d-a446-40d97f743643/export</guid>
      <pubDate>Wed, 08 Dec 2021 16:22:40 +0000</pubDate>
    </item>
    <item>
      <title>39cbcfa5-a078-4f87-a0a3-a044ed04ba53</title>
      <link>https://vulnerability.circl.lu/sighting/39cbcfa5-a078-4f87-a0a3-a044ed04ba53/export</link>
      <description>{"uuid": "39cbcfa5-a078-4f87-a0a3-a044ed04ba53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36190", "type": "seen", "source": "https://t.me/cibsecurity/33584", "content": "\u203c CVE-2021-36190 \u203c\n\nA unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T16:22:48.000000Z"}</description>
      <content:encoded>{"uuid": "39cbcfa5-a078-4f87-a0a3-a044ed04ba53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36190", "type": "seen", "source": "https://t.me/cibsecurity/33584", "content": "\u203c CVE-2021-36190 \u203c\n\nA unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T16:22:48.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/39cbcfa5-a078-4f87-a0a3-a044ed04ba53/export</guid>
      <pubDate>Wed, 08 Dec 2021 16:22:48 +0000</pubDate>
    </item>
    <item>
      <title>f2348872-62ef-4f07-ba9d-c511f46adf95</title>
      <link>https://vulnerability.circl.lu/sighting/f2348872-62ef-4f07-ba9d-c511f46adf95/export</link>
      <description>{"uuid": "f2348872-62ef-4f07-ba9d-c511f46adf95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36195", "type": "seen", "source": "https://t.me/cibsecurity/33637", "content": "\u203c CVE-2021-36195 \u203c\n\nMultiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T22:22:56.000000Z"}</description>
      <content:encoded>{"uuid": "f2348872-62ef-4f07-ba9d-c511f46adf95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36195", "type": "seen", "source": "https://t.me/cibsecurity/33637", "content": "\u203c CVE-2021-36195 \u203c\n\nMultiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T22:22:56.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f2348872-62ef-4f07-ba9d-c511f46adf95/export</guid>
      <pubDate>Wed, 08 Dec 2021 22:22:56 +0000</pubDate>
    </item>
    <item>
      <title>29a51147-79c0-4e45-a3cb-52f9ff9f2886</title>
      <link>https://vulnerability.circl.lu/sighting/29a51147-79c0-4e45-a3cb-52f9ff9f2886/export</link>
      <description>{"uuid": "29a51147-79c0-4e45-a3cb-52f9ff9f2886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36193", "type": "seen", "source": "https://t.me/cibsecurity/36694", "content": "\u203c CVE-2021-36193 \u203c\n\nMultiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-02T14:28:20.000000Z"}</description>
      <content:encoded>{"uuid": "29a51147-79c0-4e45-a3cb-52f9ff9f2886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36193", "type": "seen", "source": "https://t.me/cibsecurity/36694", "content": "\u203c CVE-2021-36193 \u203c\n\nMultiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-02T14:28:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/29a51147-79c0-4e45-a3cb-52f9ff9f2886/export</guid>
      <pubDate>Wed, 02 Feb 2022 14:28:20 +0000</pubDate>
    </item>
  </channel>
</rss>
