<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 26 Sep 2026 18:25:15 +0000</lastBuildDate>
    <item>
      <title>ad87d2ca-a831-4897-8798-15d036d7a884</title>
      <link>https://vulnerability.circl.lu/sighting/ad87d2ca-a831-4897-8798-15d036d7a884/export</link>
      <description>{"uuid": "ad87d2ca-a831-4897-8798-15d036d7a884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwflkaj46z2c", "content": "\ud83d\udfe0 CVE-2026-100575 - High (8.8)\n\nOpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-perso...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100575/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T05:48:06.463353Z"}</description>
      <content:encoded>{"uuid": "ad87d2ca-a831-4897-8798-15d036d7a884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwflkaj46z2c", "content": "\ud83d\udfe0 CVE-2026-100575 - High (8.8)\n\nOpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-perso...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100575/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T05:48:06.463353Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ad87d2ca-a831-4897-8798-15d036d7a884/export</guid>
      <pubDate>Sat, 26 Sep 2026 05:48:06 +0000</pubDate>
    </item>
    <item>
      <title>c32fe75f-6ef1-43b2-a9ca-bf471911cd35</title>
      <link>https://vulnerability.circl.lu/sighting/c32fe75f-6ef1-43b2-a9ca-bf471911cd35/export</link>
      <description>{"uuid": "c32fe75f-6ef1-43b2-a9ca-bf471911cd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrssdc2x", "content": "Daily IT Security Digest \u2014 2026-09-26\nOpenClaw users should upgrade to version 2026.9.3 or later immediately. [Source](https://radar.offseq.com/threat/cve-2026-100575-missing-auth)\n\n8. **Ransomware Group Orova Publishes New Victims**\n   Ransomware group Orova has published three new alleged victim", "creation_timestamp": "2026-09-26T05:01:58.659015Z"}</description>
      <content:encoded>{"uuid": "c32fe75f-6ef1-43b2-a9ca-bf471911cd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrssdc2x", "content": "Daily IT Security Digest \u2014 2026-09-26\nOpenClaw users should upgrade to version 2026.9.3 or later immediately. [Source](https://radar.offseq.com/threat/cve-2026-100575-missing-auth)\n\n8. **Ransomware Group Orova Publishes New Victims**\n   Ransomware group Orova has published three new alleged victim", "creation_timestamp": "2026-09-26T05:01:58.659015Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c32fe75f-6ef1-43b2-a9ca-bf471911cd35/export</guid>
      <pubDate>Sat, 26 Sep 2026 05:01:58 +0000</pubDate>
    </item>
    <item>
      <title>35d1637a-16b2-4a3f-98d0-087a60cfd9d2</title>
      <link>https://vulnerability.circl.lu/sighting/35d1637a-16b2-4a3f-98d0-087a60cfd9d2/export</link>
      <description>{"uuid": "35d1637a-16b2-4a3f-98d0-087a60cfd9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100575", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixraw2p25", "content": "Daily IT Security Digest \u2014 2026-09-26\napplied. [Source](https://radar.offseq.com/threat/cve-2026-18467-paytium)\n\n7. **OpenClaw Security Suite \u2014 Multiple Vulnerabilities Patched**\n   OpenClaw released multiple fixes addressing several security issues: CVE-2026-100575 (HIGH, missing authorization in", "creation_timestamp": "2026-09-26T05:01:57.584900Z"}</description>
      <content:encoded>{"uuid": "35d1637a-16b2-4a3f-98d0-087a60cfd9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100575", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixraw2p25", "content": "Daily IT Security Digest \u2014 2026-09-26\napplied. [Source](https://radar.offseq.com/threat/cve-2026-18467-paytium)\n\n7. **OpenClaw Security Suite \u2014 Multiple Vulnerabilities Patched**\n   OpenClaw released multiple fixes addressing several security issues: CVE-2026-100575 (HIGH, missing authorization in", "creation_timestamp": "2026-09-26T05:01:57.584900Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35d1637a-16b2-4a3f-98d0-087a60cfd9d2/export</guid>
      <pubDate>Sat, 26 Sep 2026 05:01:57 +0000</pubDate>
    </item>
    <item>
      <title>3cd09c7c-c06b-409d-944a-4cbce26ad9de</title>
      <link>https://vulnerability.circl.lu/sighting/3cd09c7c-c06b-409d-944a-4cbce26ad9de/export</link>
      <description>{"uuid": "3cd09c7c-c06b-409d-944a-4cbce26ad9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfh7gpzhk2q", "content": "OpenClaw Slack (&amp;lt;2026.8.1) faces HIGH severity (CVSS 8.7) auth bypass in multi-person DMs \u2014 unauthorized users can trigger Slack agents. Upgrade to 2026.8.1+ to secure your data. https://radar.offseq.com/threat/cve-2026-100575-missing-authorization-in-openclaw-slack-2a3447a3c9192e9f #OffSeq #Vuln...", "creation_timestamp": "2026-09-26T04:30:28.356336Z"}</description>
      <content:encoded>{"uuid": "3cd09c7c-c06b-409d-944a-4cbce26ad9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfh7gpzhk2q", "content": "OpenClaw Slack (&amp;lt;2026.8.1) faces HIGH severity (CVSS 8.7) auth bypass in multi-person DMs \u2014 unauthorized users can trigger Slack agents. Upgrade to 2026.8.1+ to secure your data. https://radar.offseq.com/threat/cve-2026-100575-missing-authorization-in-openclaw-slack-2a3447a3c9192e9f #OffSeq #Vuln...", "creation_timestamp": "2026-09-26T04:30:28.356336Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3cd09c7c-c06b-409d-944a-4cbce26ad9de/export</guid>
      <pubDate>Sat, 26 Sep 2026 04:30:28 +0000</pubDate>
    </item>
    <item>
      <title>e3f50c60-4118-4c19-9065-4a368ae4b143</title>
      <link>https://vulnerability.circl.lu/sighting/e3f50c60-4118-4c19-9065-4a368ae4b143/export</link>
      <description>{"uuid": "e3f50c60-4118-4c19-9065-4a368ae4b143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117335459461034947", "content": "CVE-2026-100575 | HIGH severity | OpenClaw Slack (&amp;lt;2026.8.1): Missing authorization in multi-person DMs lets unauthorized users trigger Slack agents and access restricted tools/data. Patch to 2026.8.1+ now. https://radar.offseq.com/threat/cve-2026-100575-missing-authorization-in-openclaw-slack-2a3447a3c9192e9f #OffSeq #Vuln #Infosec #Slack", "creation_timestamp": "2026-09-26T04:30:26.251206Z"}</description>
      <content:encoded>{"uuid": "e3f50c60-4118-4c19-9065-4a368ae4b143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100575", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117335459461034947", "content": "CVE-2026-100575 | HIGH severity | OpenClaw Slack (&amp;lt;2026.8.1): Missing authorization in multi-person DMs lets unauthorized users trigger Slack agents and access restricted tools/data. Patch to 2026.8.1+ now. https://radar.offseq.com/threat/cve-2026-100575-missing-authorization-in-openclaw-slack-2a3447a3c9192e9f #OffSeq #Vuln #Infosec #Slack", "creation_timestamp": "2026-09-26T04:30:26.251206Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e3f50c60-4118-4c19-9065-4a368ae4b143/export</guid>
      <pubDate>Sat, 26 Sep 2026 04:30:26 +0000</pubDate>
    </item>
  </channel>
</rss>
