<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 19:24:46 +0000</lastBuildDate>
    <item>
      <title>c6bce378-4ff0-494a-94c6-d548fbd74a97</title>
      <link>https://vulnerability.circl.lu/sighting/c6bce378-4ff0-494a-94c6-d548fbd74a97/export</link>
      <description>{"uuid": "c6bce378-4ff0-494a-94c6-d548fbd74a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106501", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxc7jfpqnm2w", "content": "CVE-2026-106501 - backstage\nThe Backstage developer portal's scaffolder component can let an authenticated user see another user's task details, including any internal data such as service credentials. If those\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#backstage #CVE #infosec", "creation_timestamp": "2026-10-07T15:00:04.487607Z"}</description>
      <content:encoded>{"uuid": "c6bce378-4ff0-494a-94c6-d548fbd74a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106501", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxc7jfpqnm2w", "content": "CVE-2026-106501 - backstage\nThe Backstage developer portal's scaffolder component can let an authenticated user see another user's task details, including any internal data such as service credentials. If those\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#backstage #CVE #infosec", "creation_timestamp": "2026-10-07T15:00:04.487607Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c6bce378-4ff0-494a-94c6-d548fbd74a97/export</guid>
      <pubDate>Wed, 07 Oct 2026 15:00:04 +0000</pubDate>
    </item>
    <item>
      <title>5625354c-3033-418c-a6ae-5e3fe7545ede</title>
      <link>https://vulnerability.circl.lu/sighting/5625354c-3033-418c-a6ae-5e3fe7545ede/export</link>
      <description>{"uuid": "5625354c-3033-418c-a6ae-5e3fe7545ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106501", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxansj2ivj2o", "content": "\ud83d\udea8 CVE-2026-106501 \u2014 CVSS 9.6 CRITICAL\n\nBackstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-106501\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T00:10:23.035964Z"}</description>
      <content:encoded>{"uuid": "5625354c-3033-418c-a6ae-5e3fe7545ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106501", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxansj2ivj2o", "content": "\ud83d\udea8 CVE-2026-106501 \u2014 CVSS 9.6 CRITICAL\n\nBackstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-106501\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T00:10:23.035964Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5625354c-3033-418c-a6ae-5e3fe7545ede/export</guid>
      <pubDate>Wed, 07 Oct 2026 00:10:23 +0000</pubDate>
    </item>
  </channel>
</rss>
