<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 01 Aug 2026 02:50:44 +0000</lastBuildDate>
    <item>
      <title>bda4ede8-36d5-4050-9e32-6a805e64c367</title>
      <link>https://vulnerability.circl.lu/sighting/bda4ede8-36d5-4050-9e32-6a805e64c367/export</link>
      <description>{"uuid": "bda4ede8-36d5-4050-9e32-6a805e64c367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwygrbhhl2y", "content": "CVE-2026-14541\nA security issue in Google MCP Toolbox allows unauthorized access to protected tools and data backends using valid Google OAuth tokens. This happens when the toolbox is set up to use Google OAuth without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:48:04.657135Z"}</description>
      <content:encoded>{"uuid": "bda4ede8-36d5-4050-9e32-6a805e64c367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwygrbhhl2y", "content": "CVE-2026-14541\nA security issue in Google MCP Toolbox allows unauthorized access to protected tools and data backends using valid Google OAuth tokens. This happens when the toolbox is set up to use Google OAuth without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:48:04.657135Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bda4ede8-36d5-4050-9e32-6a805e64c367/export</guid>
      <pubDate>Fri, 31 Jul 2026 12:48:04 +0000</pubDate>
    </item>
    <item>
      <title>1883f44b-3be6-4833-ba32-81a82adc2ff0</title>
      <link>https://vulnerability.circl.lu/sighting/1883f44b-3be6-4833-ba32-81a82adc2ff0/export</link>
      <description>{"uuid": "1883f44b-3be6-4833-ba32-81a82adc2ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jjkywoers73sy", "content": "CVE-2026-14541 - Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider\nCVE ID : CVE-2026-14541\n \n Published : July 31, 2026, 3:16 a.m. | 29\u00a0minutes ago\n \n Description : An authentication bypass and audience confusion vulnerability exists in the Google OAut...", "creation_timestamp": "2026-07-31T04:00:16.854626Z"}</description>
      <content:encoded>{"uuid": "1883f44b-3be6-4833-ba32-81a82adc2ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jjkywoers73sy", "content": "CVE-2026-14541 - Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider\nCVE ID : CVE-2026-14541\n \n Published : July 31, 2026, 3:16 a.m. | 29\u00a0minutes ago\n \n Description : An authentication bypass and audience confusion vulnerability exists in the Google OAut...", "creation_timestamp": "2026-07-31T04:00:16.854626Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1883f44b-3be6-4833-ba32-81a82adc2ff0/export</guid>
      <pubDate>Fri, 31 Jul 2026 04:00:16 +0000</pubDate>
    </item>
  </channel>
</rss>
