<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 04 Sep 2026 08:38:32 +0000</lastBuildDate>
    <item>
      <title>9857f839-9194-4329-8c84-400e49803260</title>
      <link>https://vulnerability.circl.lu/sighting/9857f839-9194-4329-8c84-400e49803260/export</link>
      <description>{"uuid": "9857f839-9194-4329-8c84-400e49803260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18108", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mshwxui4542r", "content": "\ud83d\udccc CVE-2026-18108 - Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted... https://www.cyberhub.blog/cves/CVE-2026-18108", "creation_timestamp": "2026-08-07T06:37:07.086341Z"}</description>
      <content:encoded>{"uuid": "9857f839-9194-4329-8c84-400e49803260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18108", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mshwxui4542r", "content": "\ud83d\udccc CVE-2026-18108 - Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted... https://www.cyberhub.blog/cves/CVE-2026-18108", "creation_timestamp": "2026-08-07T06:37:07.086341Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9857f839-9194-4329-8c84-400e49803260/export</guid>
      <pubDate>Fri, 07 Aug 2026 06:37:07 +0000</pubDate>
    </item>
    <item>
      <title>b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9</title>
      <link>https://vulnerability.circl.lu/sighting/b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9/export</link>
      <description>{"uuid": "b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18108", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms7mnp5hpg2m", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to &amp;gt;=0.86 now. #CVE #Perl #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18108/", "creation_timestamp": "2026-08-03T23:11:16.571596Z"}</description>
      <content:encoded>{"uuid": "b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18108", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms7mnp5hpg2m", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to &amp;gt;=0.86 now. #CVE #Perl #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18108/", "creation_timestamp": "2026-08-03T23:11:16.571596Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9/export</guid>
      <pubDate>Mon, 03 Aug 2026 23:11:16 +0000</pubDate>
    </item>
    <item>
      <title>ab1750e8-3809-4bbf-8e10-7abcd6d3d991</title>
      <link>https://vulnerability.circl.lu/sighting/ab1750e8-3809-4bbf-8e10-7abcd6d3d991/export</link>
      <description>{"uuid": "ab1750e8-3809-4bbf-8e10-7abcd6d3d991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18108", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117034101614868174", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to &amp;gt;=0.86 now. #CVE #Perl #infosec\nhttps://www.valtersit.com/cve/cve-2026-18108/", "creation_timestamp": "2026-08-03T23:11:10.609885Z"}</description>
      <content:encoded>{"uuid": "ab1750e8-3809-4bbf-8e10-7abcd6d3d991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18108", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117034101614868174", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to &amp;gt;=0.86 now. #CVE #Perl #infosec\nhttps://www.valtersit.com/cve/cve-2026-18108/", "creation_timestamp": "2026-08-03T23:11:10.609885Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ab1750e8-3809-4bbf-8e10-7abcd6d3d991/export</guid>
      <pubDate>Mon, 03 Aug 2026 23:11:10 +0000</pubDate>
    </item>
    <item>
      <title>03c99992-9afa-4354-a996-bddb3ae71d6b</title>
      <link>https://vulnerability.circl.lu/sighting/03c99992-9afa-4354-a996-bddb3ae71d6b/export</link>
      <description>{"uuid": "03c99992-9afa-4354-a996-bddb3ae71d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18108", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7fdcwaxk22", "content": "CVE-2026-18108 - net::saml2\nOlder versions of the Net::SAML2 library for Perl can be tricked into accepting fake login credentials from anyone, not just the intended user. This can happen if an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netsaml2 #timlegge #CVE #infosec", "creation_timestamp": "2026-08-03T21:00:05.605069Z"}</description>
      <content:encoded>{"uuid": "03c99992-9afa-4354-a996-bddb3ae71d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18108", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7fdcwaxk22", "content": "CVE-2026-18108 - net::saml2\nOlder versions of the Net::SAML2 library for Perl can be tricked into accepting fake login credentials from anyone, not just the intended user. This can happen if an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netsaml2 #timlegge #CVE #infosec", "creation_timestamp": "2026-08-03T21:00:05.605069Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/03c99992-9afa-4354-a996-bddb3ae71d6b/export</guid>
      <pubDate>Mon, 03 Aug 2026 21:00:05 +0000</pubDate>
    </item>
  </channel>
</rss>
