<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 03 Aug 2026 20:31:41 +0000</lastBuildDate>
    <item>
      <title>861a701e-2cfd-49d0-9e7f-4b3fa76b790e</title>
      <link>https://vulnerability.circl.lu/sighting/861a701e-2cfd-49d0-9e7f-4b3fa76b790e/export</link>
      <description>{"uuid": "861a701e-2cfd-49d0-9e7f-4b3fa76b790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18363", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24", "content": "osTicket CRITICAL vuln (CVE-2026-18363): Weak password reset logic lets attackers reuse valid reset tokens. Affects versions &amp;lt;1.17.8 &amp;amp; &amp;lt;1.18.4. Upgrade ASAP when patch is released; monitor reset activity. https://radar.offseq.com/threat/cve-2026-18363-cwe-640-weak-password-recovery-mechanism-for-...", "creation_timestamp": "2026-07-30T12:00:30.475999Z"}</description>
      <content:encoded>{"uuid": "861a701e-2cfd-49d0-9e7f-4b3fa76b790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18363", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24", "content": "osTicket CRITICAL vuln (CVE-2026-18363): Weak password reset logic lets attackers reuse valid reset tokens. Affects versions &amp;lt;1.17.8 &amp;amp; &amp;lt;1.18.4. Upgrade ASAP when patch is released; monitor reset activity. https://radar.offseq.com/threat/cve-2026-18363-cwe-640-weak-password-recovery-mechanism-for-...", "creation_timestamp": "2026-07-30T12:00:30.475999Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/861a701e-2cfd-49d0-9e7f-4b3fa76b790e/export</guid>
      <pubDate>Thu, 30 Jul 2026 12:00:30 +0000</pubDate>
    </item>
    <item>
      <title>edc9b60d-c1fc-4dfc-a61d-bda1c31f1910</title>
      <link>https://vulnerability.circl.lu/sighting/edc9b60d-c1fc-4dfc-a61d-bda1c31f1910/export</link>
      <description>{"uuid": "edc9b60d-c1fc-4dfc-a61d-bda1c31f1910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18363", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrudbnnaaf2y", "content": "CVE-2026-18363 - osticket\nA security flaw in osTicket's password reset process allows attackers to reuse valid password reset tokens, potentially taking control of an account. This affects osTicket\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#osticket #enhancesoft #CVE #infosec", "creation_timestamp": "2026-07-30T11:24:04.859319Z"}</description>
      <content:encoded>{"uuid": "edc9b60d-c1fc-4dfc-a61d-bda1c31f1910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18363", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrudbnnaaf2y", "content": "CVE-2026-18363 - osticket\nA security flaw in osTicket's password reset process allows attackers to reuse valid password reset tokens, potentially taking control of an account. This affects osTicket\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#osticket #enhancesoft #CVE #infosec", "creation_timestamp": "2026-07-30T11:24:04.859319Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/edc9b60d-c1fc-4dfc-a61d-bda1c31f1910/export</guid>
      <pubDate>Thu, 30 Jul 2026 11:24:04 +0000</pubDate>
    </item>
  </channel>
</rss>
