<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 05 Aug 2026 08:54:36 +0000</lastBuildDate>
    <item>
      <title>a149fe02-d587-4402-82fe-910d213e6044</title>
      <link>https://vulnerability.circl.lu/sighting/a149fe02-d587-4402-82fe-910d213e6044/export</link>
      <description>{"uuid": "a149fe02-d587-4402-82fe-910d213e6044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117036919208348305", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\nhttps://www.valtersit.com/cve/cve-2026-18686/", "creation_timestamp": "2026-08-04T11:07:45.606757Z"}</description>
      <content:encoded>{"uuid": "a149fe02-d587-4402-82fe-910d213e6044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117036919208348305", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\nhttps://www.valtersit.com/cve/cve-2026-18686/", "creation_timestamp": "2026-08-04T11:07:45.606757Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a149fe02-d587-4402-82fe-910d213e6044/export</guid>
      <pubDate>Tue, 04 Aug 2026 11:07:45 +0000</pubDate>
    </item>
    <item>
      <title>7d131304-8b1e-4c4c-b293-ba187889060f</title>
      <link>https://vulnerability.circl.lu/sighting/7d131304-8b1e-4c4c-b293-ba187889060f/export</link>
      <description>{"uuid": "7d131304-8b1e-4c4c-b293-ba187889060f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msauoyb6mx2r", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18686/", "creation_timestamp": "2026-08-04T11:07:42.750755Z"}</description>
      <content:encoded>{"uuid": "7d131304-8b1e-4c4c-b293-ba187889060f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msauoyb6mx2r", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18686/", "creation_timestamp": "2026-08-04T11:07:42.750755Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7d131304-8b1e-4c4c-b293-ba187889060f/export</guid>
      <pubDate>Tue, 04 Aug 2026 11:07:42 +0000</pubDate>
    </item>
    <item>
      <title>9a13a0d9-cea3-4983-89a8-2e661d0d9684</title>
      <link>https://vulnerability.circl.lu/sighting/9a13a0d9-cea3-4983-89a8-2e661d0d9684/export</link>
      <description>{"uuid": "9a13a0d9-cea3-4983-89a8-2e661d0d9684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cknwu5hcvw2cw", "content": "CVE-2026-18686 - GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection\nCVE ID : CVE-2026-18686\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected e...", "creation_timestamp": "2026-08-04T02:01:18.571730Z"}</description>
      <content:encoded>{"uuid": "9a13a0d9-cea3-4983-89a8-2e661d0d9684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cknwu5hcvw2cw", "content": "CVE-2026-18686 - GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection\nCVE ID : CVE-2026-18686\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected e...", "creation_timestamp": "2026-08-04T02:01:18.571730Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a13a0d9-cea3-4983-89a8-2e661d0d9684/export</guid>
      <pubDate>Tue, 04 Aug 2026 02:01:18 +0000</pubDate>
    </item>
    <item>
      <title>bc902cd8-0afc-49a2-8da3-de51e0e11b50</title>
      <link>https://vulnerability.circl.lu/sighting/bc902cd8-0afc-49a2-8da3-de51e0e11b50/export</link>
      <description>{"uuid": "bc902cd8-0afc-49a2-8da3-de51e0e11b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7ugrbllc2x", "content": "CRITICAL command injection (CVE-2026-18686) hits GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote attackers can run commands \u2014 no patch yet. Restrict admin access &amp;amp; monitor closely. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE", "creation_timestamp": "2026-08-04T01:30:29.063716Z"}</description>
      <content:encoded>{"uuid": "bc902cd8-0afc-49a2-8da3-de51e0e11b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7ugrbllc2x", "content": "CRITICAL command injection (CVE-2026-18686) hits GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote attackers can run commands \u2014 no patch yet. Restrict admin access &amp;amp; monitor closely. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE", "creation_timestamp": "2026-08-04T01:30:29.063716Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bc902cd8-0afc-49a2-8da3-de51e0e11b50/export</guid>
      <pubDate>Tue, 04 Aug 2026 01:30:29 +0000</pubDate>
    </item>
    <item>
      <title>2a409c84-8f90-4be2-bb33-84a84d61a092</title>
      <link>https://vulnerability.circl.lu/sighting/2a409c84-8f90-4be2-bb33-84a84d61a092/export</link>
      <description>{"uuid": "2a409c84-8f90-4be2-bb33-84a84d61a092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034649197021910", "content": "CVE-2026-18686: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated code execution possible \u2014 no patch yet. Limit admin interface exposure &amp;amp; monitor for abuse. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE #RouterSecurity", "creation_timestamp": "2026-08-04T01:30:25.850830Z"}</description>
      <content:encoded>{"uuid": "2a409c84-8f90-4be2-bb33-84a84d61a092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034649197021910", "content": "CVE-2026-18686: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated code execution possible \u2014 no patch yet. Limit admin interface exposure &amp;amp; monitor for abuse. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE #RouterSecurity", "creation_timestamp": "2026-08-04T01:30:25.850830Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2a409c84-8f90-4be2-bb33-84a84d61a092/export</guid>
      <pubDate>Tue, 04 Aug 2026 01:30:25 +0000</pubDate>
    </item>
  </channel>
</rss>
