<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 24 Sep 2026 21:49:32 +0000</lastBuildDate>
    <item>
      <title>44aba7e9-44d6-4bc5-ba99-7d895acb6b1b</title>
      <link>https://vulnerability.circl.lu/sighting/44aba7e9-44d6-4bc5-ba99-7d895acb6b1b/export</link>
      <description>{"uuid": "44aba7e9-44d6-4bc5-ba99-7d895acb6b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25254", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw46un2hum2y", "content": "\ud83d\udea8 CVE-2026-25254 \u2014 CVSS 9.8 CRITICAL\n\nImproper authorization leads to Remote Code Execution via SocketIO interface.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-25254\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T12:07:18.296734Z"}</description>
      <content:encoded>{"uuid": "44aba7e9-44d6-4bc5-ba99-7d895acb6b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25254", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw46un2hum2y", "content": "\ud83d\udea8 CVE-2026-25254 \u2014 CVSS 9.8 CRITICAL\n\nImproper authorization leads to Remote Code Execution via SocketIO interface.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-25254\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T12:07:18.296734Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44aba7e9-44d6-4bc5-ba99-7d895acb6b1b/export</guid>
      <pubDate>Tue, 22 Sep 2026 12:07:18 +0000</pubDate>
    </item>
    <item>
      <title>de271d22-d5fc-4f1b-a26c-d0f5d1abd938</title>
      <link>https://vulnerability.circl.lu/sighting/de271d22-d5fc-4f1b-a26c-d0f5d1abd938/export</link>
      <description>{"uuid": "de271d22-d5fc-4f1b-a26c-d0f5d1abd938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw42kngzs72n", "content": "CVE-2026-25254 - snapdragon\nThe Snapdragon Software Center from Qualcomm can be tricked into running malicious code through its network communication feature. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#snapdragon #qualcomm #CVE #infosec", "creation_timestamp": "2026-09-22T10:50:07.346812Z"}</description>
      <content:encoded>{"uuid": "de271d22-d5fc-4f1b-a26c-d0f5d1abd938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw42kngzs72n", "content": "CVE-2026-25254 - snapdragon\nThe Snapdragon Software Center from Qualcomm can be tricked into running malicious code through its network communication feature. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#snapdragon #qualcomm #CVE #infosec", "creation_timestamp": "2026-09-22T10:50:07.346812Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/de271d22-d5fc-4f1b-a26c-d0f5d1abd938/export</guid>
      <pubDate>Tue, 22 Sep 2026 10:50:07 +0000</pubDate>
    </item>
    <item>
      <title>f6b245c5-7421-46c4-a787-8ffb16a882d0</title>
      <link>https://vulnerability.circl.lu/sighting/f6b245c5-7421-46c4-a787-8ffb16a882d0/export</link>
      <description>{"uuid": "f6b245c5-7421-46c4-a787-8ffb16a882d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25254", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw3zhiop3v2e", "content": "CRITICAL Snapdragon flaw: CVE-2026-25254 allows remote code execution via improper SocketIO authorization. No patch yet \u2014 monitor vendor updates. Affects confidentiality, integrity, and availability. https://radar.offseq.com/threat/cve-2026-25254-cwe-285-improper-authorization-in-qualcomm-inc-sna...", "creation_timestamp": "2026-09-22T10:30:28.762637Z"}</description>
      <content:encoded>{"uuid": "f6b245c5-7421-46c4-a787-8ffb16a882d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25254", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw3zhiop3v2e", "content": "CRITICAL Snapdragon flaw: CVE-2026-25254 allows remote code execution via improper SocketIO authorization. No patch yet \u2014 monitor vendor updates. Affects confidentiality, integrity, and availability. https://radar.offseq.com/threat/cve-2026-25254-cwe-285-improper-authorization-in-qualcomm-inc-sna...", "creation_timestamp": "2026-09-22T10:30:28.762637Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f6b245c5-7421-46c4-a787-8ffb16a882d0/export</guid>
      <pubDate>Tue, 22 Sep 2026 10:30:28 +0000</pubDate>
    </item>
    <item>
      <title>c9892cd1-d749-4279-8c9e-02838f78082f</title>
      <link>https://vulnerability.circl.lu/sighting/c9892cd1-d749-4279-8c9e-02838f78082f/export</link>
      <description>{"uuid": "c9892cd1-d749-4279-8c9e-02838f78082f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25254", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117314225808795424", "content": "Qualcomm Snapdragon devices hit by CRITICAL CVE-2026-25254: improper authorization in SocketIO allows unauthenticated RCE. No patch yet; monitor advisories and review exposure. CVSS 9.8. https://radar.offseq.com/threat/cve-2026-25254-cwe-285-improper-authorization-in-qualcomm-inc-snapdragon-b8f8f52a617468af #OffSeq #CVE202625254 #Snapdragon #Infosec #Vuln", "creation_timestamp": "2026-09-22T10:30:26.415519Z"}</description>
      <content:encoded>{"uuid": "c9892cd1-d749-4279-8c9e-02838f78082f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25254", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117314225808795424", "content": "Qualcomm Snapdragon devices hit by CRITICAL CVE-2026-25254: improper authorization in SocketIO allows unauthenticated RCE. No patch yet; monitor advisories and review exposure. CVSS 9.8. https://radar.offseq.com/threat/cve-2026-25254-cwe-285-improper-authorization-in-qualcomm-inc-snapdragon-b8f8f52a617468af #OffSeq #CVE202625254 #Snapdragon #Infosec #Vuln", "creation_timestamp": "2026-09-22T10:30:26.415519Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c9892cd1-d749-4279-8c9e-02838f78082f/export</guid>
      <pubDate>Tue, 22 Sep 2026 10:30:26 +0000</pubDate>
    </item>
  </channel>
</rss>
