<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 16 Jun 2026 06:42:15 +0000</lastBuildDate>
    <item>
      <title>ea62bc3e-37bf-4c26-9b98-caf4826c937e</title>
      <link>https://vulnerability.circl.lu/sighting/ea62bc3e-37bf-4c26-9b98-caf4826c937e/export</link>
      <description>{"uuid": "ea62bc3e-37bf-4c26-9b98-caf4826c937e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39962", "type": "seen", "source": "Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ", "content": "", "creation_timestamp": "2026-04-09T19:22:33.000000Z"}</description>
      <content:encoded>{"uuid": "ea62bc3e-37bf-4c26-9b98-caf4826c937e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39962", "type": "seen", "source": "Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ", "content": "", "creation_timestamp": "2026-04-09T19:22:33.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ea62bc3e-37bf-4c26-9b98-caf4826c937e/export</guid>
      <pubDate>Thu, 09 Apr 2026 19:22:33 +0000</pubDate>
    </item>
    <item>
      <title>4736ef4c-cfb9-4c36-a75c-a0092eb0f274</title>
      <link>https://vulnerability.circl.lu/sighting/4736ef4c-cfb9-4c36-a75c-a0092eb0f274/export</link>
      <description>{"uuid": "4736ef4c-cfb9-4c36-a75c-a0092eb0f274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39961", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3mhw5dms2o", "content": "", "creation_timestamp": "2026-04-09T20:10:32.557660Z"}</description>
      <content:encoded>{"uuid": "4736ef4c-cfb9-4c36-a75c-a0092eb0f274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39961", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3mhw5dms2o", "content": "", "creation_timestamp": "2026-04-09T20:10:32.557660Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4736ef4c-cfb9-4c36-a75c-a0092eb0f274/export</guid>
      <pubDate>Thu, 09 Apr 2026 20:10:32 +0000</pubDate>
    </item>
    <item>
      <title>aae29c89-a18f-4f2e-b9fc-b2b4d289b771</title>
      <link>https://vulnerability.circl.lu/sighting/aae29c89-a18f-4f2e-b9fc-b2b4d289b771/export</link>
      <description>{"uuid": "aae29c89-a18f-4f2e-b9fc-b2b4d289b771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39962", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3mnvcdk52q", "content": "", "creation_timestamp": "2026-04-09T20:13:52.847018Z"}</description>
      <content:encoded>{"uuid": "aae29c89-a18f-4f2e-b9fc-b2b4d289b771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39962", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3mnvcdk52q", "content": "", "creation_timestamp": "2026-04-09T20:13:52.847018Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aae29c89-a18f-4f2e-b9fc-b2b4d289b771/export</guid>
      <pubDate>Thu, 09 Apr 2026 20:13:52 +0000</pubDate>
    </item>
    <item>
      <title>874d1c92-fb6e-4671-83f4-4cd16865ad70</title>
      <link>https://vulnerability.circl.lu/sighting/874d1c92-fb6e-4671-83f4-4cd16865ad70/export</link>
      <description>{"uuid": "874d1c92-fb6e-4671-83f4-4cd16865ad70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39963", "type": "published-proof-of-concept", "source": "https://github.com/s9y/Serendipity/security/advisories/GHSA-4m6c-649p-f6gf", "content": "", "creation_timestamp": "2026-04-13T22:15:38.000000Z"}</description>
      <content:encoded>{"uuid": "874d1c92-fb6e-4671-83f4-4cd16865ad70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-39963", "type": "published-proof-of-concept", "source": "https://github.com/s9y/Serendipity/security/advisories/GHSA-4m6c-649p-f6gf", "content": "", "creation_timestamp": "2026-04-13T22:15:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/874d1c92-fb6e-4671-83f4-4cd16865ad70/export</guid>
      <pubDate>Mon, 13 Apr 2026 22:15:38 +0000</pubDate>
    </item>
    <item>
      <title>205c4af4-5540-4762-ad67-2a5fedb5c043</title>
      <link>https://vulnerability.circl.lu/sighting/205c4af4-5540-4762-ad67-2a5fedb5c043/export</link>
      <description>{"uuid": "205c4af4-5540-4762-ad67-2a5fedb5c043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39963", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2bnxkza2k", "content": "", "creation_timestamp": "2026-04-15T04:22:11.622470Z"}</description>
      <content:encoded>{"uuid": "205c4af4-5540-4762-ad67-2a5fedb5c043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39963", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2bnxkza2k", "content": "", "creation_timestamp": "2026-04-15T04:22:11.622470Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/205c4af4-5540-4762-ad67-2a5fedb5c043/export</guid>
      <pubDate>Wed, 15 Apr 2026 04:22:11 +0000</pubDate>
    </item>
    <item>
      <title>7caa8467-b498-4389-8802-d6d60acd7b82</title>
      <link>https://vulnerability.circl.lu/sighting/7caa8467-b498-4389-8802-d6d60acd7b82/export</link>
      <description>{"uuid": "7caa8467-b498-4389-8802-d6d60acd7b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39966", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxe3r7ma2c", "content": "CVE-2026-39966 - TypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions\nCVE ID : CVE-2026-39966\n \n Published : May 22, 2026, 6:12 p.m. | 2\u00a0hours, 7\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder...", "creation_timestamp": "2026-05-22T22:12:46.910893Z"}</description>
      <content:encoded>{"uuid": "7caa8467-b498-4389-8802-d6d60acd7b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39966", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxe3r7ma2c", "content": "CVE-2026-39966 - TypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions\nCVE ID : CVE-2026-39966\n \n Published : May 22, 2026, 6:12 p.m. | 2\u00a0hours, 7\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder...", "creation_timestamp": "2026-05-22T22:12:46.910893Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7caa8467-b498-4389-8802-d6d60acd7b82/export</guid>
      <pubDate>Fri, 22 May 2026 22:12:46 +0000</pubDate>
    </item>
    <item>
      <title>d3b08dda-969a-4a2f-94ca-9a4eab110b22</title>
      <link>https://vulnerability.circl.lu/sighting/d3b08dda-969a-4a2f-94ca-9a4eab110b22/export</link>
      <description>{"uuid": "d3b08dda-969a-4a2f-94ca-9a4eab110b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxk3at6w2q", "content": "CVE-2026-39965 - TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks\nCVE ID : CVE-2026-39965\n \n Published : May 22, 2026, 5:27 p.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain an SSRF via Op...", "creation_timestamp": "2026-05-22T22:16:07.692498Z"}</description>
      <content:encoded>{"uuid": "d3b08dda-969a-4a2f-94ca-9a4eab110b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxk3at6w2q", "content": "CVE-2026-39965 - TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks\nCVE ID : CVE-2026-39965\n \n Published : May 22, 2026, 5:27 p.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain an SSRF via Op...", "creation_timestamp": "2026-05-22T22:16:07.692498Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d3b08dda-969a-4a2f-94ca-9a4eab110b22/export</guid>
      <pubDate>Fri, 22 May 2026 22:16:07 +0000</pubDate>
    </item>
    <item>
      <title>7f15e674-82a0-446c-a5c6-e2cee8d4d4d7</title>
      <link>https://vulnerability.circl.lu/sighting/7f15e674-82a0-446c-a5c6-e2cee8d4d4d7/export</link>
      <description>{"uuid": "7f15e674-82a0-446c-a5c6-e2cee8d4d4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39967", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhym7gopi2q", "content": "CVE-2026-39967 - TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter\nCVE ID : CVE-2026-39967\n \n Published : May 22, 2026, 6:36 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's th...", "creation_timestamp": "2026-05-22T22:35:12.991497Z"}</description>
      <content:encoded>{"uuid": "7f15e674-82a0-446c-a5c6-e2cee8d4d4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39967", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhym7gopi2q", "content": "CVE-2026-39967 - TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter\nCVE ID : CVE-2026-39967\n \n Published : May 22, 2026, 6:36 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's th...", "creation_timestamp": "2026-05-22T22:35:12.991497Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7f15e674-82a0-446c-a5c6-e2cee8d4d4d7/export</guid>
      <pubDate>Fri, 22 May 2026 22:35:12 +0000</pubDate>
    </item>
    <item>
      <title>cfc44ffc-2ad9-4029-91e7-96f54eb1de9f</title>
      <link>https://vulnerability.circl.lu/sighting/cfc44ffc-2ad9-4029-91e7-96f54eb1de9f/export</link>
      <description>{"uuid": "cfc44ffc-2ad9-4029-91e7-96f54eb1de9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39968", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhysg2wbj2n", "content": "CVE-2026-39968 - TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint\nCVE ID : CVE-2026-39968\n \n Published : May 22, 2026, 6:26 p.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA...", "creation_timestamp": "2026-05-22T22:38:41.203051Z"}</description>
      <content:encoded>{"uuid": "cfc44ffc-2ad9-4029-91e7-96f54eb1de9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39968", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhysg2wbj2n", "content": "CVE-2026-39968 - TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint\nCVE ID : CVE-2026-39968\n \n Published : May 22, 2026, 6:26 p.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA...", "creation_timestamp": "2026-05-22T22:38:41.203051Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cfc44ffc-2ad9-4029-91e7-96f54eb1de9f/export</guid>
      <pubDate>Fri, 22 May 2026 22:38:41 +0000</pubDate>
    </item>
    <item>
      <title>b696c15b-c486-4f61-8fb1-92e0dcc80397</title>
      <link>https://vulnerability.circl.lu/sighting/b696c15b-c486-4f61-8fb1-92e0dcc80397/export</link>
      <description>{"uuid": "b696c15b-c486-4f61-8fb1-92e0dcc80397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39969", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhzk5mgio2q", "content": "CVE-2026-39969 - TypeBot: WhatsApp Webhook Endpoint Missing Signature Verification\nCVE ID : CVE-2026-39969\n \n Published : May 22, 2026, 6:43 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. In versions 3.16.0 and prior, the WhatsApp Cloud API w...", "creation_timestamp": "2026-05-22T22:51:57.686611Z"}</description>
      <content:encoded>{"uuid": "b696c15b-c486-4f61-8fb1-92e0dcc80397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39969", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhzk5mgio2q", "content": "CVE-2026-39969 - TypeBot: WhatsApp Webhook Endpoint Missing Signature Verification\nCVE ID : CVE-2026-39969\n \n Published : May 22, 2026, 6:43 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : TypeBot is a chatbot builder tool. In versions 3.16.0 and prior, the WhatsApp Cloud API w...", "creation_timestamp": "2026-05-22T22:51:57.686611Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b696c15b-c486-4f61-8fb1-92e0dcc80397/export</guid>
      <pubDate>Fri, 22 May 2026 22:51:57 +0000</pubDate>
    </item>
  </channel>
</rss>
