<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 02 Jun 2026 23:07:56 +0000</lastBuildDate>
    <item>
      <title>01305558-7e20-4cea-8ddb-f917dc814c3e</title>
      <link>https://vulnerability.circl.lu/sighting/01305558-7e20-4cea-8ddb-f917dc814c3e/export</link>
      <description>{"uuid": "01305558-7e20-4cea-8ddb-f917dc814c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40594", "type": "published-proof-of-concept", "source": "https://github.com/pyload/pyload/security/advisories/GHSA-mp82-fmj6-f22v", "content": "", "creation_timestamp": "2026-04-14T21:24:21.000000Z"}</description>
      <content:encoded>{"uuid": "01305558-7e20-4cea-8ddb-f917dc814c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40594", "type": "published-proof-of-concept", "source": "https://github.com/pyload/pyload/security/advisories/GHSA-mp82-fmj6-f22v", "content": "", "creation_timestamp": "2026-04-14T21:24:21.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/01305558-7e20-4cea-8ddb-f917dc814c3e/export</guid>
      <pubDate>Tue, 14 Apr 2026 21:24:21 +0000</pubDate>
    </item>
    <item>
      <title>60fc1d05-60fb-4aba-a67a-9e27563386bd</title>
      <link>https://vulnerability.circl.lu/sighting/60fc1d05-60fb-4aba-a67a-9e27563386bd/export</link>
      <description>{"uuid": "60fc1d05-60fb-4aba-a67a-9e27563386bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjqdnsg3fr2d", "content": "", "creation_timestamp": "2026-04-18T01:58:41.471525Z"}</description>
      <content:encoded>{"uuid": "60fc1d05-60fb-4aba-a67a-9e27563386bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjqdnsg3fr2d", "content": "", "creation_timestamp": "2026-04-18T01:58:41.471525Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/60fc1d05-60fb-4aba-a67a-9e27563386bd/export</guid>
      <pubDate>Sat, 18 Apr 2026 01:58:41 +0000</pubDate>
    </item>
    <item>
      <title>351a527a-012d-491f-aa41-5adf7a6c6731</title>
      <link>https://vulnerability.circl.lu/sighting/351a527a-012d-491f-aa41-5adf7a6c6731/export</link>
      <description>{"uuid": "351a527a-012d-491f-aa41-5adf7a6c6731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40591", "type": "seen", "source": "Telegram/HMXFp0Tl_wkMV3YbUFvnNEgjo9AC8CPiEoVa-pxPf99RdwY", "content": "", "creation_timestamp": "2026-04-21T19:25:57.000000Z"}</description>
      <content:encoded>{"uuid": "351a527a-012d-491f-aa41-5adf7a6c6731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40591", "type": "seen", "source": "Telegram/HMXFp0Tl_wkMV3YbUFvnNEgjo9AC8CPiEoVa-pxPf99RdwY", "content": "", "creation_timestamp": "2026-04-21T19:25:57.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/351a527a-012d-491f-aa41-5adf7a6c6731/export</guid>
      <pubDate>Tue, 21 Apr 2026 19:25:57 +0000</pubDate>
    </item>
    <item>
      <title>e215f690-c0d8-4de5-a894-eb761b77340a</title>
      <link>https://vulnerability.circl.lu/sighting/e215f690-c0d8-4de5-a894-eb761b77340a/export</link>
      <description>{"uuid": "e215f690-c0d8-4de5-a894-eb761b77340a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40599", "type": "seen", "source": "Telegram/raJRCian8jdwH_ZHMkV6wtcQApYY70x43uMZTCVVg-5BoqY", "content": "", "creation_timestamp": "2026-04-21T19:26:26.000000Z"}</description>
      <content:encoded>{"uuid": "e215f690-c0d8-4de5-a894-eb761b77340a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40599", "type": "seen", "source": "Telegram/raJRCian8jdwH_ZHMkV6wtcQApYY70x43uMZTCVVg-5BoqY", "content": "", "creation_timestamp": "2026-04-21T19:26:26.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e215f690-c0d8-4de5-a894-eb761b77340a/export</guid>
      <pubDate>Tue, 21 Apr 2026 19:26:26 +0000</pubDate>
    </item>
    <item>
      <title>f865036c-6324-4dd8-9c9b-c372663135d0</title>
      <link>https://vulnerability.circl.lu/sighting/f865036c-6324-4dd8-9c9b-c372663135d0/export</link>
      <description>{"uuid": "f865036c-6324-4dd8-9c9b-c372663135d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40595", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqevntsov2r", "content": "\ud83d\udfe0 CVE-2026-40595 - High (7.5)\n\nChartbrew is an open-source web application that can connect directly to databases and APIs and u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-40595/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:46:10.857681Z"}</description>
      <content:encoded>{"uuid": "f865036c-6324-4dd8-9c9b-c372663135d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40595", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqevntsov2r", "content": "\ud83d\udfe0 CVE-2026-40595 - High (7.5)\n\nChartbrew is an open-source web application that can connect directly to databases and APIs and u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-40595/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:46:10.857681Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f865036c-6324-4dd8-9c9b-c372663135d0/export</guid>
      <pubDate>Thu, 30 Apr 2026 19:46:10 +0000</pubDate>
    </item>
    <item>
      <title>3a1984a8-4100-403b-8324-c51e38849a1d</title>
      <link>https://vulnerability.circl.lu/sighting/3a1984a8-4100-403b-8324-c51e38849a1d/export</link>
      <description>{"uuid": "3a1984a8-4100-403b-8324-c51e38849a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40595", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mkqlwhmhop2f", "content": "Chartbrew 4.9.0\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306e\u30c1\u30e3\u30fc\u30c8ID\u3092\u77e5\u308b\u653b\u6483\u8005\u304c\u3001\u975e\u516c\u958b\u30c1\u30e3\u30fc\u30c8\u306e\u30c7\u30fc\u30bf\u3092\u95b2\u89a7\u30fb\u30a8\u30af\u30b9\u30dd\u30fc\u30c8\u3067\u304d\u308b\u8106\u5f31\u6027\u30025.0.0\u3067\u4fee\u6b63\u3002\nCVE-2026-40595 CVSS 7.5 | HIGH", "creation_timestamp": "2026-04-30T21:51:53.280759Z"}</description>
      <content:encoded>{"uuid": "3a1984a8-4100-403b-8324-c51e38849a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40595", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mkqlwhmhop2f", "content": "Chartbrew 4.9.0\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306e\u30c1\u30e3\u30fc\u30c8ID\u3092\u77e5\u308b\u653b\u6483\u8005\u304c\u3001\u975e\u516c\u958b\u30c1\u30e3\u30fc\u30c8\u306e\u30c7\u30fc\u30bf\u3092\u95b2\u89a7\u30fb\u30a8\u30af\u30b9\u30dd\u30fc\u30c8\u3067\u304d\u308b\u8106\u5f31\u6027\u30025.0.0\u3067\u4fee\u6b63\u3002\nCVE-2026-40595 CVSS 7.5 | HIGH", "creation_timestamp": "2026-04-30T21:51:53.280759Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3a1984a8-4100-403b-8324-c51e38849a1d/export</guid>
      <pubDate>Thu, 30 Apr 2026 21:51:53 +0000</pubDate>
    </item>
    <item>
      <title>11468552-5457-40d4-ac33-17ea87c8d5a5</title>
      <link>https://vulnerability.circl.lu/sighting/11468552-5457-40d4-ac33-17ea87c8d5a5/export</link>
      <description>{"uuid": "11468552-5457-40d4-ac33-17ea87c8d5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40596", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxb7f6tf2c", "content": "CVE-2026-40596 - MantisBT is vulnerable to XSS and potential account takeover via user font family preference update\nCVE ID : CVE-2026-40596\n \n Published : May 22, 2026, 7:25 p.m. | 54\u00a0minutes ago\n \n Description : Mantis Bug Tracker (MantisBT) is an open source issue tracker. ...", "creation_timestamp": "2026-05-22T22:11:09.968808Z"}</description>
      <content:encoded>{"uuid": "11468552-5457-40d4-ac33-17ea87c8d5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40596", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxb7f6tf2c", "content": "CVE-2026-40596 - MantisBT is vulnerable to XSS and potential account takeover via user font family preference update\nCVE ID : CVE-2026-40596\n \n Published : May 22, 2026, 7:25 p.m. | 54\u00a0minutes ago\n \n Description : Mantis Bug Tracker (MantisBT) is an open source issue tracker. ...", "creation_timestamp": "2026-05-22T22:11:09.968808Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/11468552-5457-40d4-ac33-17ea87c8d5a5/export</guid>
      <pubDate>Fri, 22 May 2026 22:11:09 +0000</pubDate>
    </item>
    <item>
      <title>67ab88ae-5fbe-47ce-82f5-ce7f63d0e8e0</title>
      <link>https://vulnerability.circl.lu/sighting/67ab88ae-5fbe-47ce-82f5-ce7f63d0e8e0/export</link>
      <description>{"uuid": "67ab88ae-5fbe-47ce-82f5-ce7f63d0e8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxqruzhh2h", "content": "CVE-2026-40598 - MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page\nCVE ID : CVE-2026-40598\n \n Published : May 22, 2026, 7:32 p.m. | 47\u00a0minutes ago\n \n Description : Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2...", "creation_timestamp": "2026-05-22T22:19:52.836730Z"}</description>
      <content:encoded>{"uuid": "67ab88ae-5fbe-47ce-82f5-ce7f63d0e8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxqruzhh2h", "content": "CVE-2026-40598 - MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page\nCVE ID : CVE-2026-40598\n \n Published : May 22, 2026, 7:32 p.m. | 47\u00a0minutes ago\n \n Description : Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2...", "creation_timestamp": "2026-05-22T22:19:52.836730Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/67ab88ae-5fbe-47ce-82f5-ce7f63d0e8e0/export</guid>
      <pubDate>Fri, 22 May 2026 22:19:52 +0000</pubDate>
    </item>
    <item>
      <title>c596719a-a056-406b-9bff-3d36b3f28ae5</title>
      <link>https://vulnerability.circl.lu/sighting/c596719a-a056-406b-9bff-3d36b3f28ae5/export</link>
      <description>{"uuid": "c596719a-a056-406b-9bff-3d36b3f28ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxykfjqe2i", "content": "CVE-2026-40597 - MantisBT has a Content Security Policy bypass via attachments\nCVE ID : CVE-2026-40597\n \n Published : May 22, 2026, 7:29 p.m. | 50\u00a0minutes ago\n \n Description : Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, given an...", "creation_timestamp": "2026-05-22T22:24:23.017510Z"}</description>
      <content:encoded>{"uuid": "c596719a-a056-406b-9bff-3d36b3f28ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxykfjqe2i", "content": "CVE-2026-40597 - MantisBT has a Content Security Policy bypass via attachments\nCVE ID : CVE-2026-40597\n \n Published : May 22, 2026, 7:29 p.m. | 50\u00a0minutes ago\n \n Description : Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, given an...", "creation_timestamp": "2026-05-22T22:24:23.017510Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c596719a-a056-406b-9bff-3d36b3f28ae5/export</guid>
      <pubDate>Fri, 22 May 2026 22:24:23 +0000</pubDate>
    </item>
  </channel>
</rss>
