<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 15 Jun 2026 00:11:25 +0000</lastBuildDate>
    <item>
      <title>89822a9f-42e8-4b82-b7b2-47ebb43a7dd7</title>
      <link>https://vulnerability.circl.lu/sighting/89822a9f-42e8-4b82-b7b2-47ebb43a7dd7/export</link>
      <description>{"uuid": "89822a9f-42e8-4b82-b7b2-47ebb43a7dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42431", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkrjbo5n4l2v", "content": "\ud83d\udccc CVE-2026-42431 - OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles. A... https://www.cyberhub.blog/cves/CVE-2026-42431", "creation_timestamp": "2026-05-01T06:37:07.459319Z"}</description>
      <content:encoded>{"uuid": "89822a9f-42e8-4b82-b7b2-47ebb43a7dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42431", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkrjbo5n4l2v", "content": "\ud83d\udccc CVE-2026-42431 - OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles. A... https://www.cyberhub.blog/cves/CVE-2026-42431", "creation_timestamp": "2026-05-01T06:37:07.459319Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/89822a9f-42e8-4b82-b7b2-47ebb43a7dd7/export</guid>
      <pubDate>Fri, 01 May 2026 06:37:07 +0000</pubDate>
    </item>
    <item>
      <title>623b42da-c9dd-48c5-91bf-97ca5aa31131</title>
      <link>https://vulnerability.circl.lu/sighting/623b42da-c9dd-48c5-91bf-97ca5aa31131/export</link>
      <description>{"uuid": "623b42da-c9dd-48c5-91bf-97ca5aa31131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gid7yxw2k", "content": "CVE-2026-42434 - OpenClaw 2026.4.5\nCVE ID : CVE-2026-42434\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by ...", "creation_timestamp": "2026-05-05T14:46:26.534054Z"}</description>
      <content:encoded>{"uuid": "623b42da-c9dd-48c5-91bf-97ca5aa31131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gid7yxw2k", "content": "CVE-2026-42434 - OpenClaw 2026.4.5\nCVE ID : CVE-2026-42434\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by ...", "creation_timestamp": "2026-05-05T14:46:26.534054Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/623b42da-c9dd-48c5-91bf-97ca5aa31131/export</guid>
      <pubDate>Tue, 05 May 2026 14:46:26 +0000</pubDate>
    </item>
    <item>
      <title>4efe09e3-64c5-4e1a-8db2-915b4937d48a</title>
      <link>https://vulnerability.circl.lu/sighting/4efe09e3-64c5-4e1a-8db2-915b4937d48a/export</link>
      <description>{"uuid": "4efe09e3-64c5-4e1a-8db2-915b4937d48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42437", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gyxc7zt2h", "content": "CVE-2026-42437 - OpenClaw 2026.4.9\nCVE ID : CVE-2026-42437\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that acce...", "creation_timestamp": "2026-05-05T14:55:45.382729Z"}</description>
      <content:encoded>{"uuid": "4efe09e3-64c5-4e1a-8db2-915b4937d48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42437", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gyxc7zt2h", "content": "CVE-2026-42437 - OpenClaw 2026.4.9\nCVE ID : CVE-2026-42437\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that acce...", "creation_timestamp": "2026-05-05T14:55:45.382729Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4efe09e3-64c5-4e1a-8db2-915b4937d48a/export</guid>
      <pubDate>Tue, 05 May 2026 14:55:45 +0000</pubDate>
    </item>
    <item>
      <title>d618c25d-63e6-4058-92a9-519da4854de8</title>
      <link>https://vulnerability.circl.lu/sighting/d618c25d-63e6-4058-92a9-519da4854de8/export</link>
      <description>{"uuid": "d618c25d-63e6-4058-92a9-519da4854de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4hbvspjn2o", "content": "CVE-2026-42435 - OpenClaw 2026.2.22\nCVE ID : CVE-2026-42435\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to in...", "creation_timestamp": "2026-05-05T15:00:45.312831Z"}</description>
      <content:encoded>{"uuid": "d618c25d-63e6-4058-92a9-519da4854de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4hbvspjn2o", "content": "CVE-2026-42435 - OpenClaw 2026.2.22\nCVE ID : CVE-2026-42435\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to in...", "creation_timestamp": "2026-05-05T15:00:45.312831Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d618c25d-63e6-4058-92a9-519da4854de8/export</guid>
      <pubDate>Tue, 05 May 2026 15:00:45 +0000</pubDate>
    </item>
    <item>
      <title>080750da-3005-4dbc-961f-1a6dbf5ee398</title>
      <link>https://vulnerability.circl.lu/sighting/080750da-3005-4dbc-961f-1a6dbf5ee398/export</link>
      <description>{"uuid": "080750da-3005-4dbc-961f-1a6dbf5ee398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4i4rbxlk2c", "content": "CVE-2026-42439 - OpenClaw\nCVE ID : CVE-2026-42439\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. A...", "creation_timestamp": "2026-05-05T15:15:46.137834Z"}</description>
      <content:encoded>{"uuid": "080750da-3005-4dbc-961f-1a6dbf5ee398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4i4rbxlk2c", "content": "CVE-2026-42439 - OpenClaw\nCVE ID : CVE-2026-42439\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. A...", "creation_timestamp": "2026-05-05T15:15:46.137834Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/080750da-3005-4dbc-961f-1a6dbf5ee398/export</guid>
      <pubDate>Tue, 05 May 2026 15:15:46 +0000</pubDate>
    </item>
    <item>
      <title>e5125ead-e935-4ec9-9418-f39aafddb180</title>
      <link>https://vulnerability.circl.lu/sighting/e5125ead-e935-4ec9-9418-f39aafddb180/export</link>
      <description>{"uuid": "e5125ead-e935-4ec9-9418-f39aafddb180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42436", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rchpy2u2e", "content": "\ud83d\udfe0 CVE-2026-42436 - High (7.7)\n\nOpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42436/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T18:00:04.759593Z"}</description>
      <content:encoded>{"uuid": "e5125ead-e935-4ec9-9418-f39aafddb180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42436", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rchpy2u2e", "content": "\ud83d\udfe0 CVE-2026-42436 - High (7.7)\n\nOpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42436/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T18:00:04.759593Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e5125ead-e935-4ec9-9418-f39aafddb180/export</guid>
      <pubDate>Tue, 05 May 2026 18:00:04 +0000</pubDate>
    </item>
    <item>
      <title>1d427759-7e0f-444f-afe1-297d529716bb</title>
      <link>https://vulnerability.circl.lu/sighting/1d427759-7e0f-444f-afe1-297d529716bb/export</link>
      <description>{"uuid": "1d427759-7e0f-444f-afe1-297d529716bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42437", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rcoj5ey2k", "content": "\ud83d\udfe0 CVE-2026-42437 - High (7.5)\n\nOpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42437/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T18:00:09.011922Z"}</description>
      <content:encoded>{"uuid": "1d427759-7e0f-444f-afe1-297d529716bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42437", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rcoj5ey2k", "content": "\ud83d\udfe0 CVE-2026-42437 - High (7.5)\n\nOpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42437/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T18:00:09.011922Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1d427759-7e0f-444f-afe1-297d529716bb/export</guid>
      <pubDate>Tue, 05 May 2026 18:00:09 +0000</pubDate>
    </item>
    <item>
      <title>9c0b9d37-9dee-411e-bd53-966244142ce9</title>
      <link>https://vulnerability.circl.lu/sighting/9c0b9d37-9dee-411e-bd53-966244142ce9/export</link>
      <description>{"uuid": "9c0b9d37-9dee-411e-bd53-966244142ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uwjowjc2z", "content": "\ud83d\udfe0 CVE-2026-42434 - High (8.8)\n\nOpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandb...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:04:56.441421Z"}</description>
      <content:encoded>{"uuid": "9c0b9d37-9dee-411e-bd53-966244142ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uwjowjc2z", "content": "\ud83d\udfe0 CVE-2026-42434 - High (8.8)\n\nOpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandb...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:04:56.441421Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9c0b9d37-9dee-411e-bd53-966244142ce9/export</guid>
      <pubDate>Tue, 05 May 2026 19:04:56 +0000</pubDate>
    </item>
    <item>
      <title>dc586e34-9fa4-4b3f-8229-0287c990fe9e</title>
      <link>https://vulnerability.circl.lu/sighting/dc586e34-9fa4-4b3f-8229-0287c990fe9e/export</link>
      <description>{"uuid": "dc586e34-9fa4-4b3f-8229-0287c990fe9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42435", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uwr4uxl2k", "content": "\ud83d\udfe0 CVE-2026-42435 - High (8.8)\n\nOpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42435/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:05:03.840127Z"}</description>
      <content:encoded>{"uuid": "dc586e34-9fa4-4b3f-8229-0287c990fe9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42435", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uwr4uxl2k", "content": "\ud83d\udfe0 CVE-2026-42435 - High (8.8)\n\nOpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42435/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:05:03.840127Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dc586e34-9fa4-4b3f-8229-0287c990fe9e/export</guid>
      <pubDate>Tue, 05 May 2026 19:05:03 +0000</pubDate>
    </item>
    <item>
      <title>c75731ab-1468-4cdc-88c2-df840938adad</title>
      <link>https://vulnerability.circl.lu/sighting/c75731ab-1468-4cdc-88c2-df840938adad/export</link>
      <description>{"uuid": "c75731ab-1468-4cdc-88c2-df840938adad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42439", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mladoxwkya2y", "content": "\ud83d\udccc CVE-2026-42439 - OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attac... https://www.cyberhub.blog/cves/CVE-2026-42439", "creation_timestamp": "2026-05-07T04:07:08.136097Z"}</description>
      <content:encoded>{"uuid": "c75731ab-1468-4cdc-88c2-df840938adad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42439", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mladoxwkya2y", "content": "\ud83d\udccc CVE-2026-42439 - OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attac... https://www.cyberhub.blog/cves/CVE-2026-42439", "creation_timestamp": "2026-05-07T04:07:08.136097Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c75731ab-1468-4cdc-88c2-df840938adad/export</guid>
      <pubDate>Thu, 07 May 2026 04:07:08 +0000</pubDate>
    </item>
  </channel>
</rss>
