<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 28 Jun 2026 18:41:35 +0000</lastBuildDate>
    <item>
      <title>1425a50b-0bd5-4bb1-8b4e-002728f51867</title>
      <link>https://vulnerability.circl.lu/sighting/1425a50b-0bd5-4bb1-8b4e-002728f51867/export</link>
      <description>{"uuid": "1425a50b-0bd5-4bb1-8b4e-002728f51867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkpp7doffc2e", "content": "CVE-2026-42799 - Out-of-bounds read in ulp\nCVE ID : CVE-2026-42799\n \n Published : April 30, 2026, 9:16 a.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers.\n\n This vulnerability is associated wit...", "creation_timestamp": "2026-04-30T13:17:52.267180Z"}</description>
      <content:encoded>{"uuid": "1425a50b-0bd5-4bb1-8b4e-002728f51867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkpp7doffc2e", "content": "CVE-2026-42799 - Out-of-bounds read in ulp\nCVE ID : CVE-2026-42799\n \n Published : April 30, 2026, 9:16 a.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers.\n\n This vulnerability is associated wit...", "creation_timestamp": "2026-04-30T13:17:52.267180Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1425a50b-0bd5-4bb1-8b4e-002728f51867/export</guid>
      <pubDate>Thu, 30 Apr 2026 13:17:52 +0000</pubDate>
    </item>
    <item>
      <title>702905f5-8b54-4e6f-9999-8e8e1fd5fac2</title>
      <link>https://vulnerability.circl.lu/sighting/702905f5-8b54-4e6f-9999-8e8e1fd5fac2/export</link>
      <description>{"uuid": "702905f5-8b54-4e6f-9999-8e8e1fd5fac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42799", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116497508868288034", "content": "A lot of offensive activities were identified targeting ASR Kestrel (CVE-2026-42799) https://vuldb.com/vuln/360291/cti", "creation_timestamp": "2026-05-01T04:48:37.343914Z"}</description>
      <content:encoded>{"uuid": "702905f5-8b54-4e6f-9999-8e8e1fd5fac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42799", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116497508868288034", "content": "A lot of offensive activities were identified targeting ASR Kestrel (CVE-2026-42799) https://vuldb.com/vuln/360291/cti", "creation_timestamp": "2026-05-01T04:48:37.343914Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/702905f5-8b54-4e6f-9999-8e8e1fd5fac2/export</guid>
      <pubDate>Fri, 01 May 2026 04:48:37 +0000</pubDate>
    </item>
    <item>
      <title>3364f35e-e2ec-4664-8434-8f0ea9165eb7</title>
      <link>https://vulnerability.circl.lu/sighting/3364f35e-e2ec-4664-8434-8f0ea9165eb7/export</link>
      <description>{"uuid": "3364f35e-e2ec-4664-8434-8f0ea9165eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bwbqkzy2k", "content": "\ud83d\udd34 CVE-2026-42796 - Critical (9.8)\n\nArelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /res...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42796/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:19:28.108178Z"}</description>
      <content:encoded>{"uuid": "3364f35e-e2ec-4664-8434-8f0ea9165eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bwbqkzy2k", "content": "\ud83d\udd34 CVE-2026-42796 - Critical (9.8)\n\nArelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /res...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42796/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:19:28.108178Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3364f35e-e2ec-4664-8434-8f0ea9165eb7/export</guid>
      <pubDate>Mon, 04 May 2026 18:19:28 +0000</pubDate>
    </item>
    <item>
      <title>9d155020-d838-4b33-b3a0-59cf1d53613f</title>
      <link>https://vulnerability.circl.lu/sighting/9d155020-d838-4b33-b3a0-59cf1d53613f/export</link>
      <description>{"uuid": "9d155020-d838-4b33-b3a0-59cf1d53613f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dhoyfqj2k", "content": "CVE-2026-42796 - Arelle\nCVE ID : CVE-2026-42796\n \n Published : May 4, 2026, 5:19 p.m. | 1\u00a0hour ago\n \n Description : Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins query parameter...", "creation_timestamp": "2026-05-04T18:47:06.842812Z"}</description>
      <content:encoded>{"uuid": "9d155020-d838-4b33-b3a0-59cf1d53613f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dhoyfqj2k", "content": "CVE-2026-42796 - Arelle\nCVE ID : CVE-2026-42796\n \n Published : May 4, 2026, 5:19 p.m. | 1\u00a0hour ago\n \n Description : Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins query parameter...", "creation_timestamp": "2026-05-04T18:47:06.842812Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9d155020-d838-4b33-b3a0-59cf1d53613f/export</guid>
      <pubDate>Mon, 04 May 2026 18:47:06 +0000</pubDate>
    </item>
    <item>
      <title>46e753dd-da84-4e99-86c4-60f112ec1840</title>
      <link>https://vulnerability.circl.lu/sighting/46e753dd-da84-4e99-86c4-60f112ec1840/export</link>
      <description>{"uuid": "46e753dd-da84-4e99-86c4-60f112ec1840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "seen", "source": "https://t.me/GithubRedTeam/83348", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ameerhamza-malik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-08 10:57:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-08T11:00:05.000000Z"}</description>
      <content:encoded>{"uuid": "46e753dd-da84-4e99-86c4-60f112ec1840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "seen", "source": "https://t.me/GithubRedTeam/83348", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ameerhamza-malik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-08 10:57:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-08T11:00:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/46e753dd-da84-4e99-86c4-60f112ec1840/export</guid>
      <pubDate>Fri, 08 May 2026 11:00:05 +0000</pubDate>
    </item>
    <item>
      <title>2bb42928-7b95-414a-9f00-1413237828e2</title>
      <link>https://vulnerability.circl.lu/sighting/2bb42928-7b95-414a-9f00-1413237828e2/export</link>
      <description>{"uuid": "2bb42928-7b95-414a-9f00-1413237828e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42793", "type": "published-proof-of-concept", "source": "https://github.com/absinthe-graphql/absinthe/security/advisories/GHSA-qf4g-9fqq-mmm7", "content": "", "creation_timestamp": "2026-05-08T16:15:00.000000Z"}</description>
      <content:encoded>{"uuid": "2bb42928-7b95-414a-9f00-1413237828e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42793", "type": "published-proof-of-concept", "source": "https://github.com/absinthe-graphql/absinthe/security/advisories/GHSA-qf4g-9fqq-mmm7", "content": "", "creation_timestamp": "2026-05-08T16:15:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2bb42928-7b95-414a-9f00-1413237828e2/export</guid>
      <pubDate>Fri, 08 May 2026 16:15:00 +0000</pubDate>
    </item>
    <item>
      <title>0090a068-d9df-468d-b487-cb3a6c0cf163</title>
      <link>https://vulnerability.circl.lu/sighting/0090a068-d9df-468d-b487-cb3a6c0cf163/export</link>
      <description>{"uuid": "0090a068-d9df-468d-b487-cb3a6c0cf163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42793", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlegaauzd22q", "content": "CVE-2026-42793 - Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe\nCVE ID : CVE-2026-42793\n \n Published : May 8, 2026, 4:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : Allocation of Resources Without Limits or Throttling vulnerability in absinthe-g...", "creation_timestamp": "2026-05-08T19:03:13.783158Z"}</description>
      <content:encoded>{"uuid": "0090a068-d9df-468d-b487-cb3a6c0cf163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42793", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlegaauzd22q", "content": "CVE-2026-42793 - Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe\nCVE ID : CVE-2026-42793\n \n Published : May 8, 2026, 4:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : Allocation of Resources Without Limits or Throttling vulnerability in absinthe-g...", "creation_timestamp": "2026-05-08T19:03:13.783158Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0090a068-d9df-468d-b487-cb3a6c0cf163/export</guid>
      <pubDate>Fri, 08 May 2026 19:03:13 +0000</pubDate>
    </item>
    <item>
      <title>712d7ae3-a9ea-4e5a-88f5-ec33dd277b22</title>
      <link>https://vulnerability.circl.lu/sighting/712d7ae3-a9ea-4e5a-88f5-ec33dd277b22/export</link>
      <description>{"uuid": "712d7ae3-a9ea-4e5a-88f5-ec33dd277b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuedlrtq62z", "content": "\ud83d\udccc CVE-2026-42796 - Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins quer... https://www.cyberhub.blog/cves/CVE-2026-42796", "creation_timestamp": "2026-05-27T20:37:05.977327Z"}</description>
      <content:encoded>{"uuid": "712d7ae3-a9ea-4e5a-88f5-ec33dd277b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuedlrtq62z", "content": "\ud83d\udccc CVE-2026-42796 - Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins quer... https://www.cyberhub.blog/cves/CVE-2026-42796", "creation_timestamp": "2026-05-27T20:37:05.977327Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/712d7ae3-a9ea-4e5a-88f5-ec33dd277b22/export</guid>
      <pubDate>Wed, 27 May 2026 20:37:05 +0000</pubDate>
    </item>
    <item>
      <title>c42973f3-60c6-41b9-9b3b-8aad5fda078a</title>
      <link>https://vulnerability.circl.lu/sighting/c42973f3-60c6-41b9-9b3b-8aad5fda078a/export</link>
      <description>{"uuid": "c42973f3-60c6-41b9-9b3b-8aad5fda078a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42795", "type": "seen", "source": "https://bsky.app/profile/janvhs.com/post/3mnjujssgpk2p", "content": "#gleam 1.17.0 is now available in #openSUSE Tumbleweed.\nIt fixes CVE-2026-32685, CVE-2026-42795 and CVE-2026-43965.\nI'll back-port the patches to #leap 15.7-16.1 in the near future.\n\nAdditionally, it improves the compiler error handling, LSP and JS code-gen. \ud83d\udc2d\n\nThanks @gleam.run and contributors \ud83d\udcab", "creation_timestamp": "2026-06-05T09:52:49.712008Z"}</description>
      <content:encoded>{"uuid": "c42973f3-60c6-41b9-9b3b-8aad5fda078a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42795", "type": "seen", "source": "https://bsky.app/profile/janvhs.com/post/3mnjujssgpk2p", "content": "#gleam 1.17.0 is now available in #openSUSE Tumbleweed.\nIt fixes CVE-2026-32685, CVE-2026-42795 and CVE-2026-43965.\nI'll back-port the patches to #leap 15.7-16.1 in the near future.\n\nAdditionally, it improves the compiler error handling, LSP and JS code-gen. \ud83d\udc2d\n\nThanks @gleam.run and contributors \ud83d\udcab", "creation_timestamp": "2026-06-05T09:52:49.712008Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c42973f3-60c6-41b9-9b3b-8aad5fda078a/export</guid>
      <pubDate>Fri, 05 Jun 2026 09:52:49 +0000</pubDate>
    </item>
    <item>
      <title>6bc835a4-8cc5-42a5-a67a-1d311580fca1</title>
      <link>https://vulnerability.circl.lu/sighting/6bc835a4-8cc5-42a5-a67a-1d311580fca1/export</link>
      <description>{"uuid": "6bc835a4-8cc5-42a5-a67a-1d311580fca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42795", "type": "seen", "source": "https://bsky.app/profile/janvhs.com/post/3mnjvzqchfk2a", "content": "#gleam 1.17.0 is now available in #openSUSE Tumbleweed.\nIt fixes CVE-2026-32685, CVE-2026-42795 and CVE-2026-43965.\nI'm in the process of back-porting the patches to Leap 15.7-16.1\n\nAdditionally, it improves the compiler error handling, LSP and JS code-gen \ud83d\udc2d\n\nThank you @gleam.run and contributors \ud83d\udcab", "creation_timestamp": "2026-06-05T10:19:37.161787Z"}</description>
      <content:encoded>{"uuid": "6bc835a4-8cc5-42a5-a67a-1d311580fca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42795", "type": "seen", "source": "https://bsky.app/profile/janvhs.com/post/3mnjvzqchfk2a", "content": "#gleam 1.17.0 is now available in #openSUSE Tumbleweed.\nIt fixes CVE-2026-32685, CVE-2026-42795 and CVE-2026-43965.\nI'm in the process of back-porting the patches to Leap 15.7-16.1\n\nAdditionally, it improves the compiler error handling, LSP and JS code-gen \ud83d\udc2d\n\nThank you @gleam.run and contributors \ud83d\udcab", "creation_timestamp": "2026-06-05T10:19:37.161787Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6bc835a4-8cc5-42a5-a67a-1d311580fca1/export</guid>
      <pubDate>Fri, 05 Jun 2026 10:19:37 +0000</pubDate>
    </item>
  </channel>
</rss>
