<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 15 Jun 2026 02:49:52 +0000</lastBuildDate>
    <item>
      <title>cd3c592c-7d01-411d-89bb-d58648d2de95</title>
      <link>https://vulnerability.circl.lu/sighting/cd3c592c-7d01-411d-89bb-d58648d2de95/export</link>
      <description>{"uuid": "cd3c592c-7d01-411d-89bb-d58648d2de95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44257", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlphsg4x3b23", "content": "\ud83d\udd34 CRITICAL vuln in efwGrp efw4.X (&amp;lt;4.08.010): Remote attackers can upload webshells &amp;amp; run commands as Tomcat due to path traversal. Upgrade to 4.08.010 now! https://radar.offseq.com/threat/cve-2026-44257-cwe-77-improper-neutralization-of-s-a113f36f #OffSeq #infosec #patchnow", "creation_timestamp": "2026-05-13T04:30:34.519346Z"}</description>
      <content:encoded>{"uuid": "cd3c592c-7d01-411d-89bb-d58648d2de95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44257", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlphsg4x3b23", "content": "\ud83d\udd34 CRITICAL vuln in efwGrp efw4.X (&amp;lt;4.08.010): Remote attackers can upload webshells &amp;amp; run commands as Tomcat due to path traversal. Upgrade to 4.08.010 now! https://radar.offseq.com/threat/cve-2026-44257-cwe-77-improper-neutralization-of-s-a113f36f #OffSeq #infosec #patchnow", "creation_timestamp": "2026-05-13T04:30:34.519346Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cd3c592c-7d01-411d-89bb-d58648d2de95/export</guid>
      <pubDate>Wed, 13 May 2026 04:30:34 +0000</pubDate>
    </item>
    <item>
      <title>b08a98a9-1712-44bf-b26e-918b680c5ab6</title>
      <link>https://vulnerability.circl.lu/sighting/b08a98a9-1712-44bf-b26e-918b680c5ab6/export</link>
      <description>{"uuid": "b08a98a9-1712-44bf-b26e-918b680c5ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44257", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116565385652211978", "content": "\ud83d\udea8 CRITICAL: CVE-2026-44257 in efwGrp efw4.X (&amp;lt;4.08.010) enables remote, unauthenticated command execution via crafted zip uploads and path traversal. Patch to 4.08.010 ASAP. https://radar.offseq.com/threat/cve-2026-44257-cwe-77-improper-neutralization-of-s-a113f36f #OffSeq #vuln #infosec #websecurity", "creation_timestamp": "2026-05-13T04:30:40.702982Z"}</description>
      <content:encoded>{"uuid": "b08a98a9-1712-44bf-b26e-918b680c5ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44257", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116565385652211978", "content": "\ud83d\udea8 CRITICAL: CVE-2026-44257 in efwGrp efw4.X (&amp;lt;4.08.010) enables remote, unauthenticated command execution via crafted zip uploads and path traversal. Patch to 4.08.010 ASAP. https://radar.offseq.com/threat/cve-2026-44257-cwe-77-improper-neutralization-of-s-a113f36f #OffSeq #vuln #infosec #websecurity", "creation_timestamp": "2026-05-13T04:30:40.702982Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b08a98a9-1712-44bf-b26e-918b680c5ab6/export</guid>
      <pubDate>Wed, 13 May 2026 04:30:40 +0000</pubDate>
    </item>
  </channel>
</rss>
