<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 09 Jun 2026 03:02:44 +0000</lastBuildDate>
    <item>
      <title>242f5aff-57dc-4950-b8ae-c7abbab5b840</title>
      <link>https://vulnerability.circl.lu/sighting/242f5aff-57dc-4950-b8ae-c7abbab5b840/export</link>
      <description>{"uuid": "242f5aff-57dc-4950-b8ae-c7abbab5b840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44466", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5ilszt2s", "content": "\ud83d\udfe0 CVE-2026-44466 - High (8.6)\n\nZed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44466/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T18:02:11.512648Z"}</description>
      <content:encoded>{"uuid": "242f5aff-57dc-4950-b8ae-c7abbab5b840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44466", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5ilszt2s", "content": "\ud83d\udfe0 CVE-2026-44466 - High (8.6)\n\nZed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44466/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T18:02:11.512648Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/242f5aff-57dc-4950-b8ae-c7abbab5b840/export</guid>
      <pubDate>Thu, 28 May 2026 18:02:11 +0000</pubDate>
    </item>
    <item>
      <title>e360e195-0cb2-4194-9ed5-baa5f9855903</title>
      <link>https://vulnerability.circl.lu/sighting/e360e195-0cb2-4194-9ed5-baa5f9855903/export</link>
      <description>{"uuid": "e360e195-0cb2-4194-9ed5-baa5f9855903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44466", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwreavbin2t", "content": "CVE-2026-44466 - Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions\nCVE ID : CVE-2026-44466\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission sys...", "creation_timestamp": "2026-05-28T19:35:25.904534Z"}</description>
      <content:encoded>{"uuid": "e360e195-0cb2-4194-9ed5-baa5f9855903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44466", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwreavbin2t", "content": "CVE-2026-44466 - Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions\nCVE ID : CVE-2026-44466\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission sys...", "creation_timestamp": "2026-05-28T19:35:25.904534Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e360e195-0cb2-4194-9ed5-baa5f9855903/export</guid>
      <pubDate>Thu, 28 May 2026 19:35:25 +0000</pubDate>
    </item>
    <item>
      <title>fdef8202-2884-43d6-b3ba-7f7a5266d63e</title>
      <link>https://vulnerability.circl.lu/sighting/fdef8202-2884-43d6-b3ba-7f7a5266d63e/export</link>
      <description>{"uuid": "fdef8202-2884-43d6-b3ba-7f7a5266d63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44465", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwrnb4ih62c", "content": "CVE-2026-44465 - Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config\nCVE ID : CVE-2026-44465\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary...", "creation_timestamp": "2026-05-28T19:40:28.387938Z"}</description>
      <content:encoded>{"uuid": "fdef8202-2884-43d6-b3ba-7f7a5266d63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44465", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwrnb4ih62c", "content": "CVE-2026-44465 - Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config\nCVE ID : CVE-2026-44465\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary...", "creation_timestamp": "2026-05-28T19:40:28.387938Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fdef8202-2884-43d6-b3ba-7f7a5266d63e/export</guid>
      <pubDate>Thu, 28 May 2026 19:40:28 +0000</pubDate>
    </item>
    <item>
      <title>629bd9f4-3d89-4864-a0bd-d32325314ff7</title>
      <link>https://vulnerability.circl.lu/sighting/629bd9f4-3d89-4864-a0bd-d32325314ff7/export</link>
      <description>{"uuid": "629bd9f4-3d89-4864-a0bd-d32325314ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44461", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwrqmwito2c", "content": "CVE-2026-44461 - Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)\nCVE ID : CVE-2026-44461\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote c...", "creation_timestamp": "2026-05-28T19:42:21.320722Z"}</description>
      <content:encoded>{"uuid": "629bd9f4-3d89-4864-a0bd-d32325314ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44461", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwrqmwito2c", "content": "CVE-2026-44461 - Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)\nCVE ID : CVE-2026-44461\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote c...", "creation_timestamp": "2026-05-28T19:42:21.320722Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/629bd9f4-3d89-4864-a0bd-d32325314ff7/export</guid>
      <pubDate>Thu, 28 May 2026 19:42:21 +0000</pubDate>
    </item>
    <item>
      <title>5149881b-717e-443e-9498-17c1b62c41a6</title>
      <link>https://vulnerability.circl.lu/sighting/5149881b-717e-443e-9498-17c1b62c41a6/export</link>
      <description>{"uuid": "5149881b-717e-443e-9498-17c1b62c41a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44463", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwt7frvk42e", "content": "CVE-2026-44463 - Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions\nCVE ID : CVE-2026-44463\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permissio...", "creation_timestamp": "2026-05-28T20:08:30.784625Z"}</description>
      <content:encoded>{"uuid": "5149881b-717e-443e-9498-17c1b62c41a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44463", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwt7frvk42e", "content": "CVE-2026-44463 - Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions\nCVE ID : CVE-2026-44463\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permissio...", "creation_timestamp": "2026-05-28T20:08:30.784625Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5149881b-717e-443e-9498-17c1b62c41a6/export</guid>
      <pubDate>Thu, 28 May 2026 20:08:30 +0000</pubDate>
    </item>
    <item>
      <title>55910e40-b2c5-49be-87e8-f39f2a403e5d</title>
      <link>https://vulnerability.circl.lu/sighting/55910e40-b2c5-49be-87e8-f39f2a403e5d/export</link>
      <description>{"uuid": "55910e40-b2c5-49be-87e8-f39f2a403e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44463", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww6msug72z", "content": "\ud83d\udfe0 CVE-2026-44463 - High (8.6)\n\nZed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44463/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T21:01:47.238904Z"}</description>
      <content:encoded>{"uuid": "55910e40-b2c5-49be-87e8-f39f2a403e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44463", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww6msug72z", "content": "\ud83d\udfe0 CVE-2026-44463 - High (8.6)\n\nZed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44463/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T21:01:47.238904Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/55910e40-b2c5-49be-87e8-f39f2a403e5d/export</guid>
      <pubDate>Thu, 28 May 2026 21:01:47 +0000</pubDate>
    </item>
    <item>
      <title>c845d47b-b654-4606-8af1-11be6bb370d4</title>
      <link>https://vulnerability.circl.lu/sighting/c845d47b-b654-4606-8af1-11be6bb370d4/export</link>
      <description>{"uuid": "c845d47b-b654-4606-8af1-11be6bb370d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44465", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mndkig26as25", "content": "\ud83d\udccc CVE-2026-44465 - Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the co... https://www.cyberhub.blog/cves/CVE-2026-44465", "creation_timestamp": "2026-06-02T21:37:06.031570Z"}</description>
      <content:encoded>{"uuid": "c845d47b-b654-4606-8af1-11be6bb370d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44465", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mndkig26as25", "content": "\ud83d\udccc CVE-2026-44465 - Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the co... https://www.cyberhub.blog/cves/CVE-2026-44465", "creation_timestamp": "2026-06-02T21:37:06.031570Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c845d47b-b654-4606-8af1-11be6bb370d4/export</guid>
      <pubDate>Tue, 02 Jun 2026 21:37:06 +0000</pubDate>
    </item>
    <item>
      <title>370ccd51-61ae-43bb-8997-9660fb62f8c4</title>
      <link>https://vulnerability.circl.lu/sighting/370ccd51-61ae-43bb-8997-9660fb62f8c4/export</link>
      <description>{"uuid": "370ccd51-61ae-43bb-8997-9660fb62f8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mndm645qgj2f", "content": "\ud83d\udccc CVE-2026-44466 - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowing executi... https://www.cyberhub.blog/cves/CVE-2026-44466", "creation_timestamp": "2026-06-02T22:07:07.555342Z"}</description>
      <content:encoded>{"uuid": "370ccd51-61ae-43bb-8997-9660fb62f8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mndm645qgj2f", "content": "\ud83d\udccc CVE-2026-44466 - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash arithmetic expansion $((...)), allowing executi... https://www.cyberhub.blog/cves/CVE-2026-44466", "creation_timestamp": "2026-06-02T22:07:07.555342Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/370ccd51-61ae-43bb-8997-9660fb62f8c4/export</guid>
      <pubDate>Tue, 02 Jun 2026 22:07:07 +0000</pubDate>
    </item>
    <item>
      <title>eb2d2ebc-e146-4670-9c42-e03f301ba9af</title>
      <link>https://vulnerability.circl.lu/sighting/eb2d2ebc-e146-4670-9c42-e03f301ba9af/export</link>
      <description>{"uuid": "eb2d2ebc-e146-4670-9c42-e03f301ba9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44463", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mne3atyzkn2t", "content": "\ud83d\udccc CVE-2026-44463 - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowl... https://www.cyberhub.blog/cves/CVE-2026-44463", "creation_timestamp": "2026-06-03T02:37:05.882146Z"}</description>
      <content:encoded>{"uuid": "eb2d2ebc-e146-4670-9c42-e03f301ba9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44463", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mne3atyzkn2t", "content": "\ud83d\udccc CVE-2026-44463 - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowl... https://www.cyberhub.blog/cves/CVE-2026-44463", "creation_timestamp": "2026-06-03T02:37:05.882146Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eb2d2ebc-e146-4670-9c42-e03f301ba9af/export</guid>
      <pubDate>Wed, 03 Jun 2026 02:37:05 +0000</pubDate>
    </item>
    <item>
      <title>9ca167fe-a8ca-4470-b738-2aab3fd3fbdc</title>
      <link>https://vulnerability.circl.lu/sighting/9ca167fe-a8ca-4470-b738-2aab3fd3fbdc/export</link>
      <description>{"uuid": "9ca167fe-a8ca-4470-b738-2aab3fd3fbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44461", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mne4wk3z5k2f", "content": "\ud83d\udccc CVE-2026-44461 - Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment va... https://www.cyberhub.blog/cves/CVE-2026-44461", "creation_timestamp": "2026-06-03T03:07:07.308228Z"}</description>
      <content:encoded>{"uuid": "9ca167fe-a8ca-4470-b738-2aab3fd3fbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44461", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mne4wk3z5k2f", "content": "\ud83d\udccc CVE-2026-44461 - Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment va... https://www.cyberhub.blog/cves/CVE-2026-44461", "creation_timestamp": "2026-06-03T03:07:07.308228Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9ca167fe-a8ca-4470-b738-2aab3fd3fbdc/export</guid>
      <pubDate>Wed, 03 Jun 2026 03:07:07 +0000</pubDate>
    </item>
  </channel>
</rss>
