<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 02 Jun 2026 08:58:09 +0000</lastBuildDate>
    <item>
      <title>a2432f4f-ce06-4454-9be7-0ad2ddfa54c9</title>
      <link>https://vulnerability.circl.lu/sighting/a2432f4f-ce06-4454-9be7-0ad2ddfa54c9/export</link>
      <description>{"uuid": "a2432f4f-ce06-4454-9be7-0ad2ddfa54c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4640", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrtk7qoca2a", "content": "", "creation_timestamp": "2026-03-24T05:25:17.440512Z"}</description>
      <content:encoded>{"uuid": "a2432f4f-ce06-4454-9be7-0ad2ddfa54c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4640", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrtk7qoca2a", "content": "", "creation_timestamp": "2026-03-24T05:25:17.440512Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a2432f4f-ce06-4454-9be7-0ad2ddfa54c9/export</guid>
      <pubDate>Tue, 24 Mar 2026 05:25:17 +0000</pubDate>
    </item>
    <item>
      <title>bc4cfb1b-aac3-46c9-8a97-1d71862b9f63</title>
      <link>https://vulnerability.circl.lu/sighting/bc4cfb1b-aac3-46c9-8a97-1d71862b9f63/export</link>
      <description>{"uuid": "bc4cfb1b-aac3-46c9-8a97-1d71862b9f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrywm3tqo2g", "content": "", "creation_timestamp": "2026-03-24T07:01:41.096098Z"}</description>
      <content:encoded>{"uuid": "bc4cfb1b-aac3-46c9-8a97-1d71862b9f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrywm3tqo2g", "content": "", "creation_timestamp": "2026-03-24T07:01:41.096098Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bc4cfb1b-aac3-46c9-8a97-1d71862b9f63/export</guid>
      <pubDate>Tue, 24 Mar 2026 07:01:41 +0000</pubDate>
    </item>
    <item>
      <title>d5846f50-293d-40b1-850d-6e1d5f349f70</title>
      <link>https://vulnerability.circl.lu/sighting/d5846f50-293d-40b1-850d-6e1d5f349f70/export</link>
      <description>{"uuid": "d5846f50-293d-40b1-850d-6e1d5f349f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46408", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxz3olh6h2z", "content": "\ud83d\udfe0 CVE-2026-46408 - High (7.6)\n\nVvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46408/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T14:02:22.153896Z"}</description>
      <content:encoded>{"uuid": "d5846f50-293d-40b1-850d-6e1d5f349f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46408", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxz3olh6h2z", "content": "\ud83d\udfe0 CVE-2026-46408 - High (7.6)\n\nVvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46408/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T14:02:22.153896Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d5846f50-293d-40b1-850d-6e1d5f349f70/export</guid>
      <pubDate>Sat, 16 May 2026 14:02:22 +0000</pubDate>
    </item>
    <item>
      <title>015b3d70-5a08-4296-950c-4279212f9e54</title>
      <link>https://vulnerability.circl.lu/sighting/015b3d70-5a08-4296-950c-4279212f9e54/export</link>
      <description>{"uuid": "015b3d70-5a08-4296-950c-4279212f9e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46403", "type": "published-proof-of-concept", "source": "https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33", "content": "", "creation_timestamp": "2026-05-19T10:00:26.000000Z"}</description>
      <content:encoded>{"uuid": "015b3d70-5a08-4296-950c-4279212f9e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46403", "type": "published-proof-of-concept", "source": "https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33", "content": "", "creation_timestamp": "2026-05-19T10:00:26.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/015b3d70-5a08-4296-950c-4279212f9e54/export</guid>
      <pubDate>Tue, 19 May 2026 10:00:26 +0000</pubDate>
    </item>
    <item>
      <title>e0c4d3dc-4a18-449a-bd56-23d37fecc4f2</title>
      <link>https://vulnerability.circl.lu/sighting/e0c4d3dc-4a18-449a-bd56-23d37fecc4f2/export</link>
      <description>{"uuid": "e0c4d3dc-4a18-449a-bd56-23d37fecc4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46402", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumods67b2r", "content": "CVE-2026-46402 - Microsoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directory\nCVE ID : CVE-2026-46402\n \n Published : May 27, 2026, 9:54 p.m. | 38\u00a0minutes ago\n \n Description : Microsoft UFO open-sour...", "creation_timestamp": "2026-05-27T23:06:16.309837Z"}</description>
      <content:encoded>{"uuid": "e0c4d3dc-4a18-449a-bd56-23d37fecc4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46402", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumods67b2r", "content": "CVE-2026-46402 - Microsoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directory\nCVE ID : CVE-2026-46402\n \n Published : May 27, 2026, 9:54 p.m. | 38\u00a0minutes ago\n \n Description : Microsoft UFO open-sour...", "creation_timestamp": "2026-05-27T23:06:16.309837Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e0c4d3dc-4a18-449a-bd56-23d37fecc4f2/export</guid>
      <pubDate>Wed, 27 May 2026 23:06:16 +0000</pubDate>
    </item>
    <item>
      <title>7e89e59f-b716-4139-8fdb-93a66c92e173</title>
      <link>https://vulnerability.circl.lu/sighting/7e89e59f-b716-4139-8fdb-93a66c92e173/export</link>
      <description>{"uuid": "7e89e59f-b716-4139-8fdb-93a66c92e173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46402", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmuyanmsf327", "content": "Microsoft UFO 3.0.1-4-ge2626659\u3067\u306f\u3001\u8a8d\u8a3c\u6e08\u307f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304ctask_name\u306b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u30fb\u30b7\u30fc\u30b1\u30f3\u30b9\u3092\u4ed5\u8fbc\u307f\u3001\u610f\u56f3\u3057\u306a\u3044\u5834\u6240\u3078\u306e\u30ed\u30b0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30fb\u30d5\u30a1\u30a4\u30eb\u4f5c\u6210\u2026\nCVE-2026-46402 CVSS 8.1 | HIGH", "creation_timestamp": "2026-05-28T02:33:22.415960Z"}</description>
      <content:encoded>{"uuid": "7e89e59f-b716-4139-8fdb-93a66c92e173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46402", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmuyanmsf327", "content": "Microsoft UFO 3.0.1-4-ge2626659\u3067\u306f\u3001\u8a8d\u8a3c\u6e08\u307f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304ctask_name\u306b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u30fb\u30b7\u30fc\u30b1\u30f3\u30b9\u3092\u4ed5\u8fbc\u307f\u3001\u610f\u56f3\u3057\u306a\u3044\u5834\u6240\u3078\u306e\u30ed\u30b0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30fb\u30d5\u30a1\u30a4\u30eb\u4f5c\u6210\u2026\nCVE-2026-46402 CVSS 8.1 | HIGH", "creation_timestamp": "2026-05-28T02:33:22.415960Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7e89e59f-b716-4139-8fdb-93a66c92e173/export</guid>
      <pubDate>Thu, 28 May 2026 02:33:22 +0000</pubDate>
    </item>
    <item>
      <title>d20c1810-af2c-44f4-9e49-8ddf69abf79c</title>
      <link>https://vulnerability.circl.lu/sighting/d20c1810-af2c-44f4-9e49-8ddf69abf79c/export</link>
      <description>{"uuid": "d20c1810-af2c-44f4-9e49-8ddf69abf79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46402", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116650673866596517", "content": "\u26a0\ufe0f HIGH severity: Microsoft UFO 3.0.1-4-ge2626659 has a path traversal vuln (CVE-2026-46402). Authenticated users can write files outside logs/. No patch yet \u2014 restrict access &amp;amp; monitor input. https://radar.offseq.com/threat/cve-2026-46402-cwe-22-improper-limitation-of-a-pat-6437f7ab #OffSeq #Microsoft #PathTraversal #CVE202646402", "creation_timestamp": "2026-05-28T06:00:29.290083Z"}</description>
      <content:encoded>{"uuid": "d20c1810-af2c-44f4-9e49-8ddf69abf79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46402", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116650673866596517", "content": "\u26a0\ufe0f HIGH severity: Microsoft UFO 3.0.1-4-ge2626659 has a path traversal vuln (CVE-2026-46402). Authenticated users can write files outside logs/. No patch yet \u2014 restrict access &amp;amp; monitor input. https://radar.offseq.com/threat/cve-2026-46402-cwe-22-improper-limitation-of-a-pat-6437f7ab #OffSeq #Microsoft #PathTraversal #CVE202646402", "creation_timestamp": "2026-05-28T06:00:29.290083Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d20c1810-af2c-44f4-9e49-8ddf69abf79c/export</guid>
      <pubDate>Thu, 28 May 2026 06:00:29 +0000</pubDate>
    </item>
    <item>
      <title>42eab82b-0471-4295-8f67-e16f039aa432</title>
      <link>https://vulnerability.circl.lu/sighting/42eab82b-0471-4295-8f67-e16f039aa432/export</link>
      <description>{"uuid": "42eab82b-0471-4295-8f67-e16f039aa432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46402", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmvdsz2lzi2p", "content": "Microsoft UFO 3.0.1-4-ge2626659: HIGH severity path traversal lets authenticated users create files beyond logs/. No patch \u2014 restrict access &amp;amp; monitor inputs. https://radar.offseq.com/threat/cve-2026-46402-cwe-22-improper-limitation-of-a-pat-6437f7ab #OffSeq #Microsoft #Vulnerability", "creation_timestamp": "2026-05-28T06:00:30.480810Z"}</description>
      <content:encoded>{"uuid": "42eab82b-0471-4295-8f67-e16f039aa432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46402", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmvdsz2lzi2p", "content": "Microsoft UFO 3.0.1-4-ge2626659: HIGH severity path traversal lets authenticated users create files beyond logs/. No patch \u2014 restrict access &amp;amp; monitor inputs. https://radar.offseq.com/threat/cve-2026-46402-cwe-22-improper-limitation-of-a-pat-6437f7ab #OffSeq #Microsoft #Vulnerability", "creation_timestamp": "2026-05-28T06:00:30.480810Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/42eab82b-0471-4295-8f67-e16f039aa432/export</guid>
      <pubDate>Thu, 28 May 2026 06:00:30 +0000</pubDate>
    </item>
  </channel>
</rss>
