<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 12 Sep 2026 11:08:15 +0000</lastBuildDate>
    <item>
      <title>67eed910-581b-44a5-83d2-9f5bc08d5440</title>
      <link>https://vulnerability.circl.lu/sighting/67eed910-581b-44a5-83d2-9f5bc08d5440/export</link>
      <description>{"uuid": "67eed910-581b-44a5-83d2-9f5bc08d5440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hturgru2t", "content": "CVE-2026-48273 - coldfusion 2025\nColdFusion may allow a low\u2011privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:04.342481Z"}</description>
      <content:encoded>{"uuid": "67eed910-581b-44a5-83d2-9f5bc08d5440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hturgru2t", "content": "CVE-2026-48273 - coldfusion 2025\nColdFusion may allow a low\u2011privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:04.342481Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/67eed910-581b-44a5-83d2-9f5bc08d5440/export</guid>
      <pubDate>Wed, 09 Sep 2026 11:50:04 +0000</pubDate>
    </item>
    <item>
      <title>83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d</title>
      <link>https://vulnerability.circl.lu/sighting/83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d/export</link>
      <description>{"uuid": "83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j", "content": "\ud83d\udea8 CVE-2026-48273 \u2014 CVSS 9.9 CRITICAL\n\nColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Inj...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48273\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:18.819080Z"}</description>
      <content:encoded>{"uuid": "83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j", "content": "\ud83d\udea8 CVE-2026-48273 \u2014 CVSS 9.9 CRITICAL\n\nColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Inj...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48273\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:18.819080Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d/export</guid>
      <pubDate>Tue, 08 Sep 2026 22:11:18 +0000</pubDate>
    </item>
    <item>
      <title>a78beb4c-ff52-4702-a9cf-8914971e0d96</title>
      <link>https://vulnerability.circl.lu/sighting/a78beb4c-ff52-4702-a9cf-8914971e0d96/export</link>
      <description>{"uuid": "a78beb4c-ff52-4702-a9cf-8914971e0d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.414544Z"}</description>
      <content:encoded>{"uuid": "a78beb4c-ff52-4702-a9cf-8914971e0d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.414544Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a78beb4c-ff52-4702-a9cf-8914971e0d96/export</guid>
      <pubDate>Sun, 30 Aug 2026 00:00:38 +0000</pubDate>
    </item>
    <item>
      <title>167f8a2e-f756-4298-a737-c745a0a1ec48</title>
      <link>https://vulnerability.circl.lu/sighting/167f8a2e-f756-4298-a737-c745a0a1ec48/export</link>
      <description>{"uuid": "167f8a2e-f756-4298-a737-c745a0a1ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.656226Z"}</description>
      <content:encoded>{"uuid": "167f8a2e-f756-4298-a737-c745a0a1ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.656226Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/167f8a2e-f756-4298-a737-c745a0a1ec48/export</guid>
      <pubDate>Sat, 29 Aug 2026 20:00:05 +0000</pubDate>
    </item>
  </channel>
</rss>
