<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 29 Jul 2026 18:55:32 +0000</lastBuildDate>
    <item>
      <title>7227bed9-549c-4f42-bd3d-6d2cbf8b0040</title>
      <link>https://vulnerability.circl.lu/sighting/7227bed9-549c-4f42-bd3d-6d2cbf8b0040/export</link>
      <description>{"uuid": "7227bed9-549c-4f42-bd3d-6d2cbf8b0040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mrqm3i2vwt2x", "content": "A critical-severity fix just shipped for Amd Aiter. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-49121", "creation_timestamp": "2026-07-28T23:51:02.366478Z"}</description>
      <content:encoded>{"uuid": "7227bed9-549c-4f42-bd3d-6d2cbf8b0040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mrqm3i2vwt2x", "content": "A critical-severity fix just shipped for Amd Aiter. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-49121", "creation_timestamp": "2026-07-28T23:51:02.366478Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7227bed9-549c-4f42-bd3d-6d2cbf8b0040/export</guid>
      <pubDate>Tue, 28 Jul 2026 23:51:02 +0000</pubDate>
    </item>
    <item>
      <title>d8715a70-f203-4bbd-b32d-aa2bb151ef93</title>
      <link>https://vulnerability.circl.lu/sighting/d8715a70-f203-4bbd-b32d-aa2bb151ef93/export</link>
      <description>{"uuid": "d8715a70-f203-4bbd-b32d-aa2bb151ef93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobw4hxgbr2v", "content": "\ud83d\udea8  ALERT: CVE-2026-49121\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\n\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown vector\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  1. Identify affected systems in your environment\n  2. Apply patches within 48 ho", "creation_timestamp": "2026-06-14T23:25:05.813513Z"}</description>
      <content:encoded>{"uuid": "d8715a70-f203-4bbd-b32d-aa2bb151ef93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobw4hxgbr2v", "content": "\ud83d\udea8  ALERT: CVE-2026-49121\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\n\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown vector\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  1. Identify affected systems in your environment\n  2. Apply patches within 48 ho", "creation_timestamp": "2026-06-14T23:25:05.813513Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d8715a70-f203-4bbd-b32d-aa2bb151ef93/export</guid>
      <pubDate>Sun, 14 Jun 2026 23:25:05 +0000</pubDate>
    </item>
    <item>
      <title>26c300a7-568a-4edf-850b-6b3821f27f14</title>
      <link>https://vulnerability.circl.lu/sighting/26c300a7-568a-4edf-850b-6b3821f27f14/export</link>
      <description>{"uuid": "26c300a7-568a-4edf-850b-6b3821f27f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnt62evx3c2z", "content": "\ud83d\udccc CVE-2026-49121 - AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function w... https://www.cyberhub.blog/cves/CVE-2026-49121", "creation_timestamp": "2026-06-09T02:37:05.901561Z"}</description>
      <content:encoded>{"uuid": "26c300a7-568a-4edf-850b-6b3821f27f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnt62evx3c2z", "content": "\ud83d\udccc CVE-2026-49121 - AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function w... https://www.cyberhub.blog/cves/CVE-2026-49121", "creation_timestamp": "2026-06-09T02:37:05.901561Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/26c300a7-568a-4edf-850b-6b3821f27f14/export</guid>
      <pubDate>Tue, 09 Jun 2026 02:37:05 +0000</pubDate>
    </item>
    <item>
      <title>1b68987c-89c2-4418-a834-5c47ac60a4ff</title>
      <link>https://vulnerability.circl.lu/sighting/1b68987c-89c2-4418-a834-5c47ac60a4ff/export</link>
      <description>{"uuid": "1b68987c-89c2-4418-a834-5c47ac60a4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49120", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndsaysdgm27", "content": "CVE-2026-49120 - Medplum\nCVE ID : CVE-2026-49120\n \n Published : June 2, 2026, 8:16 p.m. | 2\u00a0hours, 57\u00a0minutes ago\n \n Description : Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform u...", "creation_timestamp": "2026-06-02T23:56:07.200220Z"}</description>
      <content:encoded>{"uuid": "1b68987c-89c2-4418-a834-5c47ac60a4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49120", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndsaysdgm27", "content": "CVE-2026-49120 - Medplum\nCVE ID : CVE-2026-49120\n \n Published : June 2, 2026, 8:16 p.m. | 2\u00a0hours, 57\u00a0minutes ago\n \n Description : Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform u...", "creation_timestamp": "2026-06-02T23:56:07.200220Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1b68987c-89c2-4418-a834-5c47ac60a4ff/export</guid>
      <pubDate>Tue, 02 Jun 2026 23:56:07 +0000</pubDate>
    </item>
    <item>
      <title>8a584716-7b9d-4d2e-853f-d68ce463e553</title>
      <link>https://vulnerability.circl.lu/sighting/8a584716-7b9d-4d2e-853f-d68ce463e553/export</link>
      <description>{"uuid": "8a584716-7b9d-4d2e-853f-d68ce463e553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49120", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndihgn75l25", "content": "\ud83d\udfe0 CVE-2026-49120 - High (8.5)\n\nMedplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription wo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T21:00:46.213479Z"}</description>
      <content:encoded>{"uuid": "8a584716-7b9d-4d2e-853f-d68ce463e553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49120", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndihgn75l25", "content": "\ud83d\udfe0 CVE-2026-49120 - High (8.5)\n\nMedplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription wo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T21:00:46.213479Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8a584716-7b9d-4d2e-853f-d68ce463e553/export</guid>
      <pubDate>Tue, 02 Jun 2026 21:00:46 +0000</pubDate>
    </item>
    <item>
      <title>60827d76-63d8-4968-a4c3-8a80807e6582</title>
      <link>https://vulnerability.circl.lu/sighting/60827d76-63d8-4968-a4c3-8a80807e6582/export</link>
      <description>{"uuid": "60827d76-63d8-4968-a4c3-8a80807e6582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49129", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwze7lssy2e", "content": "CVE-2026-49129 - Music Player Daemon\nCVE ID : CVE-2026-49129\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLO...", "creation_timestamp": "2026-05-28T21:58:34.447516Z"}</description>
      <content:encoded>{"uuid": "60827d76-63d8-4968-a4c3-8a80807e6582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49129", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwze7lssy2e", "content": "CVE-2026-49129 - Music Player Daemon\nCVE ID : CVE-2026-49129\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLO...", "creation_timestamp": "2026-05-28T21:58:34.447516Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/60827d76-63d8-4968-a4c3-8a80807e6582/export</guid>
      <pubDate>Thu, 28 May 2026 21:58:34 +0000</pubDate>
    </item>
    <item>
      <title>278c8cd1-943b-4ac3-8c40-852dc5a3d748</title>
      <link>https://vulnerability.circl.lu/sighting/278c8cd1-943b-4ac3-8c40-852dc5a3d748/export</link>
      <description>{"uuid": "278c8cd1-943b-4ac3-8c40-852dc5a3d748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49127", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwyscpvqc2k", "content": "CVE-2026-49127 - Music Player Daemon\nCVE ID : CVE-2026-49127\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack...", "creation_timestamp": "2026-05-28T21:48:33.851512Z"}</description>
      <content:encoded>{"uuid": "278c8cd1-943b-4ac3-8c40-852dc5a3d748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49127", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwyscpvqc2k", "content": "CVE-2026-49127 - Music Player Daemon\nCVE ID : CVE-2026-49127\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack...", "creation_timestamp": "2026-05-28T21:48:33.851512Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/278c8cd1-943b-4ac3-8c40-852dc5a3d748/export</guid>
      <pubDate>Thu, 28 May 2026 21:48:33 +0000</pubDate>
    </item>
    <item>
      <title>85a6b21b-1331-4878-aea8-3d2466da2523</title>
      <link>https://vulnerability.circl.lu/sighting/85a6b21b-1331-4878-aea8-3d2466da2523/export</link>
      <description>{"uuid": "85a6b21b-1331-4878-aea8-3d2466da2523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49128", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwykn46cb2k", "content": "CVE-2026-49128 - Music Player Daemon\nCVE ID : CVE-2026-49128\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF...", "creation_timestamp": "2026-05-28T21:44:16.239197Z"}</description>
      <content:encoded>{"uuid": "85a6b21b-1331-4878-aea8-3d2466da2523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49128", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwykn46cb2k", "content": "CVE-2026-49128 - Music Player Daemon\nCVE ID : CVE-2026-49128\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF...", "creation_timestamp": "2026-05-28T21:44:16.239197Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/85a6b21b-1331-4878-aea8-3d2466da2523/export</guid>
      <pubDate>Thu, 28 May 2026 21:44:16 +0000</pubDate>
    </item>
    <item>
      <title>37566333-5b50-43f9-8507-e5cd18a9466b</title>
      <link>https://vulnerability.circl.lu/sighting/37566333-5b50-43f9-8507-e5cd18a9466b/export</link>
      <description>{"uuid": "37566333-5b50-43f9-8507-e5cd18a9466b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49128", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4mj22h2e", "content": "\ud83d\udfe0 CVE-2026-49128 - High (7.5)\n\nMusic Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in Local...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49128/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T21:00:39.269152Z"}</description>
      <content:encoded>{"uuid": "37566333-5b50-43f9-8507-e5cd18a9466b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49128", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4mj22h2e", "content": "\ud83d\udfe0 CVE-2026-49128 - High (7.5)\n\nMusic Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in Local...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49128/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T21:00:39.269152Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/37566333-5b50-43f9-8507-e5cd18a9466b/export</guid>
      <pubDate>Thu, 28 May 2026 21:00:39 +0000</pubDate>
    </item>
    <item>
      <title>51283278-a09e-418e-944f-3b76d3a8bdb5</title>
      <link>https://vulnerability.circl.lu/sighting/51283278-a09e-418e-944f-3b76d3a8bdb5/export</link>
      <description>{"uuid": "51283278-a09e-418e-944f-3b76d3a8bdb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49127", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4f2zpy2k", "content": "\ud83d\udfe0 CVE-2026-49127 - High (8.6)\n\nMusic Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49127/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T21:00:32.458811Z"}</description>
      <content:encoded>{"uuid": "51283278-a09e-418e-944f-3b76d3a8bdb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49127", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4f2zpy2k", "content": "\ud83d\udfe0 CVE-2026-49127 - High (8.6)\n\nMusic Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49127/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T21:00:32.458811Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/51283278-a09e-418e-944f-3b76d3a8bdb5/export</guid>
      <pubDate>Thu, 28 May 2026 21:00:32 +0000</pubDate>
    </item>
  </channel>
</rss>
