<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 16:51:26 +0000</lastBuildDate>
    <item>
      <title>14c45881-c95c-4ed4-a46e-8a369945e28b</title>
      <link>https://vulnerability.circl.lu/sighting/14c45881-c95c-4ed4-a46e-8a369945e28b/export</link>
      <description>{"uuid": "14c45881-c95c-4ed4-a46e-8a369945e28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244981206462808", "content": "CVE-2026-52774: YesWiki &amp;lt; 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:47.317104Z"}</description>
      <content:encoded>{"uuid": "14c45881-c95c-4ed4-a46e-8a369945e28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244981206462808", "content": "CVE-2026-52774: YesWiki &amp;lt; 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:47.317104Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/14c45881-c95c-4ed4-a46e-8a369945e28b/export</guid>
      <pubDate>Thu, 10 Sep 2026 05:00:47 +0000</pubDate>
    </item>
    <item>
      <title>9fdd3531-88a1-45ff-871d-f1a913804ed4</title>
      <link>https://vulnerability.circl.lu/sighting/9fdd3531-88a1-45ff-871d-f1a913804ed4/export</link>
      <description>{"uuid": "9fdd3531-88a1-45ff-871d-f1a913804ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv5bgoodor2x", "content": "CVE-2026-52774: YesWiki &amp;lt; 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:38.754863Z"}</description>
      <content:encoded>{"uuid": "9fdd3531-88a1-45ff-871d-f1a913804ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv5bgoodor2x", "content": "CVE-2026-52774: YesWiki &amp;lt; 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:38.754863Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9fdd3531-88a1-45ff-871d-f1a913804ed4/export</guid>
      <pubDate>Thu, 10 Sep 2026 05:00:38 +0000</pubDate>
    </item>
    <item>
      <title>ab77321d-0926-4b8f-b9c5-6708d55c92bf</title>
      <link>https://vulnerability.circl.lu/sighting/ab77321d-0926-4b8f-b9c5-6708d55c92bf/export</link>
      <description>{"uuid": "ab77321d-0926-4b8f-b9c5-6708d55c92bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-07T01:00:24.589351Z"}</description>
      <content:encoded>{"uuid": "ab77321d-0926-4b8f-b9c5-6708d55c92bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-07T01:00:24.589351Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ab77321d-0926-4b8f-b9c5-6708d55c92bf/export</guid>
      <pubDate>Mon, 07 Sep 2026 01:00:24 +0000</pubDate>
    </item>
    <item>
      <title>83e32526-ad26-46fd-8097-0fbfc856d1a0</title>
      <link>https://vulnerability.circl.lu/sighting/83e32526-ad26-46fd-8097-0fbfc856d1a0/export</link>
      <description>{"uuid": "83e32526-ad26-46fd-8097-0fbfc856d1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-06T08:00:06.254054Z"}</description>
      <content:encoded>{"uuid": "83e32526-ad26-46fd-8097-0fbfc856d1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-06T08:00:06.254054Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/83e32526-ad26-46fd-8097-0fbfc856d1a0/export</guid>
      <pubDate>Sun, 06 Sep 2026 08:00:06 +0000</pubDate>
    </item>
    <item>
      <title>c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc</title>
      <link>https://vulnerability.circl.lu/sighting/c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc/export</link>
      <description>{"uuid": "c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:37.542696Z"}</description>
      <content:encoded>{"uuid": "c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:37.542696Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc/export</guid>
      <pubDate>Sun, 06 Sep 2026 00:00:37 +0000</pubDate>
    </item>
    <item>
      <title>bd304a8f-ec5b-48a2-bacd-39d72d2567e8</title>
      <link>https://vulnerability.circl.lu/sighting/bd304a8f-ec5b-48a2-bacd-39d72d2567e8/export</link>
      <description>{"uuid": "bd304a8f-ec5b-48a2-bacd-39d72d2567e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T19:00:02.857623Z"}</description>
      <content:encoded>{"uuid": "bd304a8f-ec5b-48a2-bacd-39d72d2567e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T19:00:02.857623Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bd304a8f-ec5b-48a2-bacd-39d72d2567e8/export</guid>
      <pubDate>Sat, 05 Sep 2026 19:00:02 +0000</pubDate>
    </item>
    <item>
      <title>9a3e6022-8355-43ac-a19a-e8c7e5141cac</title>
      <link>https://vulnerability.circl.lu/sighting/9a3e6022-8355-43ac-a19a-e8c7e5141cac/export</link>
      <description>{"uuid": "9a3e6022-8355-43ac-a19a-e8c7e5141cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-17T00:00:07.008586Z"}</description>
      <content:encoded>{"uuid": "9a3e6022-8355-43ac-a19a-e8c7e5141cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-17T00:00:07.008586Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a3e6022-8355-43ac-a19a-e8c7e5141cac/export</guid>
      <pubDate>Fri, 17 Jul 2026 00:00:07 +0000</pubDate>
    </item>
    <item>
      <title>fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b</title>
      <link>https://vulnerability.circl.lu/sighting/fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b/export</link>
      <description>{"uuid": "fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-16T00:00:04.094713Z"}</description>
      <content:encoded>{"uuid": "fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-16T00:00:04.094713Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b/export</guid>
      <pubDate>Thu, 16 Jul 2026 00:00:04 +0000</pubDate>
    </item>
    <item>
      <title>ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d</title>
      <link>https://vulnerability.circl.lu/sighting/ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d/export</link>
      <description>{"uuid": "ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-15T00:00:02.949915Z"}</description>
      <content:encoded>{"uuid": "ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-15T00:00:02.949915Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d/export</guid>
      <pubDate>Wed, 15 Jul 2026 00:00:02 +0000</pubDate>
    </item>
    <item>
      <title>49da3809-18a4-4fcf-b728-7b7bf2cd0fac</title>
      <link>https://vulnerability.circl.lu/sighting/49da3809-18a4-4fcf-b728-7b7bf2cd0fac/export</link>
      <description>{"uuid": "49da3809-18a4-4fcf-b728-7b7bf2cd0fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-14T00:00:06.257782Z"}</description>
      <content:encoded>{"uuid": "49da3809-18a4-4fcf-b728-7b7bf2cd0fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-14T00:00:06.257782Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/49da3809-18a4-4fcf-b728-7b7bf2cd0fac/export</guid>
      <pubDate>Tue, 14 Jul 2026 00:00:06 +0000</pubDate>
    </item>
  </channel>
</rss>
