<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 13 Sep 2026 19:17:03 +0000</lastBuildDate>
    <item>
      <title>2a06b596-6020-4d72-8d36-4c16ef324d83</title>
      <link>https://vulnerability.circl.lu/sighting/2a06b596-6020-4d72-8d36-4c16ef324d83/export</link>
      <description>{"uuid": "2a06b596-6020-4d72-8d36-4c16ef324d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3vswqrqf2g", "content": "CVE-2026-53581 - core\nThe NTP configuration feature in OPNsense firewalls could be tricked into writing data to any location on the device, giving an attacker full control as the system administrator. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#core #opnsense #CVE #infosec", "creation_timestamp": "2026-09-09T16:00:05.479749Z"}</description>
      <content:encoded>{"uuid": "2a06b596-6020-4d72-8d36-4c16ef324d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3vswqrqf2g", "content": "CVE-2026-53581 - core\nThe NTP configuration feature in OPNsense firewalls could be tricked into writing data to any location on the device, giving an attacker full control as the system administrator. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#core #opnsense #CVE #infosec", "creation_timestamp": "2026-09-09T16:00:05.479749Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2a06b596-6020-4d72-8d36-4c16ef324d83/export</guid>
      <pubDate>Wed, 09 Sep 2026 16:00:05 +0000</pubDate>
    </item>
    <item>
      <title>c7990c3b-4da5-4c4a-a3ec-a813370018ef</title>
      <link>https://vulnerability.circl.lu/sighting/c7990c3b-4da5-4c4a-a3ec-a813370018ef/export</link>
      <description>{"uuid": "c7990c3b-4da5-4c4a-a3ec-a813370018ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv3sou3bwr26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-53581: OPNsense is a FreeBSD based firewall and routing platform\nCVSS 9\nhttps://beta.vulnsea.com/cve/CVE-2026-53581\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-09T15:04:07.134308Z"}</description>
      <content:encoded>{"uuid": "c7990c3b-4da5-4c4a-a3ec-a813370018ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv3sou3bwr26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-53581: OPNsense is a FreeBSD based firewall and routing platform\nCVSS 9\nhttps://beta.vulnsea.com/cve/CVE-2026-53581\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-09T15:04:07.134308Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c7990c3b-4da5-4c4a-a3ec-a813370018ef/export</guid>
      <pubDate>Wed, 09 Sep 2026 15:04:07 +0000</pubDate>
    </item>
    <item>
      <title>0d7632e1-84e0-4d38-93f5-b493133ae690</title>
      <link>https://vulnerability.circl.lu/sighting/0d7632e1-84e0-4d38-93f5-b493133ae690/export</link>
      <description>{"uuid": "0d7632e1-84e0-4d38-93f5-b493133ae690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv2du6uive2g", "content": "Critical Firewall Flaw Arrives First; Prague Bureaucracy Will Notice By Friday\nPANIC 86% | Lag 0.0h | CVE-2026-53581 is a critical vulnerability in OPNsense affecting versions before 26.1.9. Exploitatio\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-09T01:06:00.395300Z"}</description>
      <content:encoded>{"uuid": "0d7632e1-84e0-4d38-93f5-b493133ae690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv2du6uive2g", "content": "Critical Firewall Flaw Arrives First; Prague Bureaucracy Will Notice By Friday\nPANIC 86% | Lag 0.0h | CVE-2026-53581 is a critical vulnerability in OPNsense affecting versions before 26.1.9. Exploitatio\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-09T01:06:00.395300Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0d7632e1-84e0-4d38-93f5-b493133ae690/export</guid>
      <pubDate>Wed, 09 Sep 2026 01:06:00 +0000</pubDate>
    </item>
    <item>
      <title>27275c54-ea23-48b6-8cbb-3342d0f35a19</title>
      <link>https://vulnerability.circl.lu/sighting/27275c54-ea23-48b6-8cbb-3342d0f35a19/export</link>
      <description>{"uuid": "27275c54-ea23-48b6-8cbb-3342d0f35a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/anl6agtbhib7w", "content": "CVE-2026-53581 - ntp: write path traversal\nCVE ID : CVE-2026-53581\n \n Published : Sept. 8, 2026, 11:17 p.m. | 15\u00a0minutes ago\n \n Description : OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/...", "creation_timestamp": "2026-09-09T01:00:49.660560Z"}</description>
      <content:encoded>{"uuid": "27275c54-ea23-48b6-8cbb-3342d0f35a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/anl6agtbhib7w", "content": "CVE-2026-53581 - ntp: write path traversal\nCVE ID : CVE-2026-53581\n \n Published : Sept. 8, 2026, 11:17 p.m. | 15\u00a0minutes ago\n \n Description : OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/...", "creation_timestamp": "2026-09-09T01:00:49.660560Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/27275c54-ea23-48b6-8cbb-3342d0f35a19/export</guid>
      <pubDate>Wed, 09 Sep 2026 01:00:49 +0000</pubDate>
    </item>
    <item>
      <title>2dfb171b-729a-4739-ae23-08bfb1bbc778</title>
      <link>https://vulnerability.circl.lu/sighting/2dfb171b-729a-4739-ae23-08bfb1bbc778/export</link>
      <description>{"uuid": "2dfb171b-729a-4739-ae23-08bfb1bbc778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53581", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2a7ccljo2x", "content": "CRITICAL: Path traversal in OPNsense core &amp;lt;26.1.9 (CVE-2026-53581) lets high-priv users overwrite files as root. Patch to 26.1.9+ &amp;amp; backend 26.4_20+ now. https://radar.offseq.com/threat/cve-2026-53581-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-35f86111797...", "creation_timestamp": "2026-09-09T00:00:38.900301Z"}</description>
      <content:encoded>{"uuid": "2dfb171b-729a-4739-ae23-08bfb1bbc778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53581", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2a7ccljo2x", "content": "CRITICAL: Path traversal in OPNsense core &amp;lt;26.1.9 (CVE-2026-53581) lets high-priv users overwrite files as root. Patch to 26.1.9+ &amp;amp; backend 26.4_20+ now. https://radar.offseq.com/threat/cve-2026-53581-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-35f86111797...", "creation_timestamp": "2026-09-09T00:00:38.900301Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2dfb171b-729a-4739-ae23-08bfb1bbc778/export</guid>
      <pubDate>Wed, 09 Sep 2026 00:00:38 +0000</pubDate>
    </item>
    <item>
      <title>2d7fe3db-9b94-4ecd-a3cc-67a4d13f0a69</title>
      <link>https://vulnerability.circl.lu/sighting/2d7fe3db-9b94-4ecd-a3cc-67a4d13f0a69/export</link>
      <description>{"uuid": "2d7fe3db-9b94-4ecd-a3cc-67a4d13f0a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53581", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117238139183513426", "content": "CVE-2026-53581 (CRITICAL, CVSS 9.0): OPNsense core &amp;lt;26.1.9 NTP module path traversal lets privileged users overwrite files as root. Upgrade to 26.1.9+ &amp;amp; backend 26.4_20+ now. https://radar.offseq.com/threat/cve-2026-53581-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-35f8611179753b8a #OffSeq #OPNsense #Vuln #PathTraversal", "creation_timestamp": "2026-09-09T00:00:37.078262Z"}</description>
      <content:encoded>{"uuid": "2d7fe3db-9b94-4ecd-a3cc-67a4d13f0a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53581", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117238139183513426", "content": "CVE-2026-53581 (CRITICAL, CVSS 9.0): OPNsense core &amp;lt;26.1.9 NTP module path traversal lets privileged users overwrite files as root. Upgrade to 26.1.9+ &amp;amp; backend 26.4_20+ now. https://radar.offseq.com/threat/cve-2026-53581-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-35f8611179753b8a #OffSeq #OPNsense #Vuln #PathTraversal", "creation_timestamp": "2026-09-09T00:00:37.078262Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2d7fe3db-9b94-4ecd-a3cc-67a4d13f0a69/export</guid>
      <pubDate>Wed, 09 Sep 2026 00:00:37 +0000</pubDate>
    </item>
    <item>
      <title>adf2414c-895e-47f7-a56f-b5545cea6b01</title>
      <link>https://vulnerability.circl.lu/sighting/adf2414c-895e-47f7-a56f-b5545cea6b01/export</link>
      <description>{"uuid": "adf2414c-895e-47f7-a56f-b5545cea6b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv2a6w7bg32r", "content": "\ud83d\udd34 CVE-2026-53581 - Critical (9)\n\nOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/co...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-53581/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T00:00:26.316725Z"}</description>
      <content:encoded>{"uuid": "adf2414c-895e-47f7-a56f-b5545cea6b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53581", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv2a6w7bg32r", "content": "\ud83d\udd34 CVE-2026-53581 - Critical (9)\n\nOPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/co...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-53581/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T00:00:26.316725Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/adf2414c-895e-47f7-a56f-b5545cea6b01/export</guid>
      <pubDate>Wed, 09 Sep 2026 00:00:26 +0000</pubDate>
    </item>
  </channel>
</rss>
