<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 19 Sep 2026 05:21:18 +0000</lastBuildDate>
    <item>
      <title>8d554908-2e8e-413b-b4c9-24c4d317f46c</title>
      <link>https://vulnerability.circl.lu/sighting/8d554908-2e8e-413b-b4c9-24c4d317f46c/export</link>
      <description>{"uuid": "8d554908-2e8e-413b-b4c9-24c4d317f46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66393", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rf74-v2fm-23pw", "content": "", "creation_timestamp": "2026-09-02T16:35:07.388573Z"}</description>
      <content:encoded>{"uuid": "8d554908-2e8e-413b-b4c9-24c4d317f46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66393", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rf74-v2fm-23pw", "content": "", "creation_timestamp": "2026-09-02T16:35:07.388573Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d554908-2e8e-413b-b4c9-24c4d317f46c/export</guid>
      <pubDate>Wed, 02 Sep 2026 16:35:07 +0000</pubDate>
    </item>
    <item>
      <title>c1d34c61-5158-4e13-b8b3-373a297daa74</title>
      <link>https://vulnerability.circl.lu/sighting/c1d34c61-5158-4e13-b8b3-373a297daa74/export</link>
      <description>{"uuid": "c1d34c61-5158-4e13-b8b3-373a297daa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu4lqbmiqk24", "content": "\ud83d\udccc CVE-2026-66393 - NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of ser... https://www.cyberhub.blog/cves/CVE-2026-66393", "creation_timestamp": "2026-08-28T05:07:06.781046Z"}</description>
      <content:encoded>{"uuid": "c1d34c61-5158-4e13-b8b3-373a297daa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu4lqbmiqk24", "content": "\ud83d\udccc CVE-2026-66393 - NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of ser... https://www.cyberhub.blog/cves/CVE-2026-66393", "creation_timestamp": "2026-08-28T05:07:06.781046Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c1d34c61-5158-4e13-b8b3-373a297daa74/export</guid>
      <pubDate>Fri, 28 Aug 2026 05:07:06 +0000</pubDate>
    </item>
    <item>
      <title>6d706a7a-7c0b-41bc-8753-dcb21ba1d69a</title>
      <link>https://vulnerability.circl.lu/sighting/6d706a7a-7c0b-41bc-8753-dcb21ba1d69a/export</link>
      <description>{"uuid": "6d706a7a-7c0b-41bc-8753-dcb21ba1d69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117145475063628409", "content": "CVE-2026-66393 - DoS vulnerability in NLTK. Deeply nested JSON triggers unhandled recursion crash in Python. CVSS 7.5. Update to 3.9.4 immediately. #CVE #Python #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66393/", "creation_timestamp": "2026-08-23T15:14:55.246364Z"}</description>
      <content:encoded>{"uuid": "6d706a7a-7c0b-41bc-8753-dcb21ba1d69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117145475063628409", "content": "CVE-2026-66393 - DoS vulnerability in NLTK. Deeply nested JSON triggers unhandled recursion crash in Python. CVSS 7.5. Update to 3.9.4 immediately. #CVE #Python #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66393/", "creation_timestamp": "2026-08-23T15:14:55.246364Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6d706a7a-7c0b-41bc-8753-dcb21ba1d69a/export</guid>
      <pubDate>Sun, 23 Aug 2026 15:14:55 +0000</pubDate>
    </item>
    <item>
      <title>54f22ff2-448e-4890-8df7-abff726d6537</title>
      <link>https://vulnerability.circl.lu/sighting/54f22ff2-448e-4890-8df7-abff726d6537/export</link>
      <description>{"uuid": "54f22ff2-448e-4890-8df7-abff726d6537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtr3ei4wt52t", "content": "CVE-2026-66393 - DoS vulnerability in NLTK. Deeply nested JSON triggers unhandled recursion crash in Python. CVSS 7.5. Update to 3.9.4 immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66393/", "creation_timestamp": "2026-08-23T15:14:54.058961Z"}</description>
      <content:encoded>{"uuid": "54f22ff2-448e-4890-8df7-abff726d6537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtr3ei4wt52t", "content": "CVE-2026-66393 - DoS vulnerability in NLTK. Deeply nested JSON triggers unhandled recursion crash in Python. CVSS 7.5. Update to 3.9.4 immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66393/", "creation_timestamp": "2026-08-23T15:14:54.058961Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/54f22ff2-448e-4890-8df7-abff726d6537/export</guid>
      <pubDate>Sun, 23 Aug 2026 15:14:54 +0000</pubDate>
    </item>
    <item>
      <title>e974c529-59b9-4c09-bfe4-1dc5154da7d0</title>
      <link>https://vulnerability.circl.lu/sighting/e974c529-59b9-4c09-bfe4-1dc5154da7d0/export</link>
      <description>{"uuid": "e974c529-59b9-4c09-bfe4-1dc5154da7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpbkhwdi52z", "content": "\ud83d\udfe0 CVE-2026-66393 - High (7.5)\n\nNLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.deco...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66393/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T22:00:19.001667Z"}</description>
      <content:encoded>{"uuid": "e974c529-59b9-4c09-bfe4-1dc5154da7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpbkhwdi52z", "content": "\ud83d\udfe0 CVE-2026-66393 - High (7.5)\n\nNLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.deco...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66393/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T22:00:19.001667Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e974c529-59b9-4c09-bfe4-1dc5154da7d0/export</guid>
      <pubDate>Sat, 22 Aug 2026 22:00:19 +0000</pubDate>
    </item>
    <item>
      <title>91706235-3d02-4807-b645-f9935f077549</title>
      <link>https://vulnerability.circl.lu/sighting/91706235-3d02-4807-b645-f9935f077549/export</link>
      <description>{"uuid": "91706235-3d02-4807-b645-f9935f077549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6639", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u", "content": "CVE-2026-6639 ai-copilot-content-generator (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T08:15:10.456160Z"}</description>
      <content:encoded>{"uuid": "91706235-3d02-4807-b645-f9935f077549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6639", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u", "content": "CVE-2026-6639 ai-copilot-content-generator (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T08:15:10.456160Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/91706235-3d02-4807-b645-f9935f077549/export</guid>
      <pubDate>Thu, 06 Aug 2026 08:15:10 +0000</pubDate>
    </item>
    <item>
      <title>60a5406b-fd9d-4676-8793-4a2bdf2f37ab</title>
      <link>https://vulnerability.circl.lu/sighting/60a5406b-fd9d-4676-8793-4a2bdf2f37ab/export</link>
      <description>{"uuid": "60a5406b-fd9d-4676-8793-4a2bdf2f37ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e", "content": "CVE-2026-66398\nAuthenticated administrators with specific privileges can upload malicious files and execute code on the server. This allows attackers to access sensitive data and potentially take control of the system. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:09.208479Z"}</description>
      <content:encoded>{"uuid": "60a5406b-fd9d-4676-8793-4a2bdf2f37ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e", "content": "CVE-2026-66398\nAuthenticated administrators with specific privileges can upload malicious files and execute code on the server. This allows attackers to access sensitive data and potentially take control of the system. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:09.208479Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/60a5406b-fd9d-4676-8793-4a2bdf2f37ab/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:56:09 +0000</pubDate>
    </item>
    <item>
      <title>a98670e4-3d66-4f64-9869-0de25d14c57d</title>
      <link>https://vulnerability.circl.lu/sighting/a98670e4-3d66-4f64-9869-0de25d14c57d/export</link>
      <description>{"uuid": "a98670e4-3d66-4f64-9869-0de25d14c57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j", "content": "CVE-2026-66396\nSiYuan, a software used for managing documents, has a security issue. An attacker with permission to edit documents can embed malicious code in an image, which can then be executed when the document is opened.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:04.163402Z"}</description>
      <content:encoded>{"uuid": "a98670e4-3d66-4f64-9869-0de25d14c57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j", "content": "CVE-2026-66396\nSiYuan, a software used for managing documents, has a security issue. An attacker with permission to edit documents can embed malicious code in an image, which can then be executed when the document is opened.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:04.163402Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a98670e4-3d66-4f64-9869-0de25d14c57d/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:56:04 +0000</pubDate>
    </item>
    <item>
      <title>f18a3ae1-3f59-477e-816d-eed24b4fc63c</title>
      <link>https://vulnerability.circl.lu/sighting/f18a3ae1-3f59-477e-816d-eed24b4fc63c/export</link>
      <description>{"uuid": "f18a3ae1-3f59-477e-816d-eed24b4fc63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66397", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i", "content": "CVE-2026-66397\nA vulnerability in phpMyFAQ, a FAQ management system, allows authenticated attackers to delete any file on the server. This could allow an attacker to disable security features and create new administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.553722Z"}</description>
      <content:encoded>{"uuid": "f18a3ae1-3f59-477e-816d-eed24b4fc63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66397", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i", "content": "CVE-2026-66397\nA vulnerability in phpMyFAQ, a FAQ management system, allows authenticated attackers to delete any file on the server. This could allow an attacker to disable security features and create new administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.553722Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f18a3ae1-3f59-477e-816d-eed24b4fc63c/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:54:04 +0000</pubDate>
    </item>
    <item>
      <title>ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d</title>
      <link>https://vulnerability.circl.lu/sighting/ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d/export</link>
      <description>{"uuid": "ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniagskn23", "content": "CVE-2026-66395\nA security flaw in SiYuan Desktop's bazaar plugin allows attackers to inject malicious code by sending a specially crafted web link. This could potentially allow attackers to take control of a user's computer.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.037819Z"}</description>
      <content:encoded>{"uuid": "ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniagskn23", "content": "CVE-2026-66395\nA security flaw in SiYuan Desktop's bazaar plugin allows attackers to inject malicious code by sending a specially crafted web link. This could potentially allow attackers to take control of a user's computer.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.037819Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:54:04 +0000</pubDate>
    </item>
  </channel>
</rss>
