<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 26 Aug 2026 10:58:05 +0000</lastBuildDate>
    <item>
      <title>0927dbbf-d4c8-449b-83ad-9f209f959067</title>
      <link>https://vulnerability.circl.lu/sighting/0927dbbf-d4c8-449b-83ad-9f209f959067/export</link>
      <description>{"uuid": "0927dbbf-d4c8-449b-83ad-9f209f959067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv2iskti32f", "content": "CVE-2026-66897\nLXD's container template feature can be tricked into writing any file on the host machine, even system files that require administrator rights. An attacker who can edit containers or launch a specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:10:04.659540Z"}</description>
      <content:encoded>{"uuid": "0927dbbf-d4c8-449b-83ad-9f209f959067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv2iskti32f", "content": "CVE-2026-66897\nLXD's container template feature can be tricked into writing any file on the host machine, even system files that require administrator rights. An attacker who can edit containers or launch a specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:10:04.659540Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0927dbbf-d4c8-449b-83ad-9f209f959067/export</guid>
      <pubDate>Tue, 25 Aug 2026 05:10:04 +0000</pubDate>
    </item>
    <item>
      <title>dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab</title>
      <link>https://vulnerability.circl.lu/sighting/dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab/export</link>
      <description>{"uuid": "dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mttf2eskfm2m", "content": "LXD\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u51e6\u7406\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30b3\u30f3\u30c6\u30ca\u7de8\u96c6\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u306a\u3069\u304c\u30db\u30b9\u30c8\u4e0a\u306e\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092root\u6a29\u9650\u3067\u4e0a\u66f8\u304d\u53ef\u80fd\u3002\nCVE-2026-66897 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-08-24T13:13:31.814435Z"}</description>
      <content:encoded>{"uuid": "dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mttf2eskfm2m", "content": "LXD\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u51e6\u7406\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30b3\u30f3\u30c6\u30ca\u7de8\u96c6\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u306a\u3069\u304c\u30db\u30b9\u30c8\u4e0a\u306e\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092root\u6a29\u9650\u3067\u4e0a\u66f8\u304d\u53ef\u80fd\u3002\nCVE-2026-66897 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-08-24T13:13:31.814435Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab/export</guid>
      <pubDate>Mon, 24 Aug 2026 13:13:31 +0000</pubDate>
    </item>
    <item>
      <title>13651b90-39d8-42cc-969a-bf1cb97bcca6</title>
      <link>https://vulnerability.circl.lu/sighting/13651b90-39d8-42cc-969a-bf1cb97bcca6/export</link>
      <description>{"uuid": "13651b90-39d8-42cc-969a-bf1cb97bcca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttbdppb5v2j", "content": "\ud83d\udea8 CVE-2026-66897 \u2014 CVSS 9.9 CRITICAL\n\nA path traversal vulnerability in LXD's instance template processing allows an attacker with container edit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66897\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T12:07:10.247871Z"}</description>
      <content:encoded>{"uuid": "13651b90-39d8-42cc-969a-bf1cb97bcca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttbdppb5v2j", "content": "\ud83d\udea8 CVE-2026-66897 \u2014 CVSS 9.9 CRITICAL\n\nA path traversal vulnerability in LXD's instance template processing allows an attacker with container edit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66897\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T12:07:10.247871Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/13651b90-39d8-42cc-969a-bf1cb97bcca6/export</guid>
      <pubDate>Mon, 24 Aug 2026 12:07:10 +0000</pubDate>
    </item>
    <item>
      <title>3121193f-78cb-4676-9f78-2413873f38de</title>
      <link>https://vulnerability.circl.lu/sighting/3121193f-78cb-4676-9f78-2413873f38de/export</link>
      <description>{"uuid": "3121193f-78cb-4676-9f78-2413873f38de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtt3wsm2db2f", "content": "CRITICAL vuln in Canonical LXD (CVE-2026-66897, CVSS 9.9) lets users with container edit rights or crafted images overwrite host files as root. Restrict permissions, avoid untrusted images. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-dir...", "creation_timestamp": "2026-08-24T10:30:29.273736Z"}</description>
      <content:encoded>{"uuid": "3121193f-78cb-4676-9f78-2413873f38de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtt3wsm2db2f", "content": "CRITICAL vuln in Canonical LXD (CVE-2026-66897, CVSS 9.9) lets users with container edit rights or crafted images overwrite host files as root. Restrict permissions, avoid untrusted images. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-dir...", "creation_timestamp": "2026-08-24T10:30:29.273736Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3121193f-78cb-4676-9f78-2413873f38de/export</guid>
      <pubDate>Mon, 24 Aug 2026 10:30:29 +0000</pubDate>
    </item>
    <item>
      <title>495018b1-6fd6-495a-a05a-f7b274635eea</title>
      <link>https://vulnerability.circl.lu/sighting/495018b1-6fd6-495a-a05a-f7b274635eea/export</link>
      <description>{"uuid": "495018b1-6fd6-495a-a05a-f7b274635eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117150018844317018", "content": "CVE-2026-66897: Canonical LXD CRITICAL path traversal (CVSS 9.9). Attackers with container edit rights or crafted images can overwrite host files as root. Restrict permissions &amp;amp; avoid untrusted images. Patch status unknown. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-b6ae23dfc47f5562 #OffSeq #LXD #CVE #Linux", "creation_timestamp": "2026-08-24T10:30:26.907417Z"}</description>
      <content:encoded>{"uuid": "495018b1-6fd6-495a-a05a-f7b274635eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117150018844317018", "content": "CVE-2026-66897: Canonical LXD CRITICAL path traversal (CVSS 9.9). Attackers with container edit rights or crafted images can overwrite host files as root. Restrict permissions &amp;amp; avoid untrusted images. Patch status unknown. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-b6ae23dfc47f5562 #OffSeq #LXD #CVE #Linux", "creation_timestamp": "2026-08-24T10:30:26.907417Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/495018b1-6fd6-495a-a05a-f7b274635eea/export</guid>
      <pubDate>Mon, 24 Aug 2026 10:30:26 +0000</pubDate>
    </item>
    <item>
      <title>7b3cb980-9e7b-49ca-aced-d84c0d126b74</title>
      <link>https://vulnerability.circl.lu/sighting/7b3cb980-9e7b-49ca-aced-d84c0d126b74/export</link>
      <description>{"uuid": "7b3cb980-9e7b-49ca-aced-d84c0d126b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f", "content": "CVE-2026-66897 - lxd\nLXD\u2019s template feature can be tricked into writing any file on the underlying server, even system files that require administrator rights. An attacker who can edit containers or launch a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-08-24T09:50:04.413724Z"}</description>
      <content:encoded>{"uuid": "7b3cb980-9e7b-49ca-aced-d84c0d126b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f", "content": "CVE-2026-66897 - lxd\nLXD\u2019s template feature can be tricked into writing any file on the underlying server, even system files that require administrator rights. An attacker who can edit containers or launch a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-08-24T09:50:04.413724Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7b3cb980-9e7b-49ca-aced-d84c0d126b74/export</guid>
      <pubDate>Mon, 24 Aug 2026 09:50:04 +0000</pubDate>
    </item>
  </channel>
</rss>
