<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 04 Aug 2026 18:44:13 +0000</lastBuildDate>
    <item>
      <title>2fd74e7d-26ae-4d10-b3aa-11402c03d922</title>
      <link>https://vulnerability.circl.lu/sighting/2fd74e7d-26ae-4d10-b3aa-11402c03d922/export</link>
      <description>{"uuid": "2fd74e7d-26ae-4d10-b3aa-11402c03d922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.801077Z"}</description>
      <content:encoded>{"uuid": "2fd74e7d-26ae-4d10-b3aa-11402c03d922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.801077Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2fd74e7d-26ae-4d10-b3aa-11402c03d922/export</guid>
      <pubDate>Tue, 04 Aug 2026 17:00:04 +0000</pubDate>
    </item>
    <item>
      <title>028cb7f6-2875-4bae-98e2-783822ff4a78</title>
      <link>https://vulnerability.circl.lu/sighting/028cb7f6-2875-4bae-98e2-783822ff4a78/export</link>
      <description>{"uuid": "028cb7f6-2875-4bae-98e2-783822ff4a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2ijjybuu22", "content": "CVE-2026-67340: \u05d4\u05e4\u05e8\u05e6\u05d4 \u05d4\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-ArcadeDB \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d1\u05d9\u05e6\u05d5\u05e2 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d8\u05e8\u05d9\u05d2\u05e8\u05d9\u05dd - \u05de\u05d4 \u05e9\u05d7\u05d5\u05d1\u05d4 \u05dc\u05d3\u05e2\u05ea\n\n\n\nhttps://khesef.xyz/posts/CBDDDF8C-6F69-41D7-993F-181DE6FD05D0", "creation_timestamp": "2026-08-01T22:13:56.557763Z"}</description>
      <content:encoded>{"uuid": "028cb7f6-2875-4bae-98e2-783822ff4a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2ijjybuu22", "content": "CVE-2026-67340: \u05d4\u05e4\u05e8\u05e6\u05d4 \u05d4\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-ArcadeDB \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d1\u05d9\u05e6\u05d5\u05e2 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d8\u05e8\u05d9\u05d2\u05e8\u05d9\u05dd - \u05de\u05d4 \u05e9\u05d7\u05d5\u05d1\u05d4 \u05dc\u05d3\u05e2\u05ea\n\n\n\nhttps://khesef.xyz/posts/CBDDDF8C-6F69-41D7-993F-181DE6FD05D0", "creation_timestamp": "2026-08-01T22:13:56.557763Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/028cb7f6-2875-4bae-98e2-783822ff4a78/export</guid>
      <pubDate>Sat, 01 Aug 2026 22:13:56 +0000</pubDate>
    </item>
    <item>
      <title>331494f6-6d6a-4b5d-9528-279f4223cd83</title>
      <link>https://vulnerability.circl.lu/sighting/331494f6-6d6a-4b5d-9528-279f4223cd83/export</link>
      <description>{"uuid": "331494f6-6d6a-4b5d-9528-279f4223cd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2ij326vm2p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67340 \u0432 ArcadeDB: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u044b\n\n\n\nhttps://kripta.biz/posts/6D43DDE6-5843-41B1-B14F-2C7CD7B50578", "creation_timestamp": "2026-08-01T22:13:41.014770Z"}</description>
      <content:encoded>{"uuid": "331494f6-6d6a-4b5d-9528-279f4223cd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2ij326vm2p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67340 \u0432 ArcadeDB: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u044b\n\n\n\nhttps://kripta.biz/posts/6D43DDE6-5843-41B1-B14F-2C7CD7B50578", "creation_timestamp": "2026-08-01T22:13:41.014770Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/331494f6-6d6a-4b5d-9528-279f4223cd83/export</guid>
      <pubDate>Sat, 01 Aug 2026 22:13:41 +0000</pubDate>
    </item>
    <item>
      <title>e28a0851-e4fb-486d-815c-799e157b3797</title>
      <link>https://vulnerability.circl.lu/sighting/e28a0851-e4fb-486d-815c-799e157b3797/export</link>
      <description>{"uuid": "e28a0851-e4fb-486d-815c-799e157b3797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c5x4qsl2l", "content": "CVE-2026-67340 - arcadedb\nArcadeDB versions prior to 26.7.2 are vulnerable to a security risk. An authenticated user with sufficient permissions can create a malicious script that executes OS commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-01T20:20:05.654402Z"}</description>
      <content:encoded>{"uuid": "e28a0851-e4fb-486d-815c-799e157b3797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c5x4qsl2l", "content": "CVE-2026-67340 - arcadedb\nArcadeDB versions prior to 26.7.2 are vulnerable to a security risk. An authenticated user with sufficient permissions can create a malicious script that executes OS commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-01T20:20:05.654402Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e28a0851-e4fb-486d-815c-799e157b3797/export</guid>
      <pubDate>Sat, 01 Aug 2026 20:20:05 +0000</pubDate>
    </item>
    <item>
      <title>05d26a4c-fa4e-4058-95d7-11b4451d4d0b</title>
      <link>https://vulnerability.circl.lu/sighting/05d26a4c-fa4e-4058-95d7-11b4451d4d0b/export</link>
      <description>{"uuid": "05d26a4c-fa4e-4058-95d7-11b4451d4d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqckeekh2t", "content": "\ud83d\udd34 CVE-2026-67340 - Critical (9.8)\n\nArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67340/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:00:33.191482Z"}</description>
      <content:encoded>{"uuid": "05d26a4c-fa4e-4058-95d7-11b4451d4d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqckeekh2t", "content": "\ud83d\udd34 CVE-2026-67340 - Critical (9.8)\n\nArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67340/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:00:33.191482Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/05d26a4c-fa4e-4058-95d7-11b4451d4d0b/export</guid>
      <pubDate>Sat, 01 Aug 2026 15:00:33 +0000</pubDate>
    </item>
    <item>
      <title>6649f0a9-60bc-4800-ac97-9486620c5f03</title>
      <link>https://vulnerability.circl.lu/sighting/6649f0a9-60bc-4800-ac97-9486620c5f03/export</link>
      <description>{"uuid": "6649f0a9-60bc-4800-ac97-9486620c5f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2xavbtzc3oidi", "content": "CVE-2026-67340 - ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts\nCVE ID : CVE-2026-67340\n \n Published : Aug. 1, 2026, 1:17 p.m. | 25\u00a0minutes ago\n \n Description : ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.la...", "creation_timestamp": "2026-08-01T13:55:30.383382Z"}</description>
      <content:encoded>{"uuid": "6649f0a9-60bc-4800-ac97-9486620c5f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2xavbtzc3oidi", "content": "CVE-2026-67340 - ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts\nCVE ID : CVE-2026-67340\n \n Published : Aug. 1, 2026, 1:17 p.m. | 25\u00a0minutes ago\n \n Description : ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.la...", "creation_timestamp": "2026-08-01T13:55:30.383382Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6649f0a9-60bc-4800-ac97-9486620c5f03/export</guid>
      <pubDate>Sat, 01 Aug 2026 13:55:30 +0000</pubDate>
    </item>
    <item>
      <title>a7846976-6f7d-48f9-884d-45a66aaf39ac</title>
      <link>https://vulnerability.circl.lu/sighting/a7846976-6f7d-48f9-884d-45a66aaf39ac/export</link>
      <description>{"uuid": "a7846976-6f7d-48f9-884d-45a66aaf39ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67340", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrzlbintyl2c", "content": "ArcadeDB &amp;lt;26.7.2 faces a CRITICAL flaw (CVE-2026-67340): UPDATE_SCHEMA users can trigger OS command execution via JavaScript triggers. Restrict permissions &amp;amp; monitor triggers until patch. https://radar.offseq.com/threat/cve-2026-67340-improper-control-of-generation-of-code-code-injection-in-arcad...", "creation_timestamp": "2026-08-01T13:30:28.848537Z"}</description>
      <content:encoded>{"uuid": "a7846976-6f7d-48f9-884d-45a66aaf39ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67340", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrzlbintyl2c", "content": "ArcadeDB &amp;lt;26.7.2 faces a CRITICAL flaw (CVE-2026-67340): UPDATE_SCHEMA users can trigger OS command execution via JavaScript triggers. Restrict permissions &amp;amp; monitor triggers until patch. https://radar.offseq.com/threat/cve-2026-67340-improper-control-of-generation-of-code-code-injection-in-arcad...", "creation_timestamp": "2026-08-01T13:30:28.848537Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a7846976-6f7d-48f9-884d-45a66aaf39ac/export</guid>
      <pubDate>Sat, 01 Aug 2026 13:30:28 +0000</pubDate>
    </item>
  </channel>
</rss>
