<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 02:39:43 +0000</lastBuildDate>
    <item>
      <title>4957b637-3b13-444e-bc33-3acfaf2aa510</title>
      <link>https://vulnerability.circl.lu/sighting/4957b637-3b13-444e-bc33-3acfaf2aa510/export</link>
      <description>{"uuid": "4957b637-3b13-444e-bc33-3acfaf2aa510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "published-proof-of-concept", "source": "Telegram/mZUTN-dgFzZWTpxOL4QNH3xIbYerCrrMD24kuXMsejlEOCQ", "content": "", "creation_timestamp": "2026-09-11T00:00:55.959363Z"}</description>
      <content:encoded>{"uuid": "4957b637-3b13-444e-bc33-3acfaf2aa510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "published-proof-of-concept", "source": "Telegram/mZUTN-dgFzZWTpxOL4QNH3xIbYerCrrMD24kuXMsejlEOCQ", "content": "", "creation_timestamp": "2026-09-11T00:00:55.959363Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4957b637-3b13-444e-bc33-3acfaf2aa510/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:00:55 +0000</pubDate>
    </item>
    <item>
      <title>96645f9e-99a4-4612-90eb-3cf3c8d4ceed</title>
      <link>https://vulnerability.circl.lu/sighting/96645f9e-99a4-4612-90eb-3cf3c8d4ceed/export</link>
      <description>{"uuid": "96645f9e-99a4-4612-90eb-3cf3c8d4ceed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "Telegram/mZUTN-dgFzZWTpxOL4QNH3xIbYerCrrMD24kuXMsejlEOCQ", "content": "", "creation_timestamp": "2026-09-10T01:00:03.610571Z"}</description>
      <content:encoded>{"uuid": "96645f9e-99a4-4612-90eb-3cf3c8d4ceed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "Telegram/mZUTN-dgFzZWTpxOL4QNH3xIbYerCrrMD24kuXMsejlEOCQ", "content": "", "creation_timestamp": "2026-09-10T01:00:03.610571Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/96645f9e-99a4-4612-90eb-3cf3c8d4ceed/export</guid>
      <pubDate>Thu, 10 Sep 2026 01:00:03 +0000</pubDate>
    </item>
    <item>
      <title>2723e173-9184-4648-ac18-5c0de716e2c7</title>
      <link>https://vulnerability.circl.lu/sighting/2723e173-9184-4648-ac18-5c0de716e2c7/export</link>
      <description>{"uuid": "2723e173-9184-4648-ac18-5c0de716e2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz26ftvcu2t", "content": "CVE-2026-76578 - red hat enterprise linux 8\nThe FreeIPA system does not properly check who can add certain security tokens. Because of this, anyone on the network can create a fake user and place it in the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-09-08T12:40:06.107684Z"}</description>
      <content:encoded>{"uuid": "2723e173-9184-4648-ac18-5c0de716e2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz26ftvcu2t", "content": "CVE-2026-76578 - red hat enterprise linux 8\nThe FreeIPA system does not properly check who can add certain security tokens. Because of this, anyone on the network can create a fake user and place it in the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-09-08T12:40:06.107684Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2723e173-9184-4648-ac18-5c0de716e2c7/export</guid>
      <pubDate>Tue, 08 Sep 2026 12:40:06 +0000</pubDate>
    </item>
    <item>
      <title>9db9d134-f704-44e9-93e8-844b892bf7e6</title>
      <link>https://vulnerability.circl.lu/sighting/9db9d134-f704-44e9-93e8-844b892bf7e6/export</link>
      <description>{"uuid": "9db9d134-f704-44e9-93e8-844b892bf7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117230724964094728", "content": "There is a new vulnerability with elevated criticality in Red Hat FreeIPA (CVE-2026-76578) https://vuldb.com/vuln/399546", "creation_timestamp": "2026-09-07T16:35:04.335573Z"}</description>
      <content:encoded>{"uuid": "9db9d134-f704-44e9-93e8-844b892bf7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117230724964094728", "content": "There is a new vulnerability with elevated criticality in Red Hat FreeIPA (CVE-2026-76578) https://vuldb.com/vuln/399546", "creation_timestamp": "2026-09-07T16:35:04.335573Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9db9d134-f704-44e9-93e8-844b892bf7e6/export</guid>
      <pubDate>Mon, 07 Sep 2026 16:35:04 +0000</pubDate>
    </item>
    <item>
      <title>e400f71d-5fe1-4247-b09c-34989ee9d09e</title>
      <link>https://vulnerability.circl.lu/sighting/e400f71d-5fe1-4247-b09c-34989ee9d09e/export</link>
      <description>{"uuid": "e400f71d-5fe1-4247-b09c-34989ee9d09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muwwbhovtm2o", "content": "Patch the critical FreeIPA CVE-2026-76578 immediately. This FreeIPA vulnerability allows complete, unauthenticated administrative access to your servers.\n\n#FreeIPA #CVE202676578 #Vulnerability #CyberSecurity #CVE202613097", "creation_timestamp": "2026-09-07T16:24:54.949133Z"}</description>
      <content:encoded>{"uuid": "e400f71d-5fe1-4247-b09c-34989ee9d09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muwwbhovtm2o", "content": "Patch the critical FreeIPA CVE-2026-76578 immediately. This FreeIPA vulnerability allows complete, unauthenticated administrative access to your servers.\n\n#FreeIPA #CVE202676578 #Vulnerability #CyberSecurity #CVE202613097", "creation_timestamp": "2026-09-07T16:24:54.949133Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e400f71d-5fe1-4247-b09c-34989ee9d09e/export</guid>
      <pubDate>Mon, 07 Sep 2026 16:24:54 +0000</pubDate>
    </item>
    <item>
      <title>39d88f37-6a6e-400c-a964-22474f7da404</title>
      <link>https://vulnerability.circl.lu/sighting/39d88f37-6a6e-400c-a964-22474f7da404/export</link>
      <description>{"uuid": "39d88f37-6a6e-400c-a964-22474f7da404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muwolpyl3e2f", "content": "\ud83d\udea8 CVE-2026-76578 \u2014 CVSS 9.8 CRITICAL\n\nA flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not re...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76578\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-07T14:07:28.343042Z"}</description>
      <content:encoded>{"uuid": "39d88f37-6a6e-400c-a964-22474f7da404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muwolpyl3e2f", "content": "\ud83d\udea8 CVE-2026-76578 \u2014 CVSS 9.8 CRITICAL\n\nA flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not re...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76578\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-07T14:07:28.343042Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/39d88f37-6a6e-400c-a964-22474f7da404/export</guid>
      <pubDate>Mon, 07 Sep 2026 14:07:28 +0000</pubDate>
    </item>
    <item>
      <title>06195108-a002-4a79-ad18-1647373dbd7d</title>
      <link>https://vulnerability.circl.lu/sighting/06195108-a002-4a79-ad18-1647373dbd7d/export</link>
      <description>{"uuid": "06195108-a002-4a79-ad18-1647373dbd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f6wa4tbkee63k", "content": "CVE-2026-76573 - Pods\nCVE ID : CVE-2026-76573\n \n Published : Sept. 5, 2026, 8:27 a.m. | 58\u00a0minutes ago\n \n Description : The Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_found' Shortcode Attribute in all versi...", "creation_timestamp": "2026-09-05T09:50:00.829103Z"}</description>
      <content:encoded>{"uuid": "06195108-a002-4a79-ad18-1647373dbd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f6wa4tbkee63k", "content": "CVE-2026-76573 - Pods\nCVE ID : CVE-2026-76573\n \n Published : Sept. 5, 2026, 8:27 a.m. | 58\u00a0minutes ago\n \n Description : The Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_found' Shortcode Attribute in all versi...", "creation_timestamp": "2026-09-05T09:50:00.829103Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/06195108-a002-4a79-ad18-1647373dbd7d/export</guid>
      <pubDate>Sat, 05 Sep 2026 09:50:00 +0000</pubDate>
    </item>
    <item>
      <title>44783c10-6375-4835-96e0-3d4077fa68bf</title>
      <link>https://vulnerability.circl.lu/sighting/44783c10-6375-4835-96e0-3d4077fa68bf/export</link>
      <description>{"uuid": "44783c10-6375-4835-96e0-3d4077fa68bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtontg57f42p", "content": "\ud83d\udea8 CVE-2026-76571 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabri...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76571\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:23.182924Z"}</description>
      <content:encoded>{"uuid": "44783c10-6375-4835-96e0-3d4077fa68bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtontg57f42p", "content": "\ud83d\udea8 CVE-2026-76571 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabri...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76571\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:23.182924Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44783c10-6375-4835-96e0-3d4077fa68bf/export</guid>
      <pubDate>Sat, 22 Aug 2026 16:07:23 +0000</pubDate>
    </item>
    <item>
      <title>48368aa6-5534-46ad-bc4a-c53ed6e2296b</title>
      <link>https://vulnerability.circl.lu/sighting/48368aa6-5534-46ad-bc4a-c53ed6e2296b/export</link>
      <description>{"uuid": "48368aa6-5534-46ad-bc4a-c53ed6e2296b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtomcmkrhf23", "content": "CVE-2026-76571 - fabrik extension for joomla\nThe Fabrik add\u2011on for Joomla (versions before 4.7.3) does not check input for its list filter feature. Because of this, anyone on the internet can send specially crafted requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T15:40:05.819181Z"}</description>
      <content:encoded>{"uuid": "48368aa6-5534-46ad-bc4a-c53ed6e2296b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtomcmkrhf23", "content": "CVE-2026-76571 - fabrik extension for joomla\nThe Fabrik add\u2011on for Joomla (versions before 4.7.3) does not check input for its list filter feature. Because of this, anyone on the internet can send specially crafted requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T15:40:05.819181Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/48368aa6-5534-46ad-bc4a-c53ed6e2296b/export</guid>
      <pubDate>Sat, 22 Aug 2026 15:40:05 +0000</pubDate>
    </item>
    <item>
      <title>a1d1506f-6fc6-4970-9235-b7bf8f984260</title>
      <link>https://vulnerability.circl.lu/sighting/a1d1506f-6fc6-4970-9235-b7bf8f984260/export</link>
      <description>{"uuid": "a1d1506f-6fc6-4970-9235-b7bf8f984260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5qqwbyjjfirhz", "content": "CVE-2026-76571 - Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik\nCVE ID : CVE-2026-76571\n \n Published : Aug. 22, 2026, 2:21 p.m. | 13\u00a0minutes ago\n \n Description : Joomla Extension - fabrikar.com - Unauthenticated SQL...", "creation_timestamp": "2026-08-22T14:48:04.991526Z"}</description>
      <content:encoded>{"uuid": "a1d1506f-6fc6-4970-9235-b7bf8f984260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5qqwbyjjfirhz", "content": "CVE-2026-76571 - Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik\nCVE ID : CVE-2026-76571\n \n Published : Aug. 22, 2026, 2:21 p.m. | 13\u00a0minutes ago\n \n Description : Joomla Extension - fabrikar.com - Unauthenticated SQL...", "creation_timestamp": "2026-08-22T14:48:04.991526Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a1d1506f-6fc6-4970-9235-b7bf8f984260/export</guid>
      <pubDate>Sat, 22 Aug 2026 14:48:04 +0000</pubDate>
    </item>
  </channel>
</rss>
