<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 24 Sep 2026 22:22:06 +0000</lastBuildDate>
    <item>
      <title>84a245a4-1891-4b35-a46a-e5720ab72c47</title>
      <link>https://vulnerability.circl.lu/sighting/84a245a4-1891-4b35-a46a-e5720ab72c47/export</link>
      <description>{"uuid": "84a245a4-1891-4b35-a46a-e5720ab72c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zzsmkdm2f", "content": "\ud83d\udea8 CVE-2026-77254 \u2014 CVSS 9.1 CRITICAL\n\nMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77254\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:13:22.245681Z"}</description>
      <content:encoded>{"uuid": "84a245a4-1891-4b35-a46a-e5720ab72c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zzsmkdm2f", "content": "\ud83d\udea8 CVE-2026-77254 \u2014 CVSS 9.1 CRITICAL\n\nMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77254\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:13:22.245681Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/84a245a4-1891-4b35-a46a-e5720ab72c47/export</guid>
      <pubDate>Tue, 22 Sep 2026 20:13:22 +0000</pubDate>
    </item>
    <item>
      <title>8923dea4-717f-4340-856a-c008f066ea07</title>
      <link>https://vulnerability.circl.lu/sighting/8923dea4-717f-4340-856a-c008f066ea07/export</link>
      <description>{"uuid": "8923dea4-717f-4340-856a-c008f066ea07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4zqncn772q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-77254: MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-77254\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T20:08:14.563273Z"}</description>
      <content:encoded>{"uuid": "8923dea4-717f-4340-856a-c008f066ea07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4zqncn772q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-77254: MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-77254\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T20:08:14.563273Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8923dea4-717f-4340-856a-c008f066ea07/export</guid>
      <pubDate>Tue, 22 Sep 2026 20:08:14 +0000</pubDate>
    </item>
    <item>
      <title>8d49500e-8395-46af-8c6e-306483ed3c22</title>
      <link>https://vulnerability.circl.lu/sighting/8d49500e-8395-46af-8c6e-306483ed3c22/export</link>
      <description>{"uuid": "8d49500e-8395-46af-8c6e-306483ed3c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4yq67mxx2w", "content": "CVE-2026-77254 - mcp-atlassian\nThe MCP Atlassian server for Confluence and Jira accepted HTTP requests without verifying the caller\u2019s identity, then used the system\u2019s global credentials. This lets\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mcpatlassian #sooperset #CVE #infosec", "creation_timestamp": "2026-09-22T19:50:05.151949Z"}</description>
      <content:encoded>{"uuid": "8d49500e-8395-46af-8c6e-306483ed3c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4yq67mxx2w", "content": "CVE-2026-77254 - mcp-atlassian\nThe MCP Atlassian server for Confluence and Jira accepted HTTP requests without verifying the caller\u2019s identity, then used the system\u2019s global credentials. This lets\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mcpatlassian #sooperset #CVE #infosec", "creation_timestamp": "2026-09-22T19:50:05.151949Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d49500e-8395-46af-8c6e-306483ed3c22/export</guid>
      <pubDate>Tue, 22 Sep 2026 19:50:05 +0000</pubDate>
    </item>
  </channel>
</rss>
