<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 26 Aug 2026 04:59:41 +0000</lastBuildDate>
    <item>
      <title>30990ce6-ebed-40ae-a8ed-ed9c110ae721</title>
      <link>https://vulnerability.circl.lu/sighting/30990ce6-ebed-40ae-a8ed-ed9c110ae721/export</link>
      <description>{"uuid": "30990ce6-ebed-40ae-a8ed-ed9c110ae721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtusc5aguv2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 21 interactions\nCVE-2026-19478: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-73570: 15 interactions\nCVE-2026-77995: 6 interactions\nCVE-2026-18963: 4 interactions\n", "creation_timestamp": "2026-08-25T02:43:10.843186Z"}</description>
      <content:encoded>{"uuid": "30990ce6-ebed-40ae-a8ed-ed9c110ae721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtusc5aguv2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 21 interactions\nCVE-2026-19478: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-73570: 15 interactions\nCVE-2026-77995: 6 interactions\nCVE-2026-18963: 4 interactions\n", "creation_timestamp": "2026-08-25T02:43:10.843186Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/30990ce6-ebed-40ae-a8ed-ed9c110ae721/export</guid>
      <pubDate>Tue, 25 Aug 2026 02:43:10 +0000</pubDate>
    </item>
    <item>
      <title>ffe19d1f-090d-4eba-85ff-bf9c1bbcda80</title>
      <link>https://vulnerability.circl.lu/sighting/ffe19d1f-090d-4eba-85ff-bf9c1bbcda80/export</link>
      <description>{"uuid": "ffe19d1f-090d-4eba-85ff-bf9c1bbcda80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttoskizvp2p", "content": "\ud83d\udea8 CVE-2026-77995 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client &amp;lt; 3.2.0 - The man...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77995\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T16:08:06.946896Z"}</description>
      <content:encoded>{"uuid": "ffe19d1f-090d-4eba-85ff-bf9c1bbcda80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttoskizvp2p", "content": "\ud83d\udea8 CVE-2026-77995 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client &amp;lt; 3.2.0 - The man...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77995\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T16:08:06.946896Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ffe19d1f-090d-4eba-85ff-bf9c1bbcda80/export</guid>
      <pubDate>Mon, 24 Aug 2026 16:08:06 +0000</pubDate>
    </item>
    <item>
      <title>9711e559-b7d4-4f9e-a245-dc072ba2764f</title>
      <link>https://vulnerability.circl.lu/sighting/9711e559-b7d4-4f9e-a245-dc072ba2764f/export</link>
      <description>{"uuid": "9711e559-b7d4-4f9e-a245-dc072ba2764f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttnsdyjxi2e", "content": "CVE-2026-77995 - miniorange oauth client extension for joomla\nThe miniOrange OAuth Client extension for Joomla (versions before 3.2.0) can be fooled by changing a small piece of data stored in the web browser, allowing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T15:50:06.152728Z"}</description>
      <content:encoded>{"uuid": "9711e559-b7d4-4f9e-a245-dc072ba2764f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttnsdyjxi2e", "content": "CVE-2026-77995 - miniorange oauth client extension for joomla\nThe miniOrange OAuth Client extension for Joomla (versions before 3.2.0) can be fooled by changing a small piece of data stored in the web browser, allowing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T15:50:06.152728Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9711e559-b7d4-4f9e-a245-dc072ba2764f/export</guid>
      <pubDate>Mon, 24 Aug 2026 15:50:06 +0000</pubDate>
    </item>
    <item>
      <title>7f6302dc-4193-4a64-8cf5-a214a7f2e711</title>
      <link>https://vulnerability.circl.lu/sighting/7f6302dc-4193-4a64-8cf5-a214a7f2e711/export</link>
      <description>{"uuid": "7f6302dc-4193-4a64-8cf5-a214a7f2e711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77995", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mttfyp326q2f", "content": "miniOrange OAuth Client for Joomla (v1.0.0-3.1.9) hit by CRITICAL CVE-2026-77995: attackers can hijack any account, even admin, via cookie manipulation. Update to 3.2.0+ now. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-m...", "creation_timestamp": "2026-08-24T13:30:29.833036Z"}</description>
      <content:encoded>{"uuid": "7f6302dc-4193-4a64-8cf5-a214a7f2e711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77995", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mttfyp326q2f", "content": "miniOrange OAuth Client for Joomla (v1.0.0-3.1.9) hit by CRITICAL CVE-2026-77995: attackers can hijack any account, even admin, via cookie manipulation. Update to 3.2.0+ now. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-m...", "creation_timestamp": "2026-08-24T13:30:29.833036Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7f6302dc-4193-4a64-8cf5-a214a7f2e711/export</guid>
      <pubDate>Mon, 24 Aug 2026 13:30:29 +0000</pubDate>
    </item>
    <item>
      <title>00e5642b-0099-4ba0-ad18-11a019aebc1e</title>
      <link>https://vulnerability.circl.lu/sighting/00e5642b-0099-4ba0-ad18-11a019aebc1e/export</link>
      <description>{"uuid": "00e5642b-0099-4ba0-ad18-11a019aebc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77995", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117150726686144491", "content": "CVE-2026-77995 (CRITICAL, CVSS 10): miniOrange OAuth Client for Joomla (v1.0.0 \u2013 3.1.9) allows arbitrary account takeover via cookie manipulation. Patch to 3.2.0+ required. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-miniorange-0e8da876ce4c7e51 #OffSeq #Joomla #Vuln #OAuth", "creation_timestamp": "2026-08-24T13:30:28.961241Z"}</description>
      <content:encoded>{"uuid": "00e5642b-0099-4ba0-ad18-11a019aebc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77995", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117150726686144491", "content": "CVE-2026-77995 (CRITICAL, CVSS 10): miniOrange OAuth Client for Joomla (v1.0.0 \u2013 3.1.9) allows arbitrary account takeover via cookie manipulation. Patch to 3.2.0+ required. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-miniorange-0e8da876ce4c7e51 #OffSeq #Joomla #Vuln #OAuth", "creation_timestamp": "2026-08-24T13:30:28.961241Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/00e5642b-0099-4ba0-ad18-11a019aebc1e/export</guid>
      <pubDate>Mon, 24 Aug 2026 13:30:28 +0000</pubDate>
    </item>
  </channel>
</rss>
