<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 28 Aug 2026 12:02:37 +0000</lastBuildDate>
    <item>
      <title>321794df-6d6a-4ea8-9b34-2083fa85b8df</title>
      <link>https://vulnerability.circl.lu/sighting/321794df-6d6a-4ea8-9b34-2083fa85b8df/export</link>
      <description>{"uuid": "321794df-6d6a-4ea8-9b34-2083fa85b8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu27voc4kp2p", "content": "CVE-2026-79774 - wn-system-module\nIf a user can edit pages, layouts or partials in Winter CMS, they can break out of the safety checks and run any database or server commands. This could let them read or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#winter #composer #CVE #infosec", "creation_timestamp": "2026-08-27T06:30:04.668592Z"}</description>
      <content:encoded>{"uuid": "321794df-6d6a-4ea8-9b34-2083fa85b8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu27voc4kp2p", "content": "CVE-2026-79774 - wn-system-module\nIf a user can edit pages, layouts or partials in Winter CMS, they can break out of the safety checks and run any database or server commands. This could let them read or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#winter #composer #CVE #infosec", "creation_timestamp": "2026-08-27T06:30:04.668592Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/321794df-6d6a-4ea8-9b34-2083fa85b8df/export</guid>
      <pubDate>Thu, 27 Aug 2026 06:30:04 +0000</pubDate>
    </item>
    <item>
      <title>52095f7c-331d-474e-8b33-e159894fd5a4</title>
      <link>https://vulnerability.circl.lu/sighting/52095f7c-331d-474e-8b33-e159894fd5a4/export</link>
      <description>{"uuid": "52095f7c-331d-474e-8b33-e159894fd5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfzdv26c2y", "content": "\ud83d\udea8 CVE-2026-79774 \u2014 CVSS 9.3 CRITICAL\n\nWinter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in Syst...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79774\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:08:50.044666Z"}</description>
      <content:encoded>{"uuid": "52095f7c-331d-474e-8b33-e159894fd5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfzdv26c2y", "content": "\ud83d\udea8 CVE-2026-79774 \u2014 CVSS 9.3 CRITICAL\n\nWinter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in Syst...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79774\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:08:50.044666Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/52095f7c-331d-474e-8b33-e159894fd5a4/export</guid>
      <pubDate>Tue, 25 Aug 2026 18:08:50 +0000</pubDate>
    </item>
    <item>
      <title>8b65fedb-1a30-49f7-82e1-2412aec5e429</title>
      <link>https://vulnerability.circl.lu/sighting/8b65fedb-1a30-49f7-82e1-2412aec5e429/export</link>
      <description>{"uuid": "8b65fedb-1a30-49f7-82e1-2412aec5e429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7jkmnh26", "content": "\ud83d\udfe0 CVE-2026-79774 - High (8.4)\n\nWinter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerabili...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79774/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-25T17:00:43.468709Z"}</description>
      <content:encoded>{"uuid": "8b65fedb-1a30-49f7-82e1-2412aec5e429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7jkmnh26", "content": "\ud83d\udfe0 CVE-2026-79774 - High (8.4)\n\nWinter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerabili...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79774/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-25T17:00:43.468709Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8b65fedb-1a30-49f7-82e1-2412aec5e429/export</guid>
      <pubDate>Tue, 25 Aug 2026 17:00:43 +0000</pubDate>
    </item>
  </channel>
</rss>
