<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 18 Sep 2026 09:41:39 +0000</lastBuildDate>
    <item>
      <title>ea4bc47d-c68d-4a7a-a7a7-75407287d9fe</title>
      <link>https://vulnerability.circl.lu/sighting/ea4bc47d-c68d-4a7a-a7a7-75407287d9fe/export</link>
      <description>{"uuid": "ea4bc47d-c68d-4a7a-a7a7-75407287d9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85885", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr4qsranr25", "content": "CVE-2026-85885 - microsoft 365 copilot\nA flaw in Microsoft 365 Copilot lets someone with valid access run special commands that increase their permissions across the network. This could allow the attacker to view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:30:04.993121Z"}</description>
      <content:encoded>{"uuid": "ea4bc47d-c68d-4a7a-a7a7-75407287d9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85885", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr4qsranr25", "content": "CVE-2026-85885 - microsoft 365 copilot\nA flaw in Microsoft 365 Copilot lets someone with valid access run special commands that increase their permissions across the network. This could allow the attacker to view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:30:04.993121Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ea4bc47d-c68d-4a7a-a7a7-75407287d9fe/export</guid>
      <pubDate>Fri, 18 Sep 2026 02:30:04 +0000</pubDate>
    </item>
    <item>
      <title>17d8e400-0b85-463b-82c6-790865e84d09</title>
      <link>https://vulnerability.circl.lu/sighting/17d8e400-0b85-463b-82c6-790865e84d09/export</link>
      <description>{"uuid": "17d8e400-0b85-463b-82c6-790865e84d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85885", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquuy6rqj2b", "content": "\ud83d\udea8 CVE-2026-85885 \u2014 CVSS 9.9 CRITICAL\n\nImproper neutralization of special elements used in a command ('command injection') in M365 Copilot allows ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85885\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:09:14.593359Z"}</description>
      <content:encoded>{"uuid": "17d8e400-0b85-463b-82c6-790865e84d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85885", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquuy6rqj2b", "content": "\ud83d\udea8 CVE-2026-85885 \u2014 CVSS 9.9 CRITICAL\n\nImproper neutralization of special elements used in a command ('command injection') in M365 Copilot allows ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85885\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:09:14.593359Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/17d8e400-0b85-463b-82c6-790865e84d09/export</guid>
      <pubDate>Fri, 18 Sep 2026 00:09:14 +0000</pubDate>
    </item>
  </channel>
</rss>
