<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 23 Sep 2026 20:04:23 +0000</lastBuildDate>
    <item>
      <title>13d63d52-3ea6-4ed9-bd18-be9126a084ff</title>
      <link>https://vulnerability.circl.lu/sighting/13d63d52-3ea6-4ed9-bd18-be9126a084ff/export</link>
      <description>{"uuid": "13d63d52-3ea6-4ed9-bd18-be9126a084ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4ijmp3ln22", "content": "CVE-2026-88402\nThe checkSQL feature in NocoBase version 2.1.21 can be tricked into running unwanted database commands, letting an attacker view private information stored in the system. This could expose customer records,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T15:00:05.854441Z"}</description>
      <content:encoded>{"uuid": "13d63d52-3ea6-4ed9-bd18-be9126a084ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4ijmp3ln22", "content": "CVE-2026-88402\nThe checkSQL feature in NocoBase version 2.1.21 can be tricked into running unwanted database commands, letting an attacker view private information stored in the system. This could expose customer records,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T15:00:05.854441Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/13d63d52-3ea6-4ed9-bd18-be9126a084ff/export</guid>
      <pubDate>Tue, 22 Sep 2026 15:00:05 +0000</pubDate>
    </item>
    <item>
      <title>abad2406-87a1-43c1-bd7d-0eec86f5538f</title>
      <link>https://vulnerability.circl.lu/sighting/abad2406-87a1-43c1-bd7d-0eec86f5538f/export</link>
      <description>{"uuid": "abad2406-87a1-43c1-bd7d-0eec86f5538f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88402", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4flwb7pk2c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88402: A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injectin\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88402\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T14:07:42.407989Z"}</description>
      <content:encoded>{"uuid": "abad2406-87a1-43c1-bd7d-0eec86f5538f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88402", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4flwb7pk2c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88402: A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injectin\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88402\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T14:07:42.407989Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/abad2406-87a1-43c1-bd7d-0eec86f5538f/export</guid>
      <pubDate>Tue, 22 Sep 2026 14:07:42 +0000</pubDate>
    </item>
  </channel>
</rss>
