<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 11 Sep 2026 22:55:25 +0000</lastBuildDate>
    <item>
      <title>06200632-6aca-491f-b699-7bf1755a2e92</title>
      <link>https://vulnerability.circl.lu/sighting/06200632-6aca-491f-b699-7bf1755a2e92/export</link>
      <description>{"uuid": "06200632-6aca-491f-b699-7bf1755a2e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbhhxg5a72c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T20:59:23.091470Z"}</description>
      <content:encoded>{"uuid": "06200632-6aca-491f-b699-7bf1755a2e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbhhxg5a72c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T20:59:23.091470Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/06200632-6aca-491f-b699-7bf1755a2e92/export</guid>
      <pubDate>Fri, 11 Sep 2026 20:59:23 +0000</pubDate>
    </item>
    <item>
      <title>0d1dbae3-ba32-4688-98f8-3f760ba993fb</title>
      <link>https://vulnerability.circl.lu/sighting/0d1dbae3-ba32-4688-98f8-3f760ba993fb/export</link>
      <description>{"uuid": "0d1dbae3-ba32-4688-98f8-3f760ba993fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbdv6mlox27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T19:55:13.446089Z"}</description>
      <content:encoded>{"uuid": "0d1dbae3-ba32-4688-98f8-3f760ba993fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbdv6mlox27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T19:55:13.446089Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0d1dbae3-ba32-4688-98f8-3f760ba993fb/export</guid>
      <pubDate>Fri, 11 Sep 2026 19:55:13 +0000</pubDate>
    </item>
    <item>
      <title>670e1844-d86b-4a23-a1b8-b1639454e914</title>
      <link>https://vulnerability.circl.lu/sighting/670e1844-d86b-4a23-a1b8-b1639454e914/export</link>
      <description>{"uuid": "670e1844-d86b-4a23-a1b8-b1639454e914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbafeozon2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:40.164170Z"}</description>
      <content:encoded>{"uuid": "670e1844-d86b-4a23-a1b8-b1639454e914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbafeozon2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:40.164170Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/670e1844-d86b-4a23-a1b8-b1639454e914/export</guid>
      <pubDate>Fri, 11 Sep 2026 18:52:40 +0000</pubDate>
    </item>
    <item>
      <title>2739ab39-7599-4a3e-91bd-a483aa959103</title>
      <link>https://vulnerability.circl.lu/sighting/2739ab39-7599-4a3e-91bd-a483aa959103/export</link>
      <description>{"uuid": "2739ab39-7599-4a3e-91bd-a483aa959103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvb4vbpscf2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T17:49:58.669390Z"}</description>
      <content:encoded>{"uuid": "2739ab39-7599-4a3e-91bd-a483aa959103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvb4vbpscf2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T17:49:58.669390Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2739ab39-7599-4a3e-91bd-a483aa959103/export</guid>
      <pubDate>Fri, 11 Sep 2026 17:49:58 +0000</pubDate>
    </item>
    <item>
      <title>77ad9af7-5662-42bc-a851-f658e34c3323</title>
      <link>https://vulnerability.circl.lu/sighting/77ad9af7-5662-42bc-a851-f658e34c3323/export</link>
      <description>{"uuid": "77ad9af7-5662-42bc-a851-f658e34c3323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvazipgtsx24", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T16:49:15.715268Z"}</description>
      <content:encoded>{"uuid": "77ad9af7-5662-42bc-a851-f658e34c3323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvazipgtsx24", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T16:49:15.715268Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/77ad9af7-5662-42bc-a851-f658e34c3323/export</guid>
      <pubDate>Fri, 11 Sep 2026 16:49:15 +0000</pubDate>
    </item>
    <item>
      <title>b1c7940d-0daa-4e9a-bd1e-602d5e6bade3</title>
      <link>https://vulnerability.circl.lu/sighting/b1c7940d-0daa-4e9a-bd1e-602d5e6bade3/export</link>
      <description>{"uuid": "b1c7940d-0daa-4e9a-bd1e-602d5e6bade3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjg7ahm2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds,\u2026\nCVSS 9.1 \u00b7 EPSS 0.2%\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T14:44:23.663262Z"}</description>
      <content:encoded>{"uuid": "b1c7940d-0daa-4e9a-bd1e-602d5e6bade3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjg7ahm2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds,\u2026\nCVSS 9.1 \u00b7 EPSS 0.2%\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T14:44:23.663262Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b1c7940d-0daa-4e9a-bd1e-602d5e6bade3/export</guid>
      <pubDate>Fri, 11 Sep 2026 14:44:23 +0000</pubDate>
    </item>
    <item>
      <title>75d7b99e-fd2d-4ccb-a5fd-1a2424eecd6a</title>
      <link>https://vulnerability.circl.lu/sighting/75d7b99e-fd2d-4ccb-a5fd-1a2424eecd6a/export</link>
      <description>{"uuid": "75d7b99e-fd2d-4ccb-a5fd-1a2424eecd6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahyzfuwf2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T11:36:16.706761Z"}</description>
      <content:encoded>{"uuid": "75d7b99e-fd2d-4ccb-a5fd-1a2424eecd6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahyzfuwf2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T11:36:16.706761Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/75d7b99e-fd2d-4ccb-a5fd-1a2424eecd6a/export</guid>
      <pubDate>Fri, 11 Sep 2026 11:36:16 +0000</pubDate>
    </item>
    <item>
      <title>b69bf216-3d65-4909-9a81-4c9a7e7d8b1a</title>
      <link>https://vulnerability.circl.lu/sighting/b69bf216-3d65-4909-9a81-4c9a7e7d8b1a/export</link>
      <description>{"uuid": "b69bf216-3d65-4909-9a81-4c9a7e7d8b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaegv3crq2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T10:32:26.086828Z"}</description>
      <content:encoded>{"uuid": "b69bf216-3d65-4909-9a81-4c9a7e7d8b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaegv3crq2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T10:32:26.086828Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b69bf216-3d65-4909-9a81-4c9a7e7d8b1a/export</guid>
      <pubDate>Fri, 11 Sep 2026 10:32:26 +0000</pubDate>
    </item>
    <item>
      <title>6045e87e-e287-4007-8419-5a4be61432e4</title>
      <link>https://vulnerability.circl.lu/sighting/6045e87e-e287-4007-8419-5a4be61432e4/export</link>
      <description>{"uuid": "6045e87e-e287-4007-8419-5a4be61432e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv73jddkdh2j", "content": "CVE-2026-89086 - jose\nThe jose software for OCaml versions earlier than 0.11.0 can mistakenly treat an RSA signature as valid even when it was not created with the correct public key. This means an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jose #ocaml #CVE #infosec", "creation_timestamp": "2026-09-10T22:20:04.729346Z"}</description>
      <content:encoded>{"uuid": "6045e87e-e287-4007-8419-5a4be61432e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv73jddkdh2j", "content": "CVE-2026-89086 - jose\nThe jose software for OCaml versions earlier than 0.11.0 can mistakenly treat an RSA signature as valid even when it was not created with the correct public key. This means an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jose #ocaml #CVE #infosec", "creation_timestamp": "2026-09-10T22:20:04.729346Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6045e87e-e287-4007-8419-5a4be61432e4/export</guid>
      <pubDate>Thu, 10 Sep 2026 22:20:04 +0000</pubDate>
    </item>
    <item>
      <title>127776dd-dd89-4629-a1c1-fa73e2982834</title>
      <link>https://vulnerability.circl.lu/sighting/127776dd-dd89-4629-a1c1-fa73e2982834/export</link>
      <description>{"uuid": "127776dd-dd89-4629-a1c1-fa73e2982834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv72tzbqc522", "content": "\ud83d\udea8 CVE-2026-89086 \u2014 CVSS 9.1 CRITICAL\n\nIn the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89086\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T22:08:09.604316Z"}</description>
      <content:encoded>{"uuid": "127776dd-dd89-4629-a1c1-fa73e2982834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv72tzbqc522", "content": "\ud83d\udea8 CVE-2026-89086 \u2014 CVSS 9.1 CRITICAL\n\nIn the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89086\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T22:08:09.604316Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/127776dd-dd89-4629-a1c1-fa73e2982834/export</guid>
      <pubDate>Thu, 10 Sep 2026 22:08:09 +0000</pubDate>
    </item>
  </channel>
</rss>
