<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 16:01:04 +0000</lastBuildDate>
    <item>
      <title>d78108bd-08b7-42ed-9c59-61d08e752248</title>
      <link>https://vulnerability.circl.lu/sighting/d78108bd-08b7-42ed-9c59-61d08e752248/export</link>
      <description>{"uuid": "d78108bd-08b7-42ed-9c59-61d08e752248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibukmgim2b", "content": "\ud83d\udea8 CVE-2026-90937 \u2014 CVSS 9.4 CRITICAL\n\nfroxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90937\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T14:07:41.389039Z"}</description>
      <content:encoded>{"uuid": "d78108bd-08b7-42ed-9c59-61d08e752248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibukmgim2b", "content": "\ud83d\udea8 CVE-2026-90937 \u2014 CVSS 9.4 CRITICAL\n\nfroxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90937\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T14:07:41.389039Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d78108bd-08b7-42ed-9c59-61d08e752248/export</guid>
      <pubDate>Mon, 14 Sep 2026 14:07:41 +0000</pubDate>
    </item>
    <item>
      <title>67810245-44d5-499d-91d9-bb98808a0ee1</title>
      <link>https://vulnerability.circl.lu/sighting/67810245-44d5-499d-91d9-bb98808a0ee1/export</link>
      <description>{"uuid": "67810245-44d5-499d-91d9-bb98808a0ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rfmuht2f", "content": "CVE-2026-90937 - froxlor\nIn versions of Froxlor earlier than 2.2.5, the system does not check for hidden line\u2011break characters in the URLs used for subdomain redirects. This lets an authenticated customer paste\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#froxlor #CVE #infosec", "creation_timestamp": "2026-09-14T13:30:07.972130Z"}</description>
      <content:encoded>{"uuid": "67810245-44d5-499d-91d9-bb98808a0ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rfmuht2f", "content": "CVE-2026-90937 - froxlor\nIn versions of Froxlor earlier than 2.2.5, the system does not check for hidden line\u2011break characters in the URLs used for subdomain redirects. This lets an authenticated customer paste\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#froxlor #CVE #infosec", "creation_timestamp": "2026-09-14T13:30:07.972130Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/67810245-44d5-499d-91d9-bb98808a0ee1/export</guid>
      <pubDate>Mon, 14 Sep 2026 13:30:07 +0000</pubDate>
    </item>
  </channel>
</rss>
