<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 18 Sep 2026 03:08:32 +0000</lastBuildDate>
    <item>
      <title>f2cfa758-7c8f-45c1-8360-1de2cc883e26</title>
      <link>https://vulnerability.circl.lu/sighting/f2cfa758-7c8f-45c1-8360-1de2cc883e26/export</link>
      <description>{"uuid": "f2cfa758-7c8f-45c1-8360-1de2cc883e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92578", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoezgasdb2g", "content": "CVE-2026-92578 - avideo\nAVideo stores password hashes in a way that, if someone obtains those hashes, they can use them to sign in as any user without knowing the actual passwords. This means an attacker who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-17T00:20:04.395600Z"}</description>
      <content:encoded>{"uuid": "f2cfa758-7c8f-45c1-8360-1de2cc883e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92578", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoezgasdb2g", "content": "CVE-2026-92578 - avideo\nAVideo stores password hashes in a way that, if someone obtains those hashes, they can use them to sign in as any user without knowing the actual passwords. This means an attacker who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-17T00:20:04.395600Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f2cfa758-7c8f-45c1-8360-1de2cc883e26/export</guid>
      <pubDate>Thu, 17 Sep 2026 00:20:04 +0000</pubDate>
    </item>
    <item>
      <title>f11742bd-8744-4797-a11d-cb8f24732246</title>
      <link>https://vulnerability.circl.lu/sighting/f11742bd-8744-4797-a11d-cb8f24732246/export</link>
      <description>{"uuid": "f11742bd-8744-4797-a11d-cb8f24732246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoegpr4yb24", "content": "\ud83d\udea8 CVE-2026-92578 \u2014 CVSS 9.2 CRITICAL\n\nWWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92578\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T00:09:36.590509Z"}</description>
      <content:encoded>{"uuid": "f11742bd-8744-4797-a11d-cb8f24732246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoegpr4yb24", "content": "\ud83d\udea8 CVE-2026-92578 \u2014 CVSS 9.2 CRITICAL\n\nWWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92578\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T00:09:36.590509Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f11742bd-8744-4797-a11d-cb8f24732246/export</guid>
      <pubDate>Thu, 17 Sep 2026 00:09:36 +0000</pubDate>
    </item>
    <item>
      <title>a52bcc25-73b1-4e8d-8032-1d41f8c80eed</title>
      <link>https://vulnerability.circl.lu/sighting/a52bcc25-73b1-4e8d-8032-1d41f8c80eed/export</link>
      <description>{"uuid": "a52bcc25-73b1-4e8d-8032-1d41f8c80eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92578", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvodwnk63f2b", "content": "WWBN AVideo \u226429.0 hit by CRITICAL auth bypass (CVE-2026-92578): attackers with a password hash can access any account. Restrict hash access, monitor systems, and check vendor advisories. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq...", "creation_timestamp": "2026-09-17T00:00:39.325696Z"}</description>
      <content:encoded>{"uuid": "a52bcc25-73b1-4e8d-8032-1d41f8c80eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92578", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvodwnk63f2b", "content": "WWBN AVideo \u226429.0 hit by CRITICAL auth bypass (CVE-2026-92578): attackers with a password hash can access any account. Restrict hash access, monitor systems, and check vendor advisories. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq...", "creation_timestamp": "2026-09-17T00:00:39.325696Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a52bcc25-73b1-4e8d-8032-1d41f8c80eed/export</guid>
      <pubDate>Thu, 17 Sep 2026 00:00:39 +0000</pubDate>
    </item>
    <item>
      <title>11d6b433-7be2-4cdc-9348-200fa236bb69</title>
      <link>https://vulnerability.circl.lu/sighting/11d6b433-7be2-4cdc-9348-200fa236bb69/export</link>
      <description>{"uuid": "11d6b433-7be2-4cdc-9348-200fa236bb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92578", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117283437631671586", "content": "CVE-2026-92578: CRITICAL auth bypass in WWBN AVideo (\u226429.0) allows attackers with stolen password hashes to log in as any user \u2014 no password needed. Patch pending \u2014 restrict hash access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq #CVE202692578 #authentication #infosec", "creation_timestamp": "2026-09-17T00:00:36.148183Z"}</description>
      <content:encoded>{"uuid": "11d6b433-7be2-4cdc-9348-200fa236bb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92578", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117283437631671586", "content": "CVE-2026-92578: CRITICAL auth bypass in WWBN AVideo (\u226429.0) allows attackers with stolen password hashes to log in as any user \u2014 no password needed. Patch pending \u2014 restrict hash access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq #CVE202692578 #authentication #infosec", "creation_timestamp": "2026-09-17T00:00:36.148183Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/11d6b433-7be2-4cdc-9348-200fa236bb69/export</guid>
      <pubDate>Thu, 17 Sep 2026 00:00:36 +0000</pubDate>
    </item>
  </channel>
</rss>
