<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 19 Sep 2026 06:35:42 +0000</lastBuildDate>
    <item>
      <title>cac0293d-d36c-4e6d-91fb-62a684c94e3c</title>
      <link>https://vulnerability.circl.lu/sighting/cac0293d-d36c-4e6d-91fb-62a684c94e3c/export</link>
      <description>{"uuid": "cac0293d-d36c-4e6d-91fb-62a684c94e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt7snhzuc2j", "content": "CVE-2026-93868 - cotonti\nThe password reset feature in Cotonti (up to version 1.0.0) creates codes that can be guessed because they are based on the server's current time. An attacker who knows the server's clock can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cotonti #CVE #infosec", "creation_timestamp": "2026-09-18T22:30:07.364511Z"}</description>
      <content:encoded>{"uuid": "cac0293d-d36c-4e6d-91fb-62a684c94e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt7snhzuc2j", "content": "CVE-2026-93868 - cotonti\nThe password reset feature in Cotonti (up to version 1.0.0) creates codes that can be guessed because they are based on the server's current time. An attacker who knows the server's clock can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cotonti #CVE #infosec", "creation_timestamp": "2026-09-18T22:30:07.364511Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cac0293d-d36c-4e6d-91fb-62a684c94e3c/export</guid>
      <pubDate>Fri, 18 Sep 2026 22:30:07 +0000</pubDate>
    </item>
    <item>
      <title>a2c876b3-a622-45bc-a6f5-8d2cf102cf1f</title>
      <link>https://vulnerability.circl.lu/sighting/a2c876b3-a622-45bc-a6f5-8d2cf102cf1f/export</link>
      <description>{"uuid": "a2c876b3-a622-45bc-a6f5-8d2cf102cf1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvt6pssb6j2g", "content": "\ud83d\udea8 CVE-2026-93868 \u2014 CVSS 9.2 CRITICAL\n\nCotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecove...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93868\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T22:10:38.027172Z"}</description>
      <content:encoded>{"uuid": "a2c876b3-a622-45bc-a6f5-8d2cf102cf1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvt6pssb6j2g", "content": "\ud83d\udea8 CVE-2026-93868 \u2014 CVSS 9.2 CRITICAL\n\nCotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecove...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93868\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T22:10:38.027172Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a2c876b3-a622-45bc-a6f5-8d2cf102cf1f/export</guid>
      <pubDate>Fri, 18 Sep 2026 22:10:38 +0000</pubDate>
    </item>
    <item>
      <title>ae6d4878-cec2-4bab-b99d-6907e140cb2a</title>
      <link>https://vulnerability.circl.lu/sighting/ae6d4878-cec2-4bab-b99d-6907e140cb2a/export</link>
      <description>{"uuid": "ae6d4878-cec2-4bab-b99d-6907e140cb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gntdxhbaxnqn5", "content": "CVE-2026-93868 - Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG\nCVE ID : CVE-2026-93868\n \n Published : Sept. 18, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : Cotonti through 1.0.0 derives password recovery validation tokens from md5(microti...", "creation_timestamp": "2026-09-18T22:04:31.680832Z"}</description>
      <content:encoded>{"uuid": "ae6d4878-cec2-4bab-b99d-6907e140cb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gntdxhbaxnqn5", "content": "CVE-2026-93868 - Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG\nCVE ID : CVE-2026-93868\n \n Published : Sept. 18, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : Cotonti through 1.0.0 derives password recovery validation tokens from md5(microti...", "creation_timestamp": "2026-09-18T22:04:31.680832Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ae6d4878-cec2-4bab-b99d-6907e140cb2a/export</guid>
      <pubDate>Fri, 18 Sep 2026 22:04:31 +0000</pubDate>
    </item>
    <item>
      <title>c25f7044-c405-4c43-9e6c-195a78450d9a</title>
      <link>https://vulnerability.circl.lu/sighting/c25f7044-c405-4c43-9e6c-195a78450d9a/export</link>
      <description>{"uuid": "c25f7044-c405-4c43-9e6c-195a78450d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt2v5jjpb2r", "content": "\ud83d\udfe0 CVE-2026-93868 - High (8.1)\n\nCotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93868/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T21:02:03.482356Z"}</description>
      <content:encoded>{"uuid": "c25f7044-c405-4c43-9e6c-195a78450d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt2v5jjpb2r", "content": "\ud83d\udfe0 CVE-2026-93868 - High (8.1)\n\nCotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93868/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T21:02:03.482356Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c25f7044-c405-4c43-9e6c-195a78450d9a/export</guid>
      <pubDate>Fri, 18 Sep 2026 21:02:03 +0000</pubDate>
    </item>
  </channel>
</rss>
