<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 24 Sep 2026 11:32:00 +0000</lastBuildDate>
    <item>
      <title>11f7151e-e36b-4059-b575-11da51aaa948</title>
      <link>https://vulnerability.circl.lu/sighting/11f7151e-e36b-4059-b575-11da51aaa948/export</link>
      <description>{"uuid": "11f7151e-e36b-4059-b575-11da51aaa948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94501", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw5wvr4ske2o", "content": "CVE-2026-94501 - jsherp\nIn jshERP versions up to 3.6, a logged\u2011in user can use the system\u2019s create, edit and delete functions to modify the role assignments of any account without proper checks. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsherp #jishenghua #CVE #infosec", "creation_timestamp": "2026-09-23T04:50:05.052999Z"}</description>
      <content:encoded>{"uuid": "11f7151e-e36b-4059-b575-11da51aaa948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94501", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw5wvr4ske2o", "content": "CVE-2026-94501 - jsherp\nIn jshERP versions up to 3.6, a logged\u2011in user can use the system\u2019s create, edit and delete functions to modify the role assignments of any account without proper checks. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsherp #jishenghua #CVE #infosec", "creation_timestamp": "2026-09-23T04:50:05.052999Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/11f7151e-e36b-4059-b575-11da51aaa948/export</guid>
      <pubDate>Wed, 23 Sep 2026 04:50:05 +0000</pubDate>
    </item>
    <item>
      <title>79c08078-3122-4a57-99a7-2356a8a728f0</title>
      <link>https://vulnerability.circl.lu/sighting/79c08078-3122-4a57-99a7-2356a8a728f0/export</link>
      <description>{"uuid": "79c08078-3122-4a57-99a7-2356a8a728f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94501", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2ivod5ko2b", "content": "\ud83d\udfe0 CVE-2026-94501 - High (8.8)\n\njshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness CRUD endpoi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94501/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-21T20:01:31.733432Z"}</description>
      <content:encoded>{"uuid": "79c08078-3122-4a57-99a7-2356a8a728f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94501", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2ivod5ko2b", "content": "\ud83d\udfe0 CVE-2026-94501 - High (8.8)\n\njshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness CRUD endpoi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94501/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-21T20:01:31.733432Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/79c08078-3122-4a57-99a7-2356a8a728f0/export</guid>
      <pubDate>Mon, 21 Sep 2026 20:01:31 +0000</pubDate>
    </item>
  </channel>
</rss>
