<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: gophish</title><description>Every new CVE for gophish.</description><link>https://agentprime.io/</link><item><title>CVE-2026-107273: Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site</title><link>https://agentprime.io/advisories/CVE-2026-107273/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107273/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 15:44:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107272: Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages</title><link>https://agentprime.io/advisories/CVE-2026-107272/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107272/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 15:44:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107271: Gophish through 0.12.1 Login Rate Limit Bypass via X-Forwarded-For Spoofing</title><link>https://agentprime.io/advisories/CVE-2026-107271/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107271/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 15:44:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107270: Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpoints</title><link>https://agentprime.io/advisories/CVE-2026-107270/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107270/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 15:44:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107269: Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy</title><link>https://agentprime.io/advisories/CVE-2026-107269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107269/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 15:40:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82269: Gophish Account Lockout and Forced Password Change Bypassable via API Key</title><link>https://agentprime.io/advisories/CVE-2026-82269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82269/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Aug 2026 16:18:52 GMT</pubDate><category>CVE</category></item></channel></rss>