https://vulnerability.circl.lu/sightings/feed 2026-09-17T15:24:55.646682+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1de0ae9e-700a-4e44-8f57-c8b6a1a1cf5d/export 2026-09-17T15:24:55.666996+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1de0ae9e-700a-4e44-8f57-c8b6a1a1cf5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4009", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:00:06.855933Z"} 2026-09-17T10:00:06.855933+00:00 https://vulnerability.circl.lu/sighting/e75a4983-ff37-4db6-96a2-e75c8d6fde00/export 2026-09-17T15:24:55.668372+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e75a4983-ff37-4db6-96a2-e75c8d6fde00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4009", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:08.806727Z"} 2026-09-15T10:00:08.806727+00:00 https://vulnerability.circl.lu/sighting/d253f3c8-796a-40b2-b23f-e3a0dee083c4/export 2026-09-17T15:24:55.668464+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d253f3c8-796a-40b2-b23f-e3a0dee083c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4009", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:05.376583Z"} 2026-09-14T10:00:05.376583+00:00 https://vulnerability.circl.lu/sighting/46b5183e-9581-48ab-9e87-6bfde607b053/export 2026-09-17T15:24:55.668543+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "46b5183e-9581-48ab-9e87-6bfde607b053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40949", "type": "seen", "source": "https://t.me/shimiscyberworld/1382", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2025-40949 \u2014 CVSS 9.1\nCVE-2025-40949: Critical RUGGEDCOM ROX Command Injection\n\nCVE-2025-40949 \u2014 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All ve\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2025-40949 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:51.804764Z"} 2026-09-13T00:00:51.804764+00:00 https://vulnerability.circl.lu/sighting/cf9f697b-687e-419c-b59b-9890fac7d003/export 2026-09-17T15:24:55.668624+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cf9f697b-687e-419c-b59b-9890fac7d003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4009", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:15.170752Z"} 2026-09-12T10:00:15.170752+00:00 https://vulnerability.circl.lu/sighting/277e46a2-0321-4814-8b4f-11f5019ed64c/export 2026-09-17T15:24:55.668694+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "277e46a2-0321-4814-8b4f-11f5019ed64c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40949", "type": "seen", "source": "https://t.me/shimiscyberworld/1382", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2025-40949 \u2014 CVSS 9.1\nCVE-2025-40949: Critical RUGGEDCOM ROX Command Injection\n\nCVE-2025-40949 \u2014 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All ve\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2025-40949 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:07.191221Z"} 2026-09-12T10:00:07.191221+00:00 https://vulnerability.circl.lu/sighting/1c55acef-4d96-464a-97b8-509635d744e0/export 2026-09-17T15:24:55.668770+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1c55acef-4d96-464a-97b8-509635d744e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4009", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:06.923579Z"} 2026-09-11T10:00:06.923579+00:00 https://vulnerability.circl.lu/sighting/23ff80ae-d17f-48cd-9f34-6c8a8a25e2a8/export 2026-09-17T15:24:55.668846+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "23ff80ae-d17f-48cd-9f34-6c8a8a25e2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40594", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2691", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Siemens SINAMICS \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 SINAMICS \u043e\u0442 Siemens, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-14337 \u0438 CVE-2025-40594, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u043e \u0432\u0441\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u044f\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0446\u0435\u043d\u043a\u0438 CVSS. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u0440\u0438 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c SINAMICS...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - SEC-1275-1\nPublished: 2025-11-18 12:20 | Author: Vulner Queen\n\n#general_cyber_news #siemens #sinamics\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-produktah-siemens-sinamics-ugrozhaet-promyshlennoy-infrastrukture_16397", "creation_timestamp": "2026-09-10T00:00:45.322009Z"} 2026-09-10T00:00:45.322009+00:00 https://vulnerability.circl.lu/sighting/f6fdc41c-e655-4541-9100-f4739c8354c6/export 2026-09-17T15:24:55.668924+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f6fdc41c-e655-4541-9100-f4739c8354c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40594", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2691", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Siemens SINAMICS \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 SINAMICS \u043e\u0442 Siemens, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-14337 \u0438 CVE-2025-40594, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u043e \u0432\u0441\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u044f\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0446\u0435\u043d\u043a\u0438 CVSS. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u0440\u0438 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c SINAMICS...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - SEC-1275-1\nPublished: 2025-11-18 12:20 | Author: Vulner Queen\n\n#general_cyber_news #siemens #sinamics\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-produktah-siemens-sinamics-ugrozhaet-promyshlennoy-infrastrukture_16397", "creation_timestamp": "2026-09-09T05:00:10.808144Z"} 2026-09-09T05:00:10.808144+00:00 https://vulnerability.circl.lu/sighting/add8de69-3909-4b0f-b853-28e617622686/export 2026-09-17T15:24:55.668997+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "add8de69-3909-4b0f-b853-28e617622686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40551", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solarwinds_webhelpdesk_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x64, cmd\", \"author\": [\"Jimi Sebree\", \"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an access control bypass vulnerability (CVE-2025-40536) and an unsafe deserialization\\n vulnerability (CVE-2025-40551) to achieve unauthenticated RCE against a vulnerable SolarWinds Web Help Desk (WHD)\\n server.\", \"disclosure_date\": \"2026-01-28\", \"fullname\": \"exploit/multi/http/solarwinds_webhelpdesk_rce\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"SolarWinds Web Help Desk unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-restarts\"]}, \"path\": \"/modules/exploits/multi/http/solarwinds_webhelpdesk_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"multi/http/solarwinds_webhelpdesk_rce\", \"references\": [\"CVE-2025-40536\", \"CVE-2025-40551\", \"URL-https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm\", \"URL-https://horizon3.ai/attack-research/cve-2025-40551-another-solarwinds-web-help-desk-deserialization-issue/\"], \"rport\": 8443, \"session_types\": false, \"targets\": [\"WHD 12.8.* on Windows (Native code payload)\", \"WHD 12.8.* on Linux (Command payload)\", \"WHD 12.7.* on Windows (Command payload)\", \"WHD 12.7.* on Linux (Command payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:12.219145Z"} 2026-09-08T06:50:12.219145+00:00