https://vulnerability.circl.lu/sightings/feed 2026-09-18T05:44:14.505448+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ca32f766-b7f7-4367-8ca9-91189173e147/export 2026-09-18T05:44:14.525193+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca32f766-b7f7-4367-8ca9-91189173e147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22679", "type": "seen", "source": "https://t.me/VulnerabilityNews/42295", "content": "Weaver E-cology critical bug exploited in attacks since March\n\nHackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-March to run discovery commands. [...]\nhttps://www.bleepingcomputer.com/news/security/weaver-e-cology-critical-bug-exploited-in-attacks-since-march/", "creation_timestamp": "2026-09-18T05:00:07.656062Z"} 2026-09-18T05:00:07.656062+00:00 https://vulnerability.circl.lu/sighting/c593f7a3-ae72-446f-8b38-eff1c8f5935a/export 2026-09-18T05:44:14.528030+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c593f7a3-ae72-446f-8b38-eff1c8f5935a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22686", "type": "seen", "source": "Telegram/ldEcFziyWqHrxcMhUmfovWp6pabg1VPjb65EzAzTF9XLNoc", "content": "", "creation_timestamp": "2026-09-18T04:00:09.286528Z"} 2026-09-18T04:00:09.286528+00:00 https://vulnerability.circl.lu/sighting/cbb05742-869f-4ee2-9943-4174371cb19c/export 2026-09-18T05:44:14.528360+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cbb05742-869f-4ee2-9943-4174371cb19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22686", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102471", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a moi404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 11:55:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T01:00:03.794453Z"} 2026-09-17T01:00:03.794453+00:00 https://vulnerability.circl.lu/sighting/d9e38bd5-991d-4144-abcc-cb9e8373006b/export 2026-09-18T05:44:14.528690+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d9e38bd5-991d-4144-abcc-cb9e8373006b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22686", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102471", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a moi404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 11:55:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T16:00:03.788892Z"} 2026-09-16T16:00:03.788892+00:00 https://vulnerability.circl.lu/sighting/98b51701-65ad-43df-a895-df01d977357e/export 2026-09-18T05:44:14.528838+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "98b51701-65ad-43df-a895-df01d977357e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22706", "type": "published-proof-of-concept", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.156652Z"} 2026-09-15T00:00:21.156652+00:00 https://vulnerability.circl.lu/sighting/79b30f41-f38a-4187-8ef6-5d7f9460a195/export 2026-09-18T05:44:14.528950+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "79b30f41-f38a-4187-8ef6-5d7f9460a195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22738", "type": "seen", "source": "https://t.me/purp_sec/1473", "content": "SpEL Injection \u0432 Spring AI \u2192 RCE \u0447\u0435\u0440\u0435\u0437 vector search (CVE-2026-22738)\n\n\u0412 Spring AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-22738, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 SpEL injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SimpleVectorStore. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 filter-\u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL-\u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u043a\u0430\u043a \u043a\u043e\u0434.\n\n\u041a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u0435\u043c:\n\n\u25b6\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 filter expression\n\u25b6\ufe0fExpression \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL engine\n\u25b6\ufe0f\u0412\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f SpEL payload\n\u25b6\ufe0f\u0412\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\u25b6\ufe0f\u041f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0442\u0438\u043f\u0430\u043c JVM (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Runtime, ProcessBuilder) \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a RCE\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (env, \u0442\u043e\u043a\u0435\u043d\u044b, \u043a\u043b\u044e\u0447\u0438), \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 injection, \u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432 \u0441\u043b\u043e\u0439 AI-\u043f\u043e\u0438\u0441\u043a\u0430. \u041c\u0435\u043d\u0435\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0435\u043c\u0430.\n\n\u27a1\ufe0f\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n#red_team", "creation_timestamp": "2026-09-15T00:00:11.269723Z"} 2026-09-15T00:00:11.269723+00:00 https://vulnerability.circl.lu/sighting/6ed7ad2b-bb2d-41b8-80c9-0eada8f4441b/export 2026-09-18T05:44:14.529076+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6ed7ad2b-bb2d-41b8-80c9-0eada8f4441b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22738", "type": "seen", "source": "https://t.me/purp_sec/1473", "content": "SpEL Injection \u0432 Spring AI \u2192 RCE \u0447\u0435\u0440\u0435\u0437 vector search (CVE-2026-22738)\n\n\u0412 Spring AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-22738, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 SpEL injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SimpleVectorStore. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 filter-\u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL-\u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u043a\u0430\u043a \u043a\u043e\u0434.\n\n\u041a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u0435\u043c:\n\n\u25b6\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 filter expression\n\u25b6\ufe0fExpression \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL engine\n\u25b6\ufe0f\u0412\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f SpEL payload\n\u25b6\ufe0f\u0412\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\u25b6\ufe0f\u041f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0442\u0438\u043f\u0430\u043c JVM (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Runtime, ProcessBuilder) \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a RCE\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (env, \u0442\u043e\u043a\u0435\u043d\u044b, \u043a\u043b\u044e\u0447\u0438), \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 injection, \u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432 \u0441\u043b\u043e\u0439 AI-\u043f\u043e\u0438\u0441\u043a\u0430. \u041c\u0435\u043d\u0435\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0435\u043c\u0430.\n\n\u27a1\ufe0f\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n#red_team", "creation_timestamp": "2026-09-14T18:00:06.700532Z"} 2026-09-14T18:00:06.700532+00:00 https://vulnerability.circl.lu/sighting/26e83bb8-9bae-4c32-8a70-e74b06601cc2/export 2026-09-18T05:44:14.529191+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "26e83bb8-9bae-4c32-8a70-e74b06601cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22770", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi77frxef2t", "content": "CVE-2026-22770 - imagemagick\nThe magick.net libraries for various platforms can be tricked into running unwanted code when processing specially crafted image files. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#imagemagick #dirklemstra #dotnet #CVE #infosec", "creation_timestamp": "2026-09-14T13:20:05.007739Z"} 2026-09-14T13:20:05.007739+00:00 https://vulnerability.circl.lu/sighting/4f13b8f9-ba0c-4a2b-b5e1-3de0497ae811/export 2026-09-18T05:44:14.529289+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4f13b8f9-ba0c-4a2b-b5e1-3de0497ae811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22706", "type": "seen", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-14T03:00:15.185120Z"} 2026-09-14T03:00:15.185120+00:00 https://vulnerability.circl.lu/sighting/0717d46e-d461-43a0-8c03-5c314c4a0b13/export 2026-09-18T05:44:14.529382+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0717d46e-d461-43a0-8c03-5c314c4a0b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22924", "type": "seen", "source": "https://t.me/shimiscyberworld/1383", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-22924 \u2014 CVSS 9.1\nSIMATIC CN 4100 Critical Vulnerability: Unauthenticated Resource Exhaustion\n\nCVE-2026-22924 \u2014 A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and i\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-22924 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:51.767325Z"} 2026-09-13T00:00:51.767325+00:00