<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-24T23:43:40.782134+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/35b58f8a-384c-48e5-b7c5-56d85dae6deb/export</id>
    <title>35b58f8a-384c-48e5-b7c5-56d85dae6deb</title>
    <updated>2026-09-24T23:43:40.799603+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "35b58f8a-384c-48e5-b7c5-56d85dae6deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mwbqmepsqs23", "content": "Veeam Agent pour Windows : la faille CVE-2026-32996 offre les privil\u00e8ges SYSTEM, un exploit est public\nwww.it-connect.fr/veeam-agent-...", "creation_timestamp": "2026-09-24T17:08:09.293478Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/35b58f8a-384c-48e5-b7c5-56d85dae6deb/export"/>
    <published>2026-09-24T17:08:09.293478+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65a090fd-8a5f-4c5c-804d-d37df8a32e8f/export</id>
    <title>65a090fd-8a5f-4c5c-804d-d37df8a32e8f</title>
    <updated>2026-09-24T23:43:40.801411+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65a090fd-8a5f-4c5c-804d-d37df8a32e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mwbhrv3ts224", "content": "\ud83d\udce2 [VULN] Veeam Agent pour Windows - Une faille qui donne les droits SYSTEM CVE-2026-32996\n\nSi vous faites tourner Veeam Agent pour sauvegarder un poste Windows, et surtout si plusieurs personnes s'y connectent, allez v\u00e9rifier tout de suite son num\u00e9ro de build parce que depuis que\u2026\n\n#CVE #Cyberveille", "creation_timestamp": "2026-09-24T14:30:07.856470Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65a090fd-8a5f-4c5c-804d-d37df8a32e8f/export"/>
    <published>2026-09-24T14:30:07.856470+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b6149986-0ae4-4adf-802c-4fa2aa6bcd31/export</id>
    <title>b6149986-0ae4-4adf-802c-4fa2aa6bcd31</title>
    <updated>2026-09-24T23:43:40.801527+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b6149986-0ae4-4adf-802c-4fa2aa6bcd31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dui6rcw45hy2b", "content": "CVE-2026-3253 - MailerLite \u2013 Signup forms (official)\nCVE ID : CVE-2026-3253\n \n Published : Sept. 24, 2026, 11:31 a.m. | 22\u00a0minutes ago\n \n Description : The MailerLite \u2013 Signup forms (official) plugin for WordPress is vulnerable to unauthorized modification of data due to a mis...", "creation_timestamp": "2026-09-24T12:23:56.405035Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b6149986-0ae4-4adf-802c-4fa2aa6bcd31/export"/>
    <published>2026-09-24T12:23:56.405035+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3860f331-ede6-4357-a44a-8b1dde07a28d/export</id>
    <title>3860f331-ede6-4357-a44a-8b1dde07a28d</title>
    <updated>2026-09-24T23:43:40.801625+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3860f331-ede6-4357-a44a-8b1dde07a28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mw6kqsluct2y", "content": "CISA KEV: Zyxel GS1900 CVE-2026-7273 and Veeam Agent CVE-2026-32996 both under active exploitation. Patches available for both\u2026 https://0daynews.com/articles/2026-09-22-zyxel-veeam-kev-active-exploitation/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-3277", "creation_timestamp": "2026-09-23T10:45:14.214771Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3860f331-ede6-4357-a44a-8b1dde07a28d/export"/>
    <published>2026-09-23T10:45:14.214771+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9e13f136-9a76-4de3-984f-a010dc5cc0c8/export</id>
    <title>9e13f136-9a76-4de3-984f-a010dc5cc0c8</title>
    <updated>2026-09-24T23:43:40.801706+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9e13f136-9a76-4de3-984f-a010dc5cc0c8", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c9a57f0-6012-4178-909d-f5c8e33c4d16", "content": "", "creation_timestamp": "2026-09-22T21:00:32.810892Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9e13f136-9a76-4de3-984f-a010dc5cc0c8/export"/>
    <published>2026-09-22T21:00:32.810892+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/23cb5532-d76a-4096-9035-a9247f567930/export</id>
    <title>23cb5532-d76a-4096-9035-a9247f567930</title>
    <updated>2026-09-24T23:43:40.801792+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "23cb5532-d76a-4096-9035-a9247f567930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32741", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mw4t233ejs2l", "content": "CVE-2026-32741 is trending. Hype score 7, currently #7 on cvemon.\n\nlibheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buffer overflow in MaskImageCodec::decode_mask_image(). When decoding a HEIF file\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-32741", "creation_timestamp": "2026-09-22T18:08:14.860958Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/23cb5532-d76a-4096-9035-a9247f567930/export"/>
    <published>2026-09-22T18:08:14.860958+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ee6f974a-8622-4558-adbd-f1eb6305884a/export</id>
    <title>ee6f974a-8622-4558-adbd-f1eb6305884a</title>
    <updated>2026-09-24T23:43:40.801871+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ee6f974a-8622-4558-adbd-f1eb6305884a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32641", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117315640019354217", "content": "CVE-2026-32641: Parseable pre-3.0.0 panics on malformed x-amz-firehose header before auth. Unauth attacker can loop restarts, DoS. CVSS 7.5, no patch yet. Update to 3.0.0 now. https://www.valtersit.com/cve/CVE-2026-32641/ #CVE #infosec", "creation_timestamp": "2026-09-22T16:30:09.968349Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ee6f974a-8622-4558-adbd-f1eb6305884a/export"/>
    <published>2026-09-22T16:30:09.968349+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4248cf09-2236-4fad-8c5e-1dbdde24ed56/export</id>
    <title>4248cf09-2236-4fad-8c5e-1dbdde24ed56</title>
    <updated>2026-09-24T23:43:40.801946+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4248cf09-2236-4fad-8c5e-1dbdde24ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mw44bofp4n72", "content": "Veeam Agent LPE PoC https://github.com/suce0155/CVE-2026-32996", "creation_timestamp": "2026-09-22T11:20:57.407110Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4248cf09-2236-4fad-8c5e-1dbdde24ed56/export"/>
    <published>2026-09-22T11:20:57.407110+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6af166a4-0ef4-4421-adf1-4070d580dc76/export</id>
    <title>6af166a4-0ef4-4421-adf1-4070d580dc76</title>
    <updated>2026-09-24T23:43:40.802018+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6af166a4-0ef4-4421-adf1-4070d580dc76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117314423748594898", "content": "Veeam Agent LPE PoC https://github.com/suce0155/CVE-2026-32996", "creation_timestamp": "2026-09-22T11:20:46.464250Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6af166a4-0ef4-4421-adf1-4070d580dc76/export"/>
    <published>2026-09-22T11:20:46.464250+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/93d6f833-1a7d-4faf-81de-28bf267bd3d5/export</id>
    <title>93d6f833-1a7d-4faf-81de-28bf267bd3d5</title>
    <updated>2026-09-24T23:43:40.802089+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "93d6f833-1a7d-4faf-81de-28bf267bd3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw3pot6iq52y", "content": "A critical exploited Veeam Agent vulnerability (CVE-2026-32996) is under active attack. Public PoC exploit code has been disclosed. Update systems now.\n\n#Veeam #CVE202632996 #Cybersecurity #Vulnerability #Infosec", "creation_timestamp": "2026-09-22T07:35:37.100092Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/93d6f833-1a7d-4faf-81de-28bf267bd3d5/export"/>
    <published>2026-09-22T07:35:37.100092+00:00</published>
  </entry>
</feed>
