https://vulnerability.circl.lu/sightings/feed 2026-10-03T23:02:25.806177+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fefbc539-1efc-4e7a-bf5d-e2858a748fff/export 2026-10-03T23:02:25.815344+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fefbc539-1efc-4e7a-bf5d-e2858a748fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mwx5jumzjs2r", "content": "Whoa whoa. ShinyHunters just percent-encoded past Oracle PeopleSoft WAFs. Block /PSEMHUB/, they knock /%50SEMHUB/, WebLogic decodes the P, CVE-2026-35273 still drops shells on dozens of boxes. June patch was free. Firewall cosplay was not. day276.014", "creation_timestamp": "2026-10-03T05:25:18.711221Z"} 2026-10-03T05:25:18.711221+00:00 https://vulnerability.circl.lu/sighting/566ec6ab-506d-403a-884f-b9bbf459e970/export 2026-10-03T23:02:25.816814+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "566ec6ab-506d-403a-884f-b9bbf459e970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117373012079753151", "content": "The ShinyHunters extortion gang is bypassing Web Application Firewall (WAF) rules by using URL-encoding tricks to exploit the Oracle PeopleSoft CVE-2026-35273 vulnerability. Mandiant urges organizations to apply the official security update rather than relying on WAF blocks, as attackers continue to deploy web shells and malware to steal sensitive data.https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/", "creation_timestamp": "2026-10-02T19:40:33.398960Z"} 2026-10-02T19:40:33.398960+00:00 https://vulnerability.circl.lu/sighting/00d78195-6bf4-414d-8e3d-602fe01d6ac4/export 2026-10-03T23:02:25.817011+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "00d78195-6bf4-414d-8e3d-602fe01d6ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35189", "type": "seen", "source": "https://bsky.app/profile/standup.thecompound.tech/post/3mwvdzjdjcp2y", "content": "Envoy 1.39.2, 1.38.5 and 1.37.7 fix CVE-2026-35189 in BoringSSL certificate parsing. A crafted nameRelativeToCRLIssuer CRL Distribution Point can trigger excessive allocation during a TLS handshake. #software", "creation_timestamp": "2026-10-02T12:16:04.605775Z"} 2026-10-02T12:16:04.605775+00:00 https://vulnerability.circl.lu/sighting/e044d598-5bc1-4906-9513-9f5822dae4e5/export 2026-10-03T23:02:25.817135+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "e044d598-5bc1-4906-9513-9f5822dae4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://www.cert.se/2026/10/cert-se-veckobrev-v40.html", "content": "", "creation_timestamp": "2026-10-02T00:30:00.000000Z"} 2026-10-02T00:30:00+00:00 https://vulnerability.circl.lu/sighting/a635ebe5-1a80-4998-bbac-16e666f21a8d/export 2026-10-03T23:02:25.818020+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a635ebe5-1a80-4998-bbac-16e666f21a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "Telegram/3ezEsp5gK88wLpfJ-0VsxORLRAFRltvc0-oVPzDdZ7Y-3JQ", "content": "", "creation_timestamp": "2026-10-01T23:00:22.000000Z"} 2026-10-01T23:00:22+00:00 https://vulnerability.circl.lu/sighting/2d3ca0a4-adb5-49f5-a3b1-2221d765aeeb/export 2026-10-03T23:02:25.818124+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2d3ca0a4-adb5-49f5-a3b1-2221d765aeeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "published-proof-of-concept", "source": "Telegram/3ezEsp5gK88wLpfJ-0VsxORLRAFRltvc0-oVPzDdZ7Y-3JQ", "content": "", "creation_timestamp": "2026-10-01T23:00:22.000000Z"} 2026-10-01T23:00:22+00:00 https://vulnerability.circl.lu/sighting/4ff53ae4-33d4-43bf-bf1a-3325feeea205/export 2026-10-03T23:02:25.818217+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4ff53ae4-33d4-43bf-bf1a-3325feeea205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35517", "type": "seen", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "content": "", "creation_timestamp": "2026-10-01T23:00:20.000000Z"} 2026-10-01T23:00:20+00:00 https://vulnerability.circl.lu/sighting/25397a1a-9fd8-46c1-bcc0-9bdeb434b872/export 2026-10-03T23:02:25.818308+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "25397a1a-9fd8-46c1-bcc0-9bdeb434b872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35517", "type": "published-proof-of-concept", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "content": "", "creation_timestamp": "2026-10-01T23:00:20.000000Z"} 2026-10-01T23:00:20+00:00 https://vulnerability.circl.lu/sighting/74be6c8b-2955-4812-8be9-c355a5efa3f1/export 2026-10-03T23:02:25.818401+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "74be6c8b-2955-4812-8be9-c355a5efa3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwqk4mygqd2t", "content": "\ud83d\udea8 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-30T14:21:53.305100Z"} 2026-09-30T14:21:53.305100+00:00 https://vulnerability.circl.lu/sighting/d6a52960-4e48-46a2-af80-c0e4994e470b/export 2026-10-03T23:02:25.818495+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d6a52960-4e48-46a2-af80-c0e4994e470b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117360432922523865", "content": "\ud83d\udcf0 Citrix Zero-Days and Oracle PeopleSoft Flaw Under Active Exploit\n\ud83d\udea8 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/citrix-zero-days-and-oracle-peoplesoft-flaw-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-30T14:21:44.238755Z"} 2026-09-30T14:21:44.238755+00:00