https://vulnerability.circl.lu/sightings/feed 2026-09-25T07:33:21.982309+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/dd96f2f2-d95e-465c-a0d0-bbdfbb7531db/export 2026-09-25T07:33:21.996002+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd96f2f2-d95e-465c-a0d0-bbdfbb7531db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71540", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwd7aldf2u26", "content": "\ud83d\udfe0 CVE-2026-71540 - High (7.5)\n\nWazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71540/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-25T07:02:37.472049Z"} 2026-09-25T07:02:37.472049+00:00 https://vulnerability.circl.lu/sighting/e866de98-2281-4549-b064-acfd3c1c104a/export 2026-09-25T07:33:21.997684+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e866de98-2281-4549-b064-acfd3c1c104a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mwd5gyjoec2v", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-71362: \u26a0\ufe0f CVE-2026-71362: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 2.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-71362-adobe-commerce-is-affected-by-an", "creation_timestamp": "2026-09-25T06:30:24.269832Z"} 2026-09-25T06:30:24.269832+00:00 https://vulnerability.circl.lu/sighting/9ae3f139-750e-4b5f-b51f-aa8afc6be565/export 2026-09-25T07:33:21.997776+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9ae3f139-750e-4b5f-b51f-aa8afc6be565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71180", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwd45einmi2l", "content": "\ud83d\udccc CVE-2026-71180 - Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local acce... https://www.cyberhub.blog/cves/CVE-2026-71180", "creation_timestamp": "2026-09-25T06:07:07.663872Z"} 2026-09-25T06:07:07.663872+00:00 https://vulnerability.circl.lu/sighting/4682e16f-62a6-4478-87ea-2b1f9c00c61b/export 2026-09-25T07:33:21.997845+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4682e16f-62a6-4478-87ea-2b1f9c00c61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mwcyrsdmlq2e", "content": "CISA added CVE-2026-5430, a JWT auth bypass in WSO2 API Manager exploited since Sept 13 per watchTowr, and CVE-2026-71362, an Adobe Commerce/Magento auth flaw exploited since August per Sansec, to its KEV catalog today.", "creation_timestamp": "2026-09-25T05:06:58.783306Z"} 2026-09-25T05:06:58.783306+00:00 https://vulnerability.circl.lu/sighting/e026032c-f9ad-4210-86e7-13b20a4d7987/export 2026-09-25T07:33:21.997914+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e026032c-f9ad-4210-86e7-13b20a4d7987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://gist.github.com/ichintu/ab5cbbd3842997755fe279a7f768db9d", "content": "This daily threat intelligence digest highlights critical, actively exploited vulnerabilities and systemic patching gaps across enterprise, mobile, AI, and web platforms:\n\n\u2022 **Actively Exploited & High-Impact Flaws:** Adobe\u2019s AV26-808 advisory (CVE-2026-71362 added to CISA KEV) impacts multiple products; WordPress patched a critical RCE (CVE-2026-87902) exploited within 24 hours; OnePlus devices allow unprivileged apps to gain root (CVE-2025-10184); Brocade SANnav leaks IPsec pre-shared keys in container logs (CVE-2026-14443, CVSS 8.4).\n\n\u2022 **AI & Emerging Threats:** Orca Security\u2019s 2026 report reveals 81% of AI-using organizations host vulnerable packages, 50% with public exploits, and 99.9% unpatched, as defenses focus on prompt injection over basic hygiene. The Lunex info stealer now leverages Bring Your Own Vulnerable Driver (BYOVD) techniques.\n\n\u2022 **Legacy & Credential Risks:** PHP HTTP redirect credential leak (CVE-2026-91766) underscores persistent data exposure from older curl handling flaws.\n\n\u2022 **Key Takeaway:** Exploit-to-patch windows have effectively collapsed, and unmanaged/inventory-blind deployments are creating critical blind spots. Immediate patching, automated remediation workflows, and strict asset tracking are essential to mitigate active threats.", "creation_timestamp": "2026-09-25T00:00:39.000000Z"} 2026-09-25T00:00:39+00:00 https://vulnerability.circl.lu/sighting/24dd51dc-e4e3-46f1-aab8-a5f6be9fdbec/export 2026-09-25T07:33:21.997992+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "24dd51dc-e4e3-46f1-aab8-a5f6be9fdbec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mwc6g2f3t32o", "content": "Breaking: CISA adds Adobe Commerce CVE-2026-71362\n\u2022 SoFi shifts card program to SoFiUSD\n\u2022 Bungie outlines Marathon roadmap to 2027\n\u2022 Witcher 3 remaster launches September 29\nCatch the verified two-minute rundown.", "creation_timestamp": "2026-09-24T21:15:07.264881Z"} 2026-09-24T21:15:07.264881+00:00 https://vulnerability.circl.lu/sighting/e39e8675-d0da-4210-b1a3-21cf2a412950/export 2026-09-25T07:33:21.998057+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e39e8675-d0da-4210-b1a3-21cf2a412950", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1b7aa744-6dbf-4249-81cd-5764a61aab23", "content": "", "creation_timestamp": "2026-09-24T20:00:02.450963Z"} 2026-09-24T20:00:02.450963+00:00 https://vulnerability.circl.lu/sighting/fd56d02a-f7c1-4d0d-8fd7-05eac4b6a7b1/export 2026-09-25T07:33:21.998118+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fd56d02a-f7c1-4d0d-8fd7-05eac4b6a7b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mwbyr2qm4u2g", "content": "\ud83d\uded1 CVE-2026-71362\nAdobe Commerce and Magento\nCVSS 9.1 / EPSS 2% / KEV: No\nTL;DR: Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul\u2026\nhttps://cvesentinel.com/report/CVE-2026-71362?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-24T19:33:53.758264Z"} 2026-09-24T19:33:53.758264+00:00 https://vulnerability.circl.lu/sighting/f7a9d1a5-25b4-4503-be64-eac02fad9bf6/export 2026-09-25T07:33:21.998181+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f7a9d1a5-25b4-4503-be64-eac02fad9bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71047", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mw7vv2frxv27", "content": "\ud83d\udccc CVE-2026-71047 - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4... https://www.cyberhub.blog/cves/CVE-2026-71047", "creation_timestamp": "2026-09-23T23:37:07.013295Z"} 2026-09-23T23:37:07.013295+00:00 https://vulnerability.circl.lu/sighting/d83c8d2f-df7d-47ab-9aed-f3d625b0853e/export 2026-09-25T07:33:21.998246+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "d83c8d2f-df7d-47ab-9aed-f3d625b0853e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71047", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11", "content": "", "creation_timestamp": "2026-09-23T09:15:10.579078Z"} 2026-09-23T09:15:10.579078+00:00