<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-05T05:54:49.433113+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7b741ed7-599b-49cb-96a3-4953335134d4/export</id>
    <title>7b741ed7-599b-49cb-96a3-4953335134d4</title>
    <updated>2026-10-05T05:54:49.461879+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7b741ed7-599b-49cb-96a3-4953335134d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx2qyckmum2k", "content": "\ud83d\udd34 CVE-2026-105134 - Critical (10)\n\nA flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105134/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T15:51:20.864358Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7b741ed7-599b-49cb-96a3-4953335134d4/export"/>
    <published>2026-10-04T15:51:20.864358+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/67f61dce-820d-4efd-af3b-8be35e617595/export</id>
    <title>67f61dce-820d-4efd-af3b-8be35e617595</title>
    <updated>2026-10-05T05:54:49.464445+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "67f61dce-820d-4efd-af3b-8be35e617595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx272keqm52y", "content": "AhsayCBS 10.3.0 \u2013 10.3.2 hit by CRITICAL OS command injection (CVE-2026-105134). Remote code execution possible \u2014 exploit is public. Upgrade to 10.3.4+ immediately. https://radar.offseq.com/threat/cve-2026-105134-os-command-injection-in-ahsay-ahsaycbs-a9df873cc55c0ce9 #OffSeq #Vulnerability #CVE", "creation_timestamp": "2026-10-04T10:30:29.180561Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/67f61dce-820d-4efd-af3b-8be35e617595/export"/>
    <published>2026-10-04T10:30:29.180561+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2583ae6e-69a9-4817-8bf7-32dfb7cc75c9/export</id>
    <title>2583ae6e-69a9-4817-8bf7-32dfb7cc75c9</title>
    <updated>2026-10-05T05:54:49.464549+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2583ae6e-69a9-4817-8bf7-32dfb7cc75c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117382173564078136", "content": "CVE-2026-105134 (CRITICAL): Ahsay AhsayCBS \u226410.3.2 suffers OS command injection in Replication Receiver (/rps/api/json/UpdateReceivers.do). Remote RCE possible \u2014 public exploit out. Patch to 10.3.4+ now. https://radar.offseq.com/threat/cve-2026-105134-os-command-injection-in-ahsay-ahsaycbs-a9df873cc55c0ce9 #OffSeq #Vuln #CVE #PatchNow", "creation_timestamp": "2026-10-04T10:30:26.879818Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2583ae6e-69a9-4817-8bf7-32dfb7cc75c9/export"/>
    <published>2026-10-04T10:30:26.879818+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/72c6ec05-c429-4873-92ee-add5f0a64048/export</id>
    <title>72c6ec05-c429-4873-92ee-add5f0a64048</title>
    <updated>2026-10-05T05:54:49.464636+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "72c6ec05-c429-4873-92ee-add5f0a64048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwzx26cith22", "content": "\ud83d\udea8 CVE-2026-105134 \u2014 CVSS 9.3 CRITICAL\n\nA flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105134\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T08:07:05.861390Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/72c6ec05-c429-4873-92ee-add5f0a64048/export"/>
    <published>2026-10-04T08:07:05.861390+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a7951e9c-db34-429d-977a-f097d3a17afa/export</id>
    <title>a7951e9c-db34-429d-977a-f097d3a17afa</title>
    <updated>2026-10-05T05:54:49.464722+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a7951e9c-db34-429d-977a-f097d3a17afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://gist.github.com/ichintu/231f28d16cc1668438fdb199fb3943c7", "content": "This daily cyber threat intelligence briefing covers critical vulnerabilities, enforcement actions, emerging threats, and strategic guidance:\n\n- **Critical Vulnerabilities:** Two CVSS 10.0 flaws were disclosed: a code injection in InternLM MindSearch (CVE-2026-105135) and an OS command injection in Ahsay AhsayCBS (CVE-2026-105134), both actively exploited in the wild.\n- **Law Enforcement &amp;amp; Espionage:** The FBI detained suspected ShinyHunters extortionist \u201cRey\u201d in Jordan, who is now cooperating with investigators. Separately, China-aligned TA419 is targeting U.S. AI policy experts with Microsoft account takeover phishing campaigns.\n- **Post-Quantum Migration:** Experts urge SMBs to immediately map cryptographic assets and begin migration to counter \u201charvest now, decrypt later\u201d threats, citing finalized NIST PQC standards and cloud vendor roadmaps.\n- **Industry Discourse:** Security professionals highlight that superficially renaming threats or security practices cannot substitute for addressing underlying vulnerabilities and operational gaps.", "creation_timestamp": "2026-10-04T08:00:33.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a7951e9c-db34-429d-977a-f097d3a17afa/export"/>
    <published>2026-10-04T08:00:33+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3a6a5260-bf72-4a40-be72-96f48919f31f/export</id>
    <title>3a6a5260-bf72-4a40-be72-96f48919f31f</title>
    <updated>2026-10-05T05:54:49.464812+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3a6a5260-bf72-4a40-be72-96f48919f31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378933239812056", "content": "There is a new vulnerability with elevated criticality in Ahsay AhsayCBS (CVE-2026-105134) https://vuldb.com/vuln/413351", "creation_timestamp": "2026-10-03T20:46:23.154787Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3a6a5260-bf72-4a40-be72-96f48919f31f/export"/>
    <published>2026-10-03T20:46:23.154787+00:00</published>
  </entry>
</feed>
