<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-30T16:59:33.049765+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/33c78f3a-d2ff-4f8e-8171-946ff2ce8968/export</id>
    <title>33c78f3a-d2ff-4f8e-8171-946ff2ce8968</title>
    <updated>2026-09-30T16:59:33.084579+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "33c78f3a-d2ff-4f8e-8171-946ff2ce8968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43287", "content": "CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability\n\nCISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659). \nThe post CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/cisa-warns-of-actively-exploited-microsoft-sharepoint-vulnerability/", "creation_timestamp": "2026-09-18T05:00:04.832741Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/33c78f3a-d2ff-4f8e-8171-946ff2ce8968/export"/>
    <published>2026-09-18T05:00:04.832741+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cb182f73-aa65-462b-948f-0d974df88314/export</id>
    <title>cb182f73-aa65-462b-948f-0d974df88314</title>
    <updated>2026-09-30T16:59:33.087675+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cb182f73-aa65-462b-948f-0d974df88314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45659", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117282536315348210", "content": "CVE-2026-45659: SharePoint Authenticated Deserialization RCE#CVE_2026_45659 https://blog.securelayer7.net/cve-2026-45659-sharepoint-deserialization-rce/", "creation_timestamp": "2026-09-16T20:11:22.990267Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cb182f73-aa65-462b-948f-0d974df88314/export"/>
    <published>2026-09-16T20:11:22.990267+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b950e2ec-acc9-4e0b-9b72-f419f81e503a/export</id>
    <title>b950e2ec-acc9-4e0b-9b72-f419f81e503a</title>
    <updated>2026-09-30T16:59:33.087919+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b950e2ec-acc9-4e0b-9b72-f419f81e503a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupw5douy22b", "content": "\u300cSharePoint Server\u300d\u306e\u8907\u6570\u8106\u5f31\u6027\u60aa\u7528\u3067\u5bfe\u7b56\u547c\u3073\u304b\u3051 - \u7c73\u5f53\u5c40\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cSharePoint Server\u300d\u306b\u95a2\u3059\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3001\u5229\u7528\u8005\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n\u540c\u88fd\u54c1\u306b\u95a2\u3057\u3066\u3001\u300cCVE-2026-32201\u300d\u300cCVE-2026-45659\u300d\u300cCVE-2026-56164\u300d\u300cCVE-2026-58644\u300d\u306e4\u4ef6\u3092\u6319\u3052\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u307e\u305f\u60aa\u7528\u306f\u78ba\u8a8d\u3055\u308c\u3066\u3044\u306a\u3044\u3082\u306e\u306e\u300cCVE-2026-55040\u300d\u306b\u3064\u3044\u3066\u3082\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u306f\u30ea\u30b9\u30af\u304c\u9ad8...", "creation_timestamp": "2026-09-04T21:33:59.136253Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b950e2ec-acc9-4e0b-9b72-f419f81e503a/export"/>
    <published>2026-09-04T21:33:59.136253+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/93e91fcd-4248-4d66-85ea-32f3c1e76e9d/export</id>
    <title>93e91fcd-4248-4d66-85ea-32f3c1e76e9d</title>
    <updated>2026-09-30T16:59:33.088050+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "93e91fcd-4248-4d66-85ea-32f3c1e76e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mujpn36edk2w", "content": "\ud83d\udee1\ufe0f CVE-2026-45659 | CISA ordena parche urgente para Microsoft SharePoint: Vulnerabilidad de Ejecuci\u00f3n Remota de C\u00f3digo www.newstecnicas.com/2026/07/cisa...", "creation_timestamp": "2026-09-02T10:21:32.966066Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/93e91fcd-4248-4d66-85ea-32f3c1e76e9d/export"/>
    <published>2026-09-02T10:21:32.966066+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7c2b4740-b026-4c43-ac47-5fd6866e2a71/export</id>
    <title>7c2b4740-b026-4c43-ac47-5fd6866e2a71</title>
    <updated>2026-09-30T16:59:33.088153+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7c2b4740-b026-4c43-ac47-5fd6866e2a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/CyberDispatch/2191", "content": "CISA added CVE-2026-45659 to KEV following active exploitation.\n\nThe SharePoint Server RCE was patched in May 2026.", "creation_timestamp": "2026-08-30T00:00:28.409798Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7c2b4740-b026-4c43-ac47-5fd6866e2a71/export"/>
    <published>2026-08-30T00:00:28.409798+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7e7880f9-3f45-44ee-addb-4afa62cdce7a/export</id>
    <title>7e7880f9-3f45-44ee-addb-4afa62cdce7a</title>
    <updated>2026-09-30T16:59:33.088256+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7e7880f9-3f45-44ee-addb-4afa62cdce7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://t.me/CyberDispatch/2191", "content": "CISA added CVE-2026-45659 to KEV following active exploitation.\n\nThe SharePoint Server RCE was patched in May 2026.", "creation_timestamp": "2026-08-29T20:00:08.011042Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7e7880f9-3f45-44ee-addb-4afa62cdce7a/export"/>
    <published>2026-08-29T20:00:08.011042+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0057db71-326a-4402-8af9-dd5b80ecdf6e/export</id>
    <title>0057db71-326a-4402-8af9-dd5b80ecdf6e</title>
    <updated>2026-09-30T16:59:33.088350+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0057db71-326a-4402-8af9-dd5b80ecdf6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/430", "content": "CVE-2026-45659\n\nDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", "creation_timestamp": "2026-08-28T00:00:33.517048Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0057db71-326a-4402-8af9-dd5b80ecdf6e/export"/>
    <published>2026-08-28T00:00:33.517048+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/38518755-e36a-4afb-8fb9-68be61e3a8a4/export</id>
    <title>38518755-e36a-4afb-8fb9-68be61e3a8a4</title>
    <updated>2026-09-30T16:59:33.088445+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "38518755-e36a-4afb-8fb9-68be61e3a8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://t.me/cve0day/430", "content": "CVE-2026-45659\n\nDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", "creation_timestamp": "2026-08-27T15:00:06.989783Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/38518755-e36a-4afb-8fb9-68be61e3a8a4/export"/>
    <published>2026-08-27T15:00:06.989783+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/609c40f9-f74b-4631-8f21-fbc500e9c2c7/export</id>
    <title>609c40f9-f74b-4631-8f21-fbc500e9c2c7</title>
    <updated>2026-09-30T16:59:33.088540+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "609c40f9-f74b-4631-8f21-fbc500e9c2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mtrihhujls2w", "content": "\ud83d\udea8 Gu\u00eda de remediaci\u00f3n urgente: Vulnerabilidad RCE en SharePoint (CVE-2026-45659) www.newstecnicas.com/2026/05/guia...", "creation_timestamp": "2026-08-23T19:09:12.719596Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/609c40f9-f74b-4631-8f21-fbc500e9c2c7/export"/>
    <published>2026-08-23T19:09:12.719596+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e422d10b-4a76-4717-b9f6-29071e0fafc2/export</id>
    <title>e422d10b-4a76-4717-b9f6-29071e0fafc2</title>
    <updated>2026-09-30T16:59:33.088636+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e422d10b-4a76-4717-b9f6-29071e0fafc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1758", "content": "\ud83d\udd34 SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case of remote code execution arising from the deserialization of untrusted data. The issue was addressed by Microsoft in May 2026 for SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.\n\nMicrosoft noted that any authenticated attacker could trigger the vulnerability, and that it does not require admin or other elevated privileges. In a network-based attack, an authenticated attacker with a minimum of Site Member permissions (PR:L) could leverage it to execute code remotely on the SharePoint Server.", "creation_timestamp": "2026-08-23T00:00:42.139464Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e422d10b-4a76-4717-b9f6-29071e0fafc2/export"/>
    <published>2026-08-23T00:00:42.139464+00:00</published>
  </entry>
</feed>
