<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-16T18:26:43.594957+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a6015fb2-da5d-4099-a809-99bdd35349e7/export</id>
    <title>a6015fb2-da5d-4099-a809-99bdd35349e7</title>
    <updated>2026-09-16T18:26:43.625732+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a6015fb2-da5d-4099-a809-99bdd35349e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvnqpumvlo2f", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-58704: Google Pixel Improper Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-58704", "creation_timestamp": "2026-09-16T18:16:49.153021Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a6015fb2-da5d-4099-a809-99bdd35349e7/export"/>
    <published>2026-09-16T18:16:49.153021+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb8088f0-c3d3-47a9-a427-b9b266ba3a57/export</id>
    <title>fb8088f0-c3d3-47a9-a427-b9b266ba3a57</title>
    <updated>2026-09-16T18:26:43.629143+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb8088f0-c3d3-47a9-a427-b9b266ba3a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mvnps2feo22q", "content": "Microsoft 365 SSO is throwing 5xx errors in the US/UK (MO1472904). Pixel CVE-2026-58704 is actively exploited\u2014install September updates. SteamOS NVIDIA driver reaches main tree. WinGet: uninstall by exact ID. Point-in-time restore also rolls back local files. +25 more stories; 49 joined", "creation_timestamp": "2026-09-16T18:00:11.684697Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb8088f0-c3d3-47a9-a427-b9b266ba3a57/export"/>
    <published>2026-09-16T18:00:11.684697+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/499077ad-9edf-4a22-aa77-caf2e0a2eb1e/export</id>
    <title>499077ad-9edf-4a22-aa77-caf2e0a2eb1e</title>
    <updated>2026-09-16T18:26:43.629288+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "499077ad-9edf-4a22-aa77-caf2e0a2eb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117281653436748936", "content": "New.\nPress release: New CISA Guidance Helps Critical Infrastructure Detect, Observe and Impede Malicious Cyber Activity https://www.cisa.gov/news-events/news/new-cisa-guidance-helps-critical-infrastructure-detect-observe-and-impede-malicious-cyber-activity\nThe guide: Using Cyber Decoys to Strengthen Detection and Response https://www.cisa.gov/resources-tools/resources/using-cyber-decoys-strengthen-detection-and-response\nCISA has also added one vulnerability to the catalogue.\nCVE-2026-58704: Google Pixel Improper Authorization Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-58704 #Google #infosec #vulnerability #CISA", "creation_timestamp": "2026-09-16T16:26:51.179211Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/499077ad-9edf-4a22-aa77-caf2e0a2eb1e/export"/>
    <published>2026-09-16T16:26:51.179211+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c159351-bdaa-4234-8f70-1d7e76742ce4/export</id>
    <title>6c159351-bdaa-4234-8f70-1d7e76742ce4</title>
    <updated>2026-09-16T18:26:43.629404+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "6c159351-bdaa-4234-8f70-1d7e76742ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-one-known-exploited-vulnerability-catalog", "content": "", "creation_timestamp": "2026-09-16T16:15:02.422859Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c159351-bdaa-4234-8f70-1d7e76742ce4/export"/>
    <published>2026-09-16T16:15:02.422859+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb9cba44-a049-4cb1-a3f2-506a8909f9d6/export</id>
    <title>fb9cba44-a049-4cb1-a3f2-506a8909f9d6</title>
    <updated>2026-09-16T18:26:43.632387+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb9cba44-a049-4cb1-a3f2-506a8909f9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvnjc2k6k323", "content": "Google patches high-severity zero-day (CVE-2026-58704) in Pixel modems. The flaw allows for remote privilege escalation and is under limited, targeted exploitation. CISA added to KEV. Update your Pixel now! #Pixel #Android #ZeroDay\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-16T16:03:49.935621Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb9cba44-a049-4cb1-a3f2-506a8909f9d6/export"/>
    <published>2026-09-16T16:03:49.935621+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86966c93-8d1c-4f52-899b-e7fc6df38ca7/export</id>
    <title>86966c93-8d1c-4f52-899b-e7fc6df38ca7</title>
    <updated>2026-09-16T18:26:43.632800+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86966c93-8d1c-4f52-899b-e7fc6df38ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58704", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117281559318718216", "content": "\ud83d\udcf0 Google Patches Actively Exploited Zero-Day Flaw in Pixel Modems\nGoogle patches high-severity zero-day (CVE-2026-58704) in Pixel modems. The flaw allows for remote privilege escalation and is under limited, targeted exploitation. CISA added to KEV. Update your Pixel now! #Pixel #Android #ZeroDay\n\ud83d\udd17 https://cyber.netsecops.io/articles/google-patches-actively-exploited-pixel-modem-zero-day-cve-2026-58704/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-16T16:03:05.799663Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86966c93-8d1c-4f52-899b-e7fc6df38ca7/export"/>
    <published>2026-09-16T16:03:05.799663+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a14970a0-b6ae-49dd-9c22-ee573a9b453b/export</id>
    <title>a14970a0-b6ae-49dd-9c22-ee573a9b453b</title>
    <updated>2026-09-16T18:26:43.633076+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a14970a0-b6ae-49dd-9c22-ee573a9b453b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnj575ybx2v", "content": "~Cisa~\nCISA added CVE-2026-58704 to its KEV Catalog after evidence of active exploitation.\n-\nIOCs: CVE-2026-58704\n-\n#CVE-2026-58704 #KEV #ThreatIntel", "creation_timestamp": "2026-09-16T16:01:06.395489Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a14970a0-b6ae-49dd-9c22-ee573a9b453b/export"/>
    <published>2026-09-16T16:01:06.395489+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/44693297-614a-4903-baab-fc390290c0b2/export</id>
    <title>44693297-614a-4903-baab-fc390290c0b2</title>
    <updated>2026-09-16T18:26:43.633247+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "44693297-614a-4903-baab-fc390290c0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/", "content": "Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15. \n\nThe post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-16T16:00:42.728385Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/44693297-614a-4903-baab-fc390290c0b2/export"/>
    <published>2026-09-16T16:00:42.728385+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/05ea59c5-2c95-4c57-8f4a-dc4d6410168a/export</id>
    <title>05ea59c5-2c95-4c57-8f4a-dc4d6410168a</title>
    <updated>2026-09-16T18:26:43.633356+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "05ea59c5-2c95-4c57-8f4a-dc4d6410168a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/indirlab.com/post/3mvnitt7qdq2f", "content": "Google, Pixel telefonlarda tespit edilen ve etkile\u015fim gerektirmeyen zero-click g\u00fcvenlik a\u00e7\u0131\u011f\u0131 CVE-2026-58704 i\u00e7in yamay\u0131 yay\u0131nlad\u0131. G\u00fcncel kal\u0131n. \ud83d\udc47\nhttps://indirlab.com/haber/pixel-kullanicilarina-kritik-uyari-zero-click-saldirisi-tespit-edildi", "creation_timestamp": "2026-09-16T15:55:52.739418Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/05ea59c5-2c95-4c57-8f4a-dc4d6410168a/export"/>
    <published>2026-09-16T15:55:52.739418+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64363a60-c1a8-4294-be58-25dc6db8597e/export</id>
    <title>64363a60-c1a8-4294-be58-25dc6db8597e</title>
    <updated>2026-09-16T18:26:43.633500+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64363a60-c1a8-4294-be58-25dc6db8597e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvni3kr52u2e", "content": "Pixel modem zero-day CVE-2026-58704 is being exploited in the wild and Google released a patch on 15 September \u2014 install the update now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T15:42:17.566917Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64363a60-c1a8-4294-be58-25dc6db8597e/export"/>
    <published>2026-09-16T15:42:17.566917+00:00</published>
  </entry>
</feed>
