<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-29T21:56:25.606637+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3dc9cbfe-7f54-4960-b66f-6c0952378d04/export</id>
    <title>3dc9cbfe-7f54-4960-b66f-6c0952378d04</title>
    <updated>2026-09-29T21:56:25.637366+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3dc9cbfe-7f54-4960-b66f-6c0952378d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "published-proof-of-concept", "source": "Telegram/P5aaBxBg5fY1VZGTEsJ6wFdp3qVI9fN_NhMWOCqsSdZd8hc", "content": "", "creation_timestamp": "2026-09-19T00:00:13.994621Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3dc9cbfe-7f54-4960-b66f-6c0952378d04/export"/>
    <published>2026-09-19T00:00:13.994621+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/673a0a96-faa0-45eb-8c74-5905cc84817e/export</id>
    <title>673a0a96-faa0-45eb-8c74-5905cc84817e</title>
    <updated>2026-09-29T21:56:25.639442+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "673a0a96-faa0-45eb-8c74-5905cc84817e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "published-proof-of-concept", "source": "Telegram/0TYm20Si6i9ATjKMTFhXmrxNMpb5Q10R_tUfUFsZfOykYXE", "content": "", "creation_timestamp": "2026-09-19T00:00:12.835029Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/673a0a96-faa0-45eb-8c74-5905cc84817e/export"/>
    <published>2026-09-19T00:00:12.835029+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2614a6c0-3387-4e1b-b8c3-e7d966e13130/export</id>
    <title>2614a6c0-3387-4e1b-b8c3-e7d966e13130</title>
    <updated>2026-09-29T21:56:25.639593+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2614a6c0-3387-4e1b-b8c3-e7d966e13130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/bdufstecru/3466", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u0434\u0430\u043f\u0442\u0435\u0440\u0430 VMXNET3 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u0432 VMware Workstation \u0438 VMware Fusion \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-14796\nCVE-2026-59346\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38288", "creation_timestamp": "2026-09-18T12:00:05.525383Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2614a6c0-3387-4e1b-b8c3-e7d966e13130/export"/>
    <published>2026-09-18T12:00:05.525383+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c8088e69-ddb0-45dd-90a9-0aef6a142cc3/export</id>
    <title>c8088e69-ddb0-45dd-90a9-0aef6a142cc3</title>
    <updated>2026-09-29T21:56:25.639709+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c8088e69-ddb0-45dd-90a9-0aef6a142cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/44344", "content": "Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code\n\nBroadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.\n\n\"A\nhttps://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "creation_timestamp": "2026-09-18T12:00:04.865908Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c8088e69-ddb0-45dd-90a9-0aef6a142cc3/export"/>
    <published>2026-09-18T12:00:04.865908+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/309bc9e2-3d65-499a-883b-2e6ff63a4cde/export</id>
    <title>309bc9e2-3d65-499a-883b-2e6ff63a4cde</title>
    <updated>2026-09-29T21:56:25.639817+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "309bc9e2-3d65-499a-883b-2e6ff63a4cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "Telegram/0TYm20Si6i9ATjKMTFhXmrxNMpb5Q10R_tUfUFsZfOykYXE", "content": "", "creation_timestamp": "2026-09-18T04:00:14.324508Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/309bc9e2-3d65-499a-883b-2e6ff63a4cde/export"/>
    <published>2026-09-18T04:00:14.324508+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64bc3fe4-2dcc-4a1a-81c4-addb4c30d972/export</id>
    <title>64bc3fe4-2dcc-4a1a-81c4-addb4c30d972</title>
    <updated>2026-09-29T21:56:25.639917+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64bc3fe4-2dcc-4a1a-81c4-addb4c30d972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "Telegram/P5aaBxBg5fY1VZGTEsJ6wFdp3qVI9fN_NhMWOCqsSdZd8hc", "content": "", "creation_timestamp": "2026-09-18T04:00:12.700196Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64bc3fe4-2dcc-4a1a-81c4-addb4c30d972/export"/>
    <published>2026-09-18T04:00:12.700196+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e201c782-e48b-4273-888f-78c3629e1b10/export</id>
    <title>e201c782-e48b-4273-888f-78c3629e1b10</title>
    <updated>2026-09-29T21:56:25.640014+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e201c782-e48b-4273-888f-78c3629e1b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102383", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59346-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 11:13:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T00:00:31.505277Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e201c782-e48b-4273-888f-78c3629e1b10/export"/>
    <published>2026-09-16T00:00:31.505277+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1c6c4b69-e1ae-43f1-a7aa-4e1ecc5dd494/export</id>
    <title>1c6c4b69-e1ae-43f1-a7aa-4e1ecc5dd494</title>
    <updated>2026-09-29T21:56:25.640128+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1c6c4b69-e1ae-43f1-a7aa-4e1ecc5dd494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/GithubRedTeam/102383", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59346-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xCyberstan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 11:13:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T13:00:05.456672Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1c6c4b69-e1ae-43f1-a7aa-4e1ecc5dd494/export"/>
    <published>2026-09-15T13:00:05.456672+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6fc6a9d1-6808-4497-9ef4-cca9464e7d03/export</id>
    <title>6fc6a9d1-6808-4497-9ef4-cca9464e7d03</title>
    <updated>2026-09-29T21:56:25.640227+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6fc6a9d1-6808-4497-9ef4-cca9464e7d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/CyberDispatch/2840", "content": "A critical VMware flaw can turn local VM admin access into host code execution.\n\nBroadcom fixed CVE-2026-59346 and an HGFS flaw in Workstation and Fusion 26H1u1. Both affect 25H2 and 26H1, with no workarounds or known exploitation.", "creation_timestamp": "2026-09-11T01:00:03.913930Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6fc6a9d1-6808-4497-9ef4-cca9464e7d03/export"/>
    <published>2026-09-11T01:00:03.913930+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2844c8b3-8d56-489e-9703-f86339c094a2/export</id>
    <title>2844c8b3-8d56-489e-9703-f86339c094a2</title>
    <updated>2026-09-29T21:56:25.640324+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2844c8b3-8d56-489e-9703-f86339c094a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mv2viomz422v", "content": "VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow\nand buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)\nURL: support.broadcom.com/web/ecx/supp...\nClassification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.3", "creation_timestamp": "2026-09-09T06:21:41.757964Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2844c8b3-8d56-489e-9703-f86339c094a2/export"/>
    <published>2026-09-09T06:21:41.757964+00:00</published>
  </entry>
</feed>
