<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T07:20:19.472456+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc906c1d-f841-4346-9657-d53288d837b5/export</id>
    <title>dc906c1d-f841-4346-9657-d53288d837b5</title>
    <updated>2026-10-08T07:20:19.500302+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc906c1d-f841-4346-9657-d53288d837b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://infosec.exchange/ap/users/117354334421158714/statuses/117403108309221215", "content": "Cisco October advisory: 18 CVEs, 7 critical, no workarounds for any of them.\nNX-OS NGOAM: CVE-2026-76485/76486/76501 \u2014 all CVSS 9.8, unauthenticated root RCE via crafted IP packets on Nexus 3000/9000. Requires NGOAM enabled (with SRv6 or NV Overlay depending on the CVE).\nCheck: show feature | include ngoamIf unused: no feature ngoam\nLicense On-Prem: CVE-2026-76482 (CVSS 10.0, signature verification bypass), CVE-2026-76480 (9.8, missing auth), CVE-2026-20328 (9.1, unauth admin password reset), CVE-2026-76454 (9.1, unauth file write). Fixed: 10-202609.\nNotable: Cisco credited AI models in vulnerability discovery. First time I've seen that in an advisory.\nNo active exploits. Patch the window.\nhttps://threataft.com/articles/cisco-october-2026-mega-roundup-ngoam-license-on-prem\n#infosec #cisco #nxos #patchnow #cve", "creation_timestamp": "2026-10-08T04:53:43.243033Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc906c1d-f841-4346-9657-d53288d837b5/export"/>
    <published>2026-10-08T04:53:43.243033+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/19f27e43-8b50-4b08-88c3-5eeb51864a00/export</id>
    <title>19f27e43-8b50-4b08-88c3-5eeb51864a00</title>
    <updated>2026-10-08T07:20:19.504435+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "19f27e43-8b50-4b08-88c3-5eeb51864a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdgn4adhv2l", "content": "CVE-2026-76485 - cisco nx-os software\nCisco Nexus 3000 and 9000 series switches running NX\u2011OS can be tricked into running unwanted code or rebooting if the VXLAN OAM feature is turned on. An attacker can send specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-10-08T02:40:05.183297Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/19f27e43-8b50-4b08-88c3-5eeb51864a00/export"/>
    <published>2026-10-08T02:40:05.183297+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/139ff23f-aab7-4a6e-b07c-8fa8076a5c99/export</id>
    <title>139ff23f-aab7-4a6e-b07c-8fa8076a5c99</title>
    <updated>2026-10-08T07:20:19.504536+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "139ff23f-aab7-4a6e-b07c-8fa8076a5c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxdcqmhppc2j", "content": "Cisco NX-OS NGOAM CRITICAL vuln (CVE-2026-76485): Remote unauthenticated attackers can execute code or cause DoS. Disable NGOAM if not required. Patch status pending. Details: https://radar.offseq.com/threat/a-vulnerability-in-the-vxlan-operation-administration-and-maintenance-oam-feature-of-cisc...", "creation_timestamp": "2026-10-08T01:30:28.573253Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/139ff23f-aab7-4a6e-b07c-8fa8076a5c99/export"/>
    <published>2026-10-08T01:30:28.573253+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fcaaa606-5456-453f-9389-3c0c8ec92c18/export</id>
    <title>fcaaa606-5456-453f-9389-3c0c8ec92c18</title>
    <updated>2026-10-08T07:20:19.504611+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fcaaa606-5456-453f-9389-3c0c8ec92c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117402699371323176", "content": "CVE-2026-76485: CRITICAL (CVSS 9.8) vulnerability in Cisco NX-OS NGOAM allows remote code execution or DoS via crafted packets. Disable NGOAM if unused. Awaiting official patch. Details: https://radar.offseq.com/threat/a-vulnerability-in-the-vxlan-operation-administration-and-maintenance-oam-feature-of-cisco-nx-os-41bf2bad6a99d754 #OffSeq #Cisco #CVE202676485 #Infosec", "creation_timestamp": "2026-10-08T01:30:25.773914Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fcaaa606-5456-453f-9389-3c0c8ec92c18/export"/>
    <published>2026-10-08T01:30:25.773914+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bfdd5660-341f-4bbc-81c3-31785ab5b888/export</id>
    <title>bfdd5660-341f-4bbc-81c3-31785ab5b888</title>
    <updated>2026-10-08T07:20:19.504679+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bfdd5660-341f-4bbc-81c3-31785ab5b888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxck45sedp27", "content": "\ud83d\udea8 CVE-2026-76485 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Softwa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76485\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T18:09:31.320200Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bfdd5660-341f-4bbc-81c3-31785ab5b888/export"/>
    <published>2026-10-07T18:09:31.320200+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f89df6c6-166e-4b58-b26c-720ebb9d2f9a/export</id>
    <title>f89df6c6-166e-4b58-b26c-720ebb9d2f9a</title>
    <updated>2026-10-08T07:20:19.504744+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f89df6c6-166e-4b58-b26c-720ebb9d2f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxchif6yun2g", "content": "\ud83d\udd34 CVE-2026-76485 - Critical (9.8)\n\nA vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76485/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-07T17:22:41.201912Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f89df6c6-166e-4b58-b26c-720ebb9d2f9a/export"/>
    <published>2026-10-07T17:22:41.201912+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/23c91007-274b-49d0-8f13-2a9c28c1d01d/export</id>
    <title>23c91007-274b-49d0-8f13-2a9c28c1d01d</title>
    <updated>2026-10-08T07:20:19.504808+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "23c91007-274b-49d0-8f13-2a9c28c1d01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxchalbddw2p", "content": "Four critical Cisco Nexus vulnerabilities, including CVE-2026-76485 and CVE-2026-76465 (CVSS 9.8), allow root RCE on NX-OS switches. Patch now.\n\n#Cisco #Nexus #NXOS #CVE202676485 #CVE202676465 #RCE #NetworkSecurity #Vulnerability", "creation_timestamp": "2026-10-07T17:18:19.379286Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/23c91007-274b-49d0-8f13-2a9c28c1d01d/export"/>
    <published>2026-10-07T17:18:19.379286+00:00</published>
  </entry>
</feed>
