https://vulnerability.circl.lu/sightings/feed 2026-09-25T18:15:28.474891+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d2236600-fda8-4295-90d7-81409610ad4b/export 2026-09-25T18:15:28.498356+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d2236600-fda8-4295-90d7-81409610ad4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "content": "", "creation_timestamp": "2026-09-25T09:24:45.000000Z"} 2026-09-25T09:24:45+00:00 https://vulnerability.circl.lu/sighting/43f4c7b3-be27-4b1e-96f6-4275be554974/export 2026-09-25T18:15:28.500417+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "43f4c7b3-be27-4b1e-96f6-4275be554974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "published-proof-of-concept", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "content": "", "creation_timestamp": "2026-09-25T09:24:45.000000Z"} 2026-09-25T09:24:45+00:00 https://vulnerability.circl.lu/sighting/045dafe2-ff37-461e-9b16-e3e1c9e4ff51/export 2026-09-25T18:15:28.500607+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "045dafe2-ff37-461e-9b16-e3e1c9e4ff51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "published-proof-of-concept", "source": "Telegram/1ys77DIZO-GDJM12Y2kKkFL_LlZmH_iXH3Qq1ObYEEV1_pg", "content": "", "creation_timestamp": "2026-09-24T03:13:24.000000Z"} 2026-09-24T03:13:24+00:00 https://vulnerability.circl.lu/sighting/c4f0b25e-4c34-4272-9ec5-2463c198322b/export 2026-09-25T18:15:28.500755+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c4f0b25e-4c34-4272-9ec5-2463c198322b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "exploited", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "content": "", "creation_timestamp": "2026-09-23T16:04:47.000000Z"} 2026-09-23T16:04:47+00:00 https://vulnerability.circl.lu/sighting/13f85fd4-f108-4717-bc06-b4300cc8e09c/export 2026-09-25T18:15:28.500899+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "13f85fd4-f108-4717-bc06-b4300cc8e09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "content": "", "creation_timestamp": "2026-09-23T16:04:47.000000Z"} 2026-09-23T16:04:47+00:00 https://vulnerability.circl.lu/sighting/63628c95-ac63-4a1c-997c-1605f4577d89/export 2026-09-25T18:15:28.501036+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "63628c95-ac63-4a1c-997c-1605f4577d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mw6r3r34zu2p", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: UTA0565 Chains CVE-2026-85046, CVE-2026-87491, CVE-2026-85880 to Drop CLEANGULP\n\n#APT #ThreatIntel #CyberSecurity", "creation_timestamp": "2026-09-23T12:38:43.922609Z"} 2026-09-23T12:38:43.922609+00:00 https://vulnerability.circl.lu/sighting/1afada75-6f5c-4baf-9d2e-c8fefad77d0c/export 2026-09-25T18:15:28.501180+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1afada75-6f5c-4baf-9d2e-c8fefad77d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6miyj5mf2f", "content": "\ud83e\udd16 Chinese threat actor UTA0565 chained Chrome (CVE-2026-85046, CVE-2026-87491) and Windows ALPC (CVE-2026-85880) zero-days via fake sites to deploy CLEANGULP malware.\nhttps://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "creation_timestamp": "2026-09-23T11:16:39.023661Z"} 2026-09-23T11:16:39.023661+00:00 https://vulnerability.circl.lu/sighting/978989fb-fa7c-4736-9f4a-a71e2bac9def/export 2026-09-25T18:15:28.501336+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "978989fb-fa7c-4736-9f4a-a71e2bac9def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "content": "A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites.\n\nThe attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break", "creation_timestamp": "2026-09-23T10:00:52.177033Z"} 2026-09-23T10:00:52.177033+00:00 https://vulnerability.circl.lu/sighting/d5314ecb-7116-40ea-95e8-31b65c7b03af/export 2026-09-25T18:15:28.501488+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d5314ecb-7116-40ea-95e8-31b65c7b03af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mw3mtrjgoo2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 27 interactions\nCVE-2026-76460: 22 interactions\nCVE-2026-58704: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85046: 8 interactions\nCVE-2026-85880: 8 interactions\nCVE-2026-87491: 8 interactions\n", "creation_timestamp": "2026-09-22T06:44:41.517020Z"} 2026-09-22T06:44:41.517020+00:00 https://vulnerability.circl.lu/sighting/7033332e-3f42-4402-9f04-310d2d235aed/export 2026-09-25T18:15:28.501630+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7033332e-3f42-4402-9f04-310d2d235aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/volexity.com/post/3mw2mwrbgu22a", "content": "Following our Sept 9 blog on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) & Windows (CVE-2026-85880), Volexity found a third actor, UTA0565 using the same exploits Sept 3-4, while they were still unpatched.", "creation_timestamp": "2026-09-21T21:13:43.501576Z"} 2026-09-21T21:13:43.501576+00:00