<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-13T07:18:37.655399+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a4b50951-e77b-4f88-89d1-746c4047daee/export</id>
    <title>a4b50951-e77b-4f88-89d1-746c4047daee</title>
    <updated>2026-09-13T07:18:37.681324+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a4b50951-e77b-4f88-89d1-746c4047daee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvecgo2p4n2b", "content": "\ud83d\udea8 CVE-2026-90647 \u2014 CVSS 9.1 CRITICAL\n\nASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certifica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-13T00:07:14.246222Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a4b50951-e77b-4f88-89d1-746c4047daee/export"/>
    <published>2026-09-13T00:07:14.246222+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cc9bbea0-8448-4157-96ef-83c55c4cec1b/export</id>
    <title>cc9bbea0-8448-4157-96ef-83c55c4cec1b</title>
    <updated>2026-09-13T07:18:37.683232+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cc9bbea0-8448-4157-96ef-83c55c4cec1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b57a5lyr5756k", "content": "CVE-2026-90647 - Kalkitech ASE2000 Improper Certificate Validation Vulnerability\nCVE ID : CVE-2026-90647\n \n Published : Sept. 12, 2026, 11:17 p.m. | 21\u00a0minutes ago\n \n Description : ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an imprope...", "creation_timestamp": "2026-09-13T00:07:09.465808Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cc9bbea0-8448-4157-96ef-83c55c4cec1b/export"/>
    <published>2026-09-13T00:07:09.465808+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65687406-7adf-4131-8dfc-e6ddf9db3f1a/export</id>
    <title>65687406-7adf-4131-8dfc-e6ddf9db3f1a</title>
    <updated>2026-09-13T07:18:37.683366+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65687406-7adf-4131-8dfc-e6ddf9db3f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://gist.github.com/ichintu/22032aad19461863ee27dbdb173d32b1", "content": "Published September 12, 2026, **CVE-2026-90647** is a critical (9.1) vulnerability in the Kalkitech ASE2000 V2 Communication Test Set (Windows v2.35\u20132.37) that allows network attackers to bypass TLS certificate validation, enabling Man-in-the-Middle attacks.", "creation_timestamp": "2026-09-13T00:02:48.767486Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65687406-7adf-4131-8dfc-e6ddf9db3f1a/export"/>
    <published>2026-09-13T00:02:48.767486+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8144dd50-fed3-4fee-ac5a-9ce8200303f2/export</id>
    <title>8144dd50-fed3-4fee-ac5a-9ce8200303f2</title>
    <updated>2026-09-13T07:18:37.683476+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8144dd50-fed3-4fee-ac5a-9ce8200303f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvec2ydp322e", "content": "Kalkitech ASE2000 V2 (2.35-2.37) faces a CRITICAL TLS flaw (CVE-2026-90647, CVSS 9.1): improper cert validation enables MitM. Restrict access &amp;amp; watch for suspicious activity. Patch status pending. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-...", "creation_timestamp": "2026-09-13T00:00:42.553508Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8144dd50-fed3-4fee-ac5a-9ce8200303f2/export"/>
    <published>2026-09-13T00:00:42.553508+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e6092d3c-97db-4495-afd6-d3f124b9da20/export</id>
    <title>e6092d3c-97db-4495-afd6-d3f124b9da20</title>
    <updated>2026-09-13T07:18:37.683585+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e6092d3c-97db-4495-afd6-d3f124b9da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117260788422772028", "content": "CVE-2026-90647 (CRITICAL, CVSS 9.1) affects Kalkitech ASE2000 V2 (2.35 \u2013 2.37): improper TLS certificate validation in IEC 60870-5-104 enables MitM attacks. No patch confirmed. Restrict access &amp;amp; monitor. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-ase2000-v2-communication-test-set-2a292ef0f6b1257f #OffSeq #ICS #CVE202690647 #TLS", "creation_timestamp": "2026-09-13T00:00:36.567431Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e6092d3c-97db-4495-afd6-d3f124b9da20/export"/>
    <published>2026-09-13T00:00:36.567431+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86211344-0b55-4136-8508-1d970bb25115/export</id>
    <title>86211344-0b55-4136-8508-1d970bb25115</title>
    <updated>2026-09-13T07:18:37.683687+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86211344-0b55-4136-8508-1d970bb25115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mveaefpgmm2w", "content": "CVE-2026-90647 - ase2000 v2 communication test set\nThe ASE2000 V2 Communication Test Set for Windows does not correctly check security certificates when using its secure TLS connection. This weakness lets someone\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kalkitech #CVE #infosec", "creation_timestamp": "2026-09-12T23:30:08.026562Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86211344-0b55-4136-8508-1d970bb25115/export"/>
    <published>2026-09-12T23:30:08.026562+00:00</published>
  </entry>
</feed>
