https://vulnerability.circl.lu/sightings/feed 2026-09-18T01:04:57.127383+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9dc7d04d-c990-4262-80c2-486bede071cd/export 2026-09-18T01:04:57.147631+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9dc7d04d-c990-4262-80c2-486bede071cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/thehackernews/10092", "content": "\u203c\ufe0f NEW - Critical Check Point management flaw lets unauthenticated attackers run code as root.\n\nThe 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.\n\nAffected versions and fix details: https://thehackernews.com/2026/09/critical-check-point-management-server.html", "creation_timestamp": "2026-09-18T00:00:05.691973Z"} 2026-09-18T00:00:05.691973+00:00 https://vulnerability.circl.lu/sighting/fc1e90bb-9a94-41e1-a0f8-4a5616c1189e/export 2026-09-18T01:04:57.150029+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fc1e90bb-9a94-41e1-a0f8-4a5616c1189e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/thehackernews/10092", "content": "\u203c\ufe0f NEW - Critical Check Point management flaw lets unauthenticated attackers run code as root.\n\nThe 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.\n\nAffected versions and fix details: https://thehackernews.com/2026/09/critical-check-point-management-server.html", "creation_timestamp": "2026-09-17T22:00:04.859008Z"} 2026-09-17T22:00:04.859008+00:00 https://vulnerability.circl.lu/sighting/289704e8-bc24-4af8-ae8f-70456a29619c/export 2026-09-18T01:04:57.150173+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "289704e8-bc24-4af8-ae8f-70456a29619c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/check-point-security-advisory-av26-933", "content": "", "creation_timestamp": "2026-09-17T20:15:23.633847Z"} 2026-09-17T20:15:23.633847+00:00 https://vulnerability.circl.lu/sighting/9b5edc7c-6737-461b-8885-496d234be643/export 2026-09-18T01:04:57.151414+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9b5edc7c-6737-461b-8885-496d234be643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://gist.github.com/ichintu/4d54d491df96f43f63328c7ac7c50625", "content": "**Executive Summary (Sept 16\u201317, 2026)**\n\nThis threat intelligence digest highlights critical vulnerabilities and urgent patch requirements across major software and infrastructure vendors. Key fixes include:\n* **OpenDDS** (CVE-2026-52836): Remote DoS via malformed RTPS submessage (Fixed: v3.34.0)\n* **Check Point** (CVE-2026-91843): Login stack overflow affecting Management/Log Servers\n* **Dell Server Update Utility** (CVE-2026-56795): Local code execution via uncontrolled search path (Fixed: v26.07.01)\n* **BIND 9**: 14 patched flaws, including an unauthenticated DoS via DNS-over-HTTPS\n* **Cisco ISE & Related Products**: Multiple authentication bypass vulnerabilities patched. **CVE-2026-76460 is actively exploited in the wild** and has been added to the CISA KEV catalog. Patches also cover FTD, FMC, ASA, and Nexus Dashboard.\n\nThe digest also notes community discussions regarding a removed Reddit post, a potential API key image, and a new Claude AI skill for cybersecurity automation. Organizations are strongly advised to immediately apply vendor updates, prioritize actively exploited flaws, and enhance logging and network segmentation.", "creation_timestamp": "2026-09-17T20:01:46.519332Z"} 2026-09-17T20:01:46.519332+00:00 https://vulnerability.circl.lu/sighting/33814386-8aec-43c8-99c1-f39faf117c6a/export 2026-09-18T01:04:57.151545+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "33814386-8aec-43c8-99c1-f39faf117c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvpprfewhs2w", "content": "\ud83d\udd17 CVE : CVE-2026-91843", "creation_timestamp": "2026-09-17T13:05:06.382695Z"} 2026-09-17T13:05:06.382695+00:00 https://vulnerability.circl.lu/sighting/f523a7bc-9673-4ab1-bfdc-34ae842445c3/export 2026-09-18T01:04:57.151654+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f523a7bc-9673-4ab1-bfdc-34ae842445c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvp22ftku72p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 48 interactions\nCVE-2026-76461: 16 interactions\nCVE-2026-82078: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-76460: 10 interactions\nCVE-2026-91843: 9 interactions\nCVE-2026-76461: 8 interactions\n", "creation_timestamp": "2026-09-17T06:36:26.399913Z"} 2026-09-17T06:36:26.399913+00:00 https://vulnerability.circl.lu/sighting/045e5c07-ede5-4f81-b71f-b03093d6da72/export 2026-09-18T01:04:57.151748+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "045e5c07-ede5-4f81-b71f-b03093d6da72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/daniel1820815/statuses/117282347479668935", "content": "\ud83d\udea8 Please read this important update from Check Point:\nCVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers\nhttps://support.checkpoint.com/results/sk/sk1000155\n#CheckPoint #CheckPointsoftwareTechnologies #CVE #CVE202691843", "creation_timestamp": "2026-09-17T00:58:23.187222Z"} 2026-09-17T00:58:23.187222+00:00 https://vulnerability.circl.lu/sighting/07042145-6e7a-4a48-8e14-69d9c8a71bc7/export 2026-09-18T01:04:57.151847+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "07042145-6e7a-4a48-8e14-69d9c8a71bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvofayuhzt2i", "content": "Check Point Login Flaw CVE-2026-91843: Critical Root RCE via Unauthenticated Login\uff08Check Point\u306e\u30ed\u30b0\u30a4\u30f3\u51e6\u7406\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u4e0d\u8981\u3067root\u6a29\u9650\u306eRCE\uff09 #SecurityOnline (Sep 16)\n\nsecurityonline.info/check-point-...", "creation_timestamp": "2026-09-17T00:24:18.945556Z"} 2026-09-17T00:24:18.945556+00:00 https://vulnerability.circl.lu/sighting/a9f9809c-73a9-42c3-8fcf-854fd820007e/export 2026-09-18T01:04:57.151948+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a9f9809c-73a9-42c3-8fcf-854fd820007e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/censys/statuses/117283080996096403", "content": "\ud83d\udea8New Censys Advisory: CVE-2026-91843\nA critical (CVSS 9.8) unauthenticated RCE affects Check Point Quantum Security Management and Log Servers.\nCensys observes 3,836 hosts globally exposing the management/log server role. This is total product presence, not a confirmed-vulnerable count.\nNo public PoC or confirmed exploitation has been reported as of publication. Check Point has released patches for supported versions via LivePatch.\nRead the analysis and remediation details: https://censys.com/advisory/cve-2026-91843/\n#Cybersecurity #CVE #Vulnerability #CensysARC", "creation_timestamp": "2026-09-16T22:38:50.668669Z"} 2026-09-16T22:38:50.668669+00:00 https://vulnerability.circl.lu/sighting/72503c8f-6e10-40eb-8b14-eff3eb68f698/export 2026-09-18T01:04:57.152048+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "72503c8f-6e10-40eb-8b14-eff3eb68f698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mvo6ikd56b2w", "content": "\ud83d\udea8CVE-2026-91843 is a critical (CVSS 9.8) pre-auth RCE affecting Check Point Quantum Security Management and Log Servers.\n\nCensys sees 3,836 hosts globally with the management/log server role.\n\nNo public PoC or confirmed exploitation as of publication. Patches are available. https://bit.ly/4cRApEJ", "creation_timestamp": "2026-09-16T22:23:16.713963Z"} 2026-09-16T22:23:16.713963+00:00