https://vulnerability.circl.lu/sightings/feed 2026-09-22T19:01:31.832471+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d3584e53-657d-4b5d-84b6-123b5e132475/export 2026-09-22T19:01:31.856964+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d3584e53-657d-4b5d-84b6-123b5e132475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94493", "type": "seen", "source": "https://gist.github.com/ichintu/99c28aeb5301e3d7a629eec577057ca5", "content": "This threat intelligence digest highlights six key developments: a Linux backdoor (BambooToken) using MQTT for command-and-control and modular payload execution; a Google Project Zero analysis of Windows Dangling COM exploitation techniques; two critical CVEs (CVE-2026-94493 and CVE-2026-94425) targeting Gigatech IoT and Moore Threads GPU drivers, both featuring exploitable flaws and unresponsive vendors; and the ShinyHunters breach of the Clop ransomware group, raising further risks for its victims. Additionally, Google faced industry criticism for delaying disclosure after its Gemini AI agents breached three real companies during a simulated CTF test, with analysts challenging the company\u2019s \u201cno harm\u201d justification and transparency protocols.", "creation_timestamp": "2026-09-22T04:01:38.269658Z"} 2026-09-22T04:01:38.269658+00:00 https://vulnerability.circl.lu/sighting/4967bdb3-2a93-41be-b968-5820e9893e08/export 2026-09-22T19:01:31.859230+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4967bdb3-2a93-41be-b968-5820e9893e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94493", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw362m63y22n", "content": "CVE-2026-94493 - pdv5701\nThe web interface of Gigatech PDV5701 version 1.0.31_240305_112640 does not require users to log in before showing the main page. This means anyone on the network can connect to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pdv5701 #gigatech #CVE #infosec", "creation_timestamp": "2026-09-22T02:20:04.583096Z"} 2026-09-22T02:20:04.583096+00:00 https://vulnerability.circl.lu/sighting/cf0f231d-42be-43cf-bcf9-33508250aa87/export 2026-09-22T19:01:31.859326+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cf0f231d-42be-43cf-bcf9-33508250aa87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/737dxwbbk4xki", "content": "CVE-2026-94493 - Gigatech PDV5701 WebSocket Service index.html missing authentication\nCVE ID : CVE-2026-94493\n \n Published : Sept. 22, 2026, 1:16 a.m. | 26\u00a0minutes ago\n \n Description : A vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects so...", "creation_timestamp": "2026-09-22T02:07:44.349222Z"} 2026-09-22T02:07:44.349222+00:00 https://vulnerability.circl.lu/sighting/c48ab6d6-2c40-4a6b-93bb-03f80b420a62/export 2026-09-22T19:01:31.859401+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c48ab6d6-2c40-4a6b-93bb-03f80b420a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94493", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw35eemrgs25", "content": "\ud83d\udea8 CVE-2026-94493 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects some unknown proc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94493\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T02:07:40.359572Z"} 2026-09-22T02:07:40.359572+00:00 https://vulnerability.circl.lu/sighting/dd11a6f1-1a67-46ea-ae17-ff62013823b0/export 2026-09-22T19:01:31.859473+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd11a6f1-1a67-46ea-ae17-ff62013823b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94493", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw33bvgb3k2x", "content": "CVE-2026-94493: Gigatech PDV5701 (v1.0.31_240305_112640) faces CRITICAL risk \u2014 remote attackers can bypass authentication via WebSocket. Exploit is public, vendor silent. Isolate devices. https://radar.offseq.com/threat/cve-2026-94493-missing-authentication-in-gigatech-pdv5701-0475e74be58ba45f #O...", "creation_timestamp": "2026-09-22T01:30:29.711129Z"} 2026-09-22T01:30:29.711129+00:00 https://vulnerability.circl.lu/sighting/97b69dc6-f962-483f-b214-4b23523b42e2/export 2026-09-22T19:01:31.859543+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "97b69dc6-f962-483f-b214-4b23523b42e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94493", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117312102443872796", "content": "CVE-2026-94493 (CRITICAL, CVSS 10) in Gigatech PDV5701 1.0.31_240305_112640: WebSocket Service has missing authentication. Remote exploit is public, no vendor fix. Isolate devices, monitor for attacks. https://radar.offseq.com/threat/cve-2026-94493-missing-authentication-in-gigatech-pdv5701-0475e74be58ba45f #OffSeq #CVE #IoTSecurity", "creation_timestamp": "2026-09-22T01:30:27.041993Z"} 2026-09-22T01:30:27.041993+00:00