https://vulnerability.circl.lu/sightings/feed 2026-10-09T07:56:19.518189+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3c05ab98-f624-4283-a820-e7a8b8581e86/export 2026-10-09T07:56:19.548742+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3c05ab98-f624-4283-a820-e7a8b8581e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvwmipih4f2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 33 interactions\nCVE-2026-58704: 21 interactions\nCVE-2026-76460: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-62593: 4 interactions\nCVE-2026-19478: 4 interactions\nCVE-2026-13348: 3 interactions\n", "creation_timestamp": "2026-09-20T06:55:12.034841Z"} 2026-09-20T06:55:12.034841+00:00 https://vulnerability.circl.lu/sighting/68a5dc58-7c88-442b-9581-ac5a53dfd7fc/export 2026-10-09T07:56:19.552125+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "68a5dc58-7c88-442b-9581-ac5a53dfd7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjuvpsgk2x", "content": "CISA Adds One Known Exploited Vulnerability to Catalog \nRelease Date August 17, 2026\n\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability", "creation_timestamp": "2026-09-19T01:30:21.774928Z"} 2026-09-19T01:30:21.774928+00:00 https://vulnerability.circl.lu/sighting/0d3d43f7-e5e5-4b8d-a0d4-ff88888d0a46/export 2026-10-09T07:56:19.552274+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0d3d43f7-e5e5-4b8d-a0d4-ff88888d0a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjpvovc22x", "content": "\u7c73\u5f53\u5c40\u3001AI\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cRay\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3092\u8b66\u544a\n\n\u7c73\u5f53\u5c40\u306f\u3001AI\u3084Python\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u30b9\u30b1\u30fc\u30eb\u3055\u305b\u308b\u305f\u3081\u306e\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cRay\u300d\u306b\u304a\u3051\u308b\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u30d6\u30e9\u30a6\u30b6\u4e0a\u3067\u60aa\u610f\u3042\u308b\u5e83\u544a\u3092\u8868\u793a\u3057\u305f\u3060\u3051\u3067\u3082\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u6ce8\u610f\u304c\u5fc5\u8981\u3068\u306a\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u304c\u73fe\u5730\u6642\u95932026\u5e748\u670817\u65e5\u3001\u300cCVE-2025-62593\u300d\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2025-62593\u300d\u306f\u3001\u30d6\u30e9\u30a6\u30b6\u300cFirefox\u300d\u300cSafari\u300d\u3092\u4ecb\u3057\u3066\u3001\u30ea...", "creation_timestamp": "2026-09-19T01:27:33.811089Z"} 2026-09-19T01:27:33.811089+00:00 https://vulnerability.circl.lu/sighting/0a9703ce-19de-4188-a2af-58ea78e897fa/export 2026-10-09T07:56:19.552360+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0a9703ce-19de-4188-a2af-58ea78e897fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjdkwylk2x", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Ray-Project Ray\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f \u3001Progress LoadMaster\u306e\u8106\u5f31\u6027\uff08CVE-2025-62593\u3001CVSS\u30b9\u30b3\u30a29.4\uff09\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2025-62593\u306f\u3001AI\u8a08\u7b97\u30a8\u30f3\u30b8\u30f3\u3067\u3042\u308bRay\u306b\u304a\u3051\u308b\u91cd\u5927\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306e\u8106\u5f31\u6027\u3067\u3059\u3002\u30d0\u30fc\u30b8\u30e7\u30f32.52.0\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u306f\u3001Ray\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9/API\u304c...", "creation_timestamp": "2026-09-19T01:20:40.034850Z"} 2026-09-19T01:20:40.034850+00:00 https://vulnerability.circl.lu/sighting/7eba8fc2-6386-4632-9c08-d69aa8f9acf3/export 2026-10-09T07:56:19.552428+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7eba8fc2-6386-4632-9c08-d69aa8f9acf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44018", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\u00a0 \n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:26.742788Z"} 2026-09-19T00:00:26.742788+00:00 https://vulnerability.circl.lu/sighting/d798a369-2077-47ef-a694-e2aca2b19467/export 2026-10-09T07:56:19.552500+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d798a369-2077-47ef-a694-e2aca2b19467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://t.me/VulnerabilityNews/44018", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\u00a0 \n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-18T12:00:07.718314Z"} 2026-09-18T12:00:07.718314+00:00 https://vulnerability.circl.lu/sighting/62373539-d614-43cf-890b-1f3285498afa/export 2026-10-09T07:56:19.552574+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "62373539-d614-43cf-890b-1f3285498afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "Telegram/xr1f3jCC6Nt8yrCzxGt3NSfyGX5h3TP5edCBNO561qMvXLI", "content": "", "creation_timestamp": "2026-09-02T05:00:05.028481Z"} 2026-09-02T05:00:05.028481+00:00 https://vulnerability.circl.lu/sighting/a8eefe82-3939-48ee-b4cd-491bb5172dab/export 2026-10-09T07:56:19.552640+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a8eefe82-3939-48ee-b4cd-491bb5172dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://t.me/GithubRedTeam/100693", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33017\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 18:34:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-62593 \u2014 Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T23:00:08.395783Z"} 2026-09-01T23:00:08.395783+00:00 https://vulnerability.circl.lu/sighting/e7c2ffee-520c-4fe4-8b72-91f443bed6b1/export 2026-10-09T07:56:19.552712+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e7c2ffee-520c-4fe4-8b72-91f443bed6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/dafu09.bsky.social/post/3mtttgs7yfz2j", "content": "CISA \u7ed9\u8054\u90a6\u673a\u6784 3 \u5929\u65f6\u95f4\u4fee\u4e00\u4e2a Ray \u6f0f\u6d1e\uff08CVE-2025-62593\uff0c9.4\u5206\uff09\u3002\n\nRay\u2014\u2014Amazon\u3001Apple\u3001OpenAI \u90fd\u5728\u7528\u7684 ML \u5206\u5e03\u5f0f\u6846\u67b6\u3002\n\u653b\u51fb\u8005\u7528\u6d4f\u89c8\u5668\u5c31\u80fd RCE\uff0c\u50f5\u5c38\u7f51\u7edc\u5728\u6f0f\u6d1e\u516c\u5f00\u524d 2 \u5929\u5c31\u5df2\u5f00\u6253\u3002\n\n\u5f00\u53d1\u8005\u7acb\u523b\u81ea\u67e5\uff1a\n\u2705 Ray \u5347\u5230 2.52.0+\n\u2705 Dashboard \u522b\u66b4\u9732\u516c\u7f51\n\u2705 \u8bad\u7ec3/\u63a8\u7406\u73af\u5883\u6700\u5c0f\u6743\u9650\n\nAI \u57fa\u7840\u8bbe\u65bd\uff0c\u6b63\u5728\u6210\u4e3a\u653b\u51fb\u9762\u7684\u65b0\u5927\u5934\u3002\n\n#AgentSecurity #Ray #DevSecOps", "creation_timestamp": "2026-08-24T17:31:01.181570Z"} 2026-08-24T17:31:01.181570+00:00 https://vulnerability.circl.lu/sighting/855b7638-e368-4968-bdab-268ea7504aa7/export 2026-10-09T07:56:19.552788+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "855b7638-e368-4968-bdab-268ea7504aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "exploited", "source": "https://t.me/thehackernews/9824", "content": "\u26a0\ufe0f An actively exploited Ray flaw can lead to browser-based RCE.\n\nCISA has added CVE-2025-62593 to its KEV catalog. The documented attack path uses DNS rebinding and requires a developer running Ray to visit a malicious site or be served a malicious ad in Firefox or Safari.\n\nSee how the attack works: https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html", "creation_timestamp": "2026-08-24T00:00:05.030179Z"} 2026-08-24T00:00:05.030179+00:00