https://vulnerability.circl.lu/sightings/feed 2026-07-16T07:56:57.516838+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0cf749f6-9f72-418d-96c7-8b1b6a9ae766/export 2026-07-16T07:56:57.536312+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0cf749f6-9f72-418d-96c7-8b1b6a9ae766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://t.me/GithubRedTeam/91654", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 20:50:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13768: Privileged iothubowner IoT Hub credential \u2014 fleet enumeration, device RCE, home-network pivot \u2014 Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.209164Z"} 2026-07-15T00:00:28.209164+00:00 https://vulnerability.circl.lu/sighting/7b39f724-fd17-45d1-b327-36b5e597acf6/export 2026-07-16T07:56:57.540021+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7b39f724-fd17-45d1-b327-36b5e597acf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://t.me/GithubRedTeam/91654", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 20:50:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13768: Privileged iothubowner IoT Hub credential \u2014 fleet enumeration, device RCE, home-network pivot \u2014 Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.837016Z"} 2026-07-14T00:00:21.837016+00:00 https://vulnerability.circl.lu/sighting/238a18f4-3102-405c-bba8-533ace033552/export 2026-07-16T07:56:57.540120+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "238a18f4-3102-405c-bba8-533ace033552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93032", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a J4ck3LSyN-Gen2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 23:34:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAzure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices. Proof-Of-Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.559249Z"} 2026-07-14T00:00:08.559249+00:00 https://vulnerability.circl.lu/sighting/3dc31691-ba5c-4521-96ba-faa20b16cde1/export 2026-07-16T07:56:57.540195+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3dc31691-ba5c-4521-96ba-faa20b16cde1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://t.me/GithubRedTeam/91654", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 20:50:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13768: Privileged iothubowner IoT Hub credential \u2014 fleet enumeration, device RCE, home-network pivot \u2014 Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.951412Z"} 2026-07-13T22:00:13.951412+00:00 https://vulnerability.circl.lu/sighting/96fe8cc5-51ff-4392-a8b4-395053b8e5d5/export 2026-07-16T07:56:57.540262+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "96fe8cc5-51ff-4392-a8b4-395053b8e5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://t.me/GithubRedTeam/93032", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a J4ck3LSyN-Gen2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 23:34:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAzure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices. Proof-Of-Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.323955Z"} 2026-07-13T22:00:04.323955+00:00 https://vulnerability.circl.lu/sighting/1251fe28-0b15-4f9e-8976-d4acfc1758ea/export 2026-07-16T07:56:57.540327+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1251fe28-0b15-4f9e-8976-d4acfc1758ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpwrvd35fs2f", "content": "\ud83d\udd34 CVE-2026-13768 - Critical (10)\n\nGardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious use...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13768/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-06T00:00:34.405872Z"} 2026-07-06T00:00:34.405872+00:00 https://vulnerability.circl.lu/sighting/a2ad3d9d-5bbb-43c8-846c-d581412b3113/export 2026-07-16T07:56:57.540391+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a2ad3d9d-5bbb-43c8-846c-d581412b3113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprkdmuib42x", "content": "CVE-2026-13768 - gardyn home firmware\nGardyn IoT devices have a security flaw that allows hackers to access sensitive information about all connected devices and potentially take control of them. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gardyn #CVE #infosec", "creation_timestamp": "2026-07-03T22:02:04.810906Z"} 2026-07-03T22:02:04.810906+00:00 https://vulnerability.circl.lu/sighting/f24e54c9-cc56-4864-af69-9b63a77b022f/export 2026-07-16T07:56:57.540458+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f24e54c9-cc56-4864-af69-9b63a77b022f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra3mo23q2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-13768 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Gardyn: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/D772835A-8DBA-4507-B09D-0902155162FC", "creation_timestamp": "2026-07-03T18:58:38.696376Z"} 2026-07-03T18:58:38.696376+00:00 https://vulnerability.circl.lu/sighting/e341eaee-6e90-45e1-bdca-f3779450443a/export 2026-07-16T07:56:57.540523+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e341eaee-6e90-45e1-bdca-f3779450443a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13763", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/116857445528031022", "content": "CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF #devopsish https://aws.amazon.com/security/security-bulletins/2026-048-aws/", "creation_timestamp": "2026-07-03T18:25:12.687052Z"} 2026-07-03T18:25:12.687052+00:00 https://vulnerability.circl.lu/sighting/587789d8-36d3-4849-9571-27ab7f376a31/export 2026-07-16T07:56:57.540589+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "587789d8-36d3-4849-9571-27ab7f376a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13762", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/116857445528031022", "content": "CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF #devopsish https://aws.amazon.com/security/security-bulletins/2026-048-aws/", "creation_timestamp": "2026-07-03T18:25:12.640454Z"} 2026-07-03T18:25:12.640454+00:00