https://vulnerability.circl.lu/sightings/feed 2026-10-04T02:50:25.890808+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/00be46f3-a115-44de-900c-e6a0e42c854a/export 2026-10-04T02:50:25.921183+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "00be46f3-a115-44de-900c-e6a0e42c854a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18397", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwxeuemg452q", "content": "\ud83e\udd16 CVE-2026-18397 (CVSS 9.4): drive-by RCE in Thales SConnect, the browser extension behind SWIFT 3SKey hardware MFA. A hand-rolled RSA check reads a stale buffer; heap spray bypasses it in ~6-10s.\nhttps://www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce", "creation_timestamp": "2026-10-03T07:36:24.254233Z"} 2026-10-03T07:36:24.254233+00:00 https://vulnerability.circl.lu/sighting/2604af66-d0c8-4892-9a80-8582ee0a4a5a/export 2026-10-04T02:50:25.923511+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2604af66-d0c8-4892-9a80-8582ee0a4a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18397", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mww2z4wf5d2p", "content": "CVE-2026-18397: AI Agents Lower the Bar for Exploiting SConnect", "creation_timestamp": "2026-10-02T19:07:26.761873Z"} 2026-10-02T19:07:26.761873+00:00