https://vulnerability.circl.lu/sightings/feed 2026-07-17T23:42:42.064074+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/07e98df3-6d8c-4b8e-97f8-6eec7086c666/export 2026-07-17T23:42:42.100117+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "07e98df3-6d8c-4b8e-97f8-6eec7086c666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-17T00:00:48.743285Z"} 2026-07-17T00:00:48.743285+00:00 https://vulnerability.circl.lu/sighting/d5b6785c-1b27-4a74-badb-98434b6a0c96/export 2026-07-17T23:42:42.102389+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d5b6785c-1b27-4a74-badb-98434b6a0c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "Telegram/eLMxAxOv6CPS5Cv23ai3j3OmcVBUkQSKzJA_dC_EZ3dC-w", "content": "", "creation_timestamp": "2026-07-17T00:00:10.754099Z"} 2026-07-17T00:00:10.754099+00:00 https://vulnerability.circl.lu/sighting/ac5cce1f-4186-4517-9421-359cb2633020/export 2026-07-17T23:42:42.102546+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ac5cce1f-4186-4517-9421-359cb2633020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/eLMxAxOv6CPS5Cv23ai3j3OmcVBUkQSKzJA_dC_EZ3dC-w", "content": "", "creation_timestamp": "2026-07-16T21:00:03.590199Z"} 2026-07-16T21:00:03.590199+00:00 https://vulnerability.circl.lu/sighting/b7e03c41-c6fb-4971-b904-9c2e6a0758e4/export 2026-07-17T23:42:42.102670+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b7e03c41-c6fb-4971-b904-9c2e6a0758e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-16T19:00:31.831229Z"} 2026-07-16T19:00:31.831229+00:00 https://vulnerability.circl.lu/sighting/1c5740e4-d791-4c3d-8e27-743501d21682/export 2026-07-17T23:42:42.102780+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1c5740e4-d791-4c3d-8e27-743501d21682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/thehackernews/9343", "content": "CISA just added a Cisco Unified CM flaw to its exploited bugs list.\n\nDefused Cyber says CVE-2026-20230 is being exploited from a single source using an unvetted PoC.\n\nThe bug can allow unauthenticated SSRF and file writes when WebDialer is enabled.\n\nThe technical trail is here: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "creation_timestamp": "2026-07-16T00:00:10.767329Z"} 2026-07-16T00:00:10.767329+00:00 https://vulnerability.circl.lu/sighting/17cc93dc-57e0-4743-a6d9-32615bf528d4/export 2026-07-17T23:42:42.102899+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "17cc93dc-57e0-4743-a6d9-32615bf528d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/thehackernews/9314", "content": "\ud83d\uded1 Cisco Unified CM admins should check WebDialer now.\n\nCVE-2026-20230 is being exploited, and vulnerable WebDialer-enabled systems can be abused by unauthenticated attackers to write files.\n\nCisco patched it in 14SU6 and 15SU5.\n\nRead: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "creation_timestamp": "2026-07-16T00:00:10.568915Z"} 2026-07-16T00:00:10.568915+00:00 https://vulnerability.circl.lu/sighting/960b7d94-9266-44ba-a368-7d79f1b6ce6d/export 2026-07-17T23:42:42.103015+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "960b7d94-9266-44ba-a368-7d79f1b6ce6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9156", "content": "\ud83d\udea8 No auth required ... a crafted web request to Cisco Unified CM can write files to the OS and open a path to root.\n\nCVE-2026-20230 patch is out, PoC exploit is public, and no attacks yet. Only bites if WebDialer is ON.\n\nFix: 14SU6 / COP / 15SU5, or kill WebDialer. \n\nRead: https://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.html", "creation_timestamp": "2026-07-16T00:00:09.138135Z"} 2026-07-16T00:00:09.138135+00:00 https://vulnerability.circl.lu/sighting/9e3fa9fe-9e4f-4c63-8891-89ddeec9d548/export 2026-07-17T23:42:42.103129+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9e3fa9fe-9e4f-4c63-8891-89ddeec9d548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/information_security_channel/55466", "content": "Hackers Exploiting Cisco Unified CM Vulnerability\nhttps://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/\n\nCisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June.\nThe post Hackers Exploiting Cisco Unified CM Vulnerability (https://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.130628Z"} 2026-07-16T00:00:08.130628+00:00 https://vulnerability.circl.lu/sighting/1ce49cd3-b3a7-40ec-9c62-b5733eca7fe9/export 2026-07-17T23:42:42.103239+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1ce49cd3-b3a7-40ec-9c62-b5733eca7fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/information_security_channel/55466", "content": "Hackers Exploiting Cisco Unified CM Vulnerability\nhttps://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/\n\nCisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June.\nThe post Hackers Exploiting Cisco Unified CM Vulnerability (https://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:06.565997Z"} 2026-07-15T12:00:06.565997+00:00 https://vulnerability.circl.lu/sighting/74c0fb18-eed5-462a-9fbd-10470c3b5d57/export 2026-07-17T23:42:42.103347+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "74c0fb18-eed5-462a-9fbd-10470c3b5d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/thehackernews/9156", "content": "\ud83d\udea8 No auth required ... a crafted web request to Cisco Unified CM can write files to the OS and open a path to root.\n\nCVE-2026-20230 patch is out, PoC exploit is public, and no attacks yet. Only bites if WebDialer is ON.\n\nFix: 14SU6 / COP / 15SU5, or kill WebDialer. \n\nRead: https://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.html", "creation_timestamp": "2026-07-15T12:00:05.458153Z"} 2026-07-15T12:00:05.458153+00:00