<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-21T05:02:12.200781+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e3588f11-030d-4ab4-8360-467b869be00f/export</id>
    <title>e3588f11-030d-4ab4-8360-467b869be00f</title>
    <updated>2026-07-21T05:02:12.228905+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e3588f11-030d-4ab4-8360-467b869be00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32746", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/20139", "content": "Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23 \u2013 thehackernews.com\n\nWed, 18 Mar 2026 13:06:00", "creation_timestamp": "2026-07-20T00:00:20.955795Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e3588f11-030d-4ab4-8360-467b869be00f/export"/>
    <published>2026-07-20T00:00:20.955795+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4a0028e7-4a54-48b1-8887-163a29931b2f/export</id>
    <title>4a0028e7-4a54-48b1-8887-163a29931b2f</title>
    <updated>2026-07-21T05:02:12.231445+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4a0028e7-4a54-48b1-8887-163a29931b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32746", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20139", "content": "Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23 \u2013 thehackernews.com\n\nWed, 18 Mar 2026 13:06:00", "creation_timestamp": "2026-07-19T16:00:06.317261Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4a0028e7-4a54-48b1-8887-163a29931b2f/export"/>
    <published>2026-07-19T16:00:06.317261+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7eaba38d-0ca3-44df-9e5e-913e0e113bdb/export</id>
    <title>7eaba38d-0ca3-44df-9e5e-913e0e113bdb</title>
    <updated>2026-07-21T05:02:12.231599+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7eaba38d-0ca3-44df-9e5e-913e0e113bdb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32746", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/32843fe2-e636-4909-ad14-5284b3060c67", "content": "", "creation_timestamp": "2026-06-19T12:45:37.703385Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7eaba38d-0ca3-44df-9e5e-913e0e113bdb/export"/>
    <published>2026-06-19T12:45:37.703385+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7004a507-b2d8-4ac5-b161-9895a860040e/export</id>
    <title>7004a507-b2d8-4ac5-b161-9895a860040e</title>
    <updated>2026-07-21T05:02:12.231703+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7004a507-b2d8-4ac5-b161-9895a860040e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32743", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzyh7fcll2r", "content": "Analyzing CVE-2026-32743: PX4 MAVLink Buffer Overflow DoS", "creation_timestamp": "2026-06-11T19:45:32.671749Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7004a507-b2d8-4ac5-b161-9895a860040e/export"/>
    <published>2026-06-11T19:45:32.671749+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/81179315-dbff-4e5f-a53f-a3fb2c74239e/export</id>
    <title>81179315-dbff-4e5f-a53f-a3fb2c74239e</title>
    <updated>2026-07-21T05:02:12.231802+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "81179315-dbff-4e5f-a53f-a3fb2c74239e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-32743", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3mnzuth3bkmi2", "content": "Analyzing CVE-2026-32743: PX4 MAVLink Buffer Overflow DoS Recent global conflicts have dramatically reshaped our understanding of security. The widespread deployment of commercially available \u201cci...\n\n#cve-2026-32743-poc\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-11T18:40:48.653011Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/81179315-dbff-4e5f-a53f-a3fb2c74239e/export"/>
    <published>2026-06-11T18:40:48.653011+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ecab605e-7166-417a-9a11-47a5130f679c/export</id>
    <title>ecab605e-7166-417a-9a11-47a5130f679c</title>
    <updated>2026-07-21T05:02:12.231902+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ecab605e-7166-417a-9a11-47a5130f679c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32746", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/116658633906090628", "content": "GreyNoise At The Edge (May 19\u201326, 2026): a week of rented-infrastructure reconnaissance against the internet's edge \u2014 routers, VPN gateways, container planes, and embedded devices, probed in parallel.\n1. A long-running MikroTik RouterOS brute-force operation (VPSVAULT, AS215925) reversed a multi-week decline, adding a second node and climbing back to ~1.9M sessions against TCP/8728.\n2. A fingerprinted Netherlands cluster cataloged Fortinet, Ivanti, Pulse Secure, Sophos, and F5 appliances, running auth-bypass checks including Palo Alto PAN-OS GlobalProtect (CVE-2020-2034).\n3. Telnet dominated volume; low-level probing continued for the tracked GNU telnetd out-of-bounds write watch item CVE-2026-32746 (CVSS 9.8).\n4. Kubernetes and Docker control-plane recon now runs from a compromised consumer broadband host.\nThe infrastructure rotates constantly \u2014 detect on behavior, not addresses.\nhttps://www.greynoise.io/resources/at-the-edge-clear-052526\n#ThreatIntel #CyberSecurity #InfoSec #GreyNoise", "creation_timestamp": "2026-05-29T15:44:54.657111Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ecab605e-7166-417a-9a11-47a5130f679c/export"/>
    <published>2026-05-29T15:44:54.657111+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b597cbf4-2662-4a2f-823e-07369fe5ebf0/export</id>
    <title>b597cbf4-2662-4a2f-823e-07369fe5ebf0</title>
    <updated>2026-07-21T05:02:12.232008+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b597cbf4-2662-4a2f-823e-07369fe5ebf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32740", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmc6n4ygfw2u", "content": "\ud83d\udccc CVE-2026-32740 - libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid... https://www.cyberhub.blog/cves/CVE-2026-32740", "creation_timestamp": "2026-05-20T15:07:07.967363Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b597cbf4-2662-4a2f-823e-07369fe5ebf0/export"/>
    <published>2026-05-20T15:07:07.967363+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/034a34ab-0349-4ce4-87cd-67b1dc308e31/export</id>
    <title>034a34ab-0349-4ce4-87cd-67b1dc308e31</title>
    <updated>2026-07-21T05:02:12.232106+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "034a34ab-0349-4ce4-87cd-67b1dc308e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32740", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmavcdks4325", "content": "libheif 1.21.2\u4ee5\u524d\u306f\u30b0\u30ea\u30c3\u30c9\u30bf\u30a4\u30eb\u5408\u6210\u306b\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u7d30\u5de5\u3057\u305fHEIF/AVIF\u30d5\u30a1\u30a4\u30eb\u306b\u3088\u308a\u3001\u30d2\u30fc\u30d7\u306e\u672b\u5c3e\u3092\u8d85\u3048\u306664\u30d0\u30a4\u30c8\u306e\u5236\u5fa1\u30c7\u30fc\u30bf\u3092\u66f8\u304d\u8fbc\u307f\u53ef\u80fd\u3002\nCVE-2026-32740 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-20T02:47:22.494609Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/034a34ab-0349-4ce4-87cd-67b1dc308e31/export"/>
    <published>2026-05-20T02:47:22.494609+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a114d0dc-0458-4862-9f2a-1f1990c121b0/export</id>
    <title>a114d0dc-0458-4862-9f2a-1f1990c121b0</title>
    <updated>2026-07-21T05:02:12.232208+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a114d0dc-0458-4862-9f2a-1f1990c121b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmair6xo7c2t", "content": "CVE-2026-32740 - libheif: Heap-Buffer-Overflow Write in Grid Tile Chroma Compositing\nCVE ID : CVE-2026-32740\n \n Published : May 19, 2026, 8:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior c...", "creation_timestamp": "2026-05-19T23:03:02.221599Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a114d0dc-0458-4862-9f2a-1f1990c121b0/export"/>
    <published>2026-05-19T23:03:02.221599+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ecf6bb0b-b367-4c59-9b2c-8bdb809b0593/export</id>
    <title>ecf6bb0b-b367-4c59-9b2c-8bdb809b0593</title>
    <updated>2026-07-21T05:02:12.232306+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ecf6bb0b-b367-4c59-9b2c-8bdb809b0593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmah5txjp22k", "content": "CVE-2026-32741 - libheif has a heap buffer overflow in decode_mask_image()\nCVE ID : CVE-2026-32741\n \n Published : May 19, 2026, 9:16 p.m. | 58\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buff...", "creation_timestamp": "2026-05-19T22:34:21.230032Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ecf6bb0b-b367-4c59-9b2c-8bdb809b0593/export"/>
    <published>2026-05-19T22:34:21.230032+00:00</published>
  </entry>
</feed>
