https://vulnerability.circl.lu/sightings/feed 2026-07-04T23:06:04.249214+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b36b11b1-d79c-4d33-aa1e-b79dc41064ba/export 2026-07-04T23:06:04.274925+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b36b11b1-d79c-4d33-aa1e-b79dc41064ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mptsltyzwf2h", "content": "JUST LEAKED! \ud83d\udea8 Get instant access to the latest premium Mod APK with unlimited resources and coins free \ud83d\udcf2\ud83d\udd13 and stay safe from the SimpleHelp CVE-2026-48558 exploit! #UkrainianDefense", "creation_timestamp": "2026-07-04T19:35:10.682297Z"} 2026-07-04T19:35:10.682297+00:00 https://vulnerability.circl.lu/sighting/b182529f-fd9d-4b30-bc11-b5582efa0a2c/export 2026-07-04T23:06:04.276968+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b182529f-fd9d-4b30-bc11-b5582efa0a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mptdromhif2j", "content": "If your IT runs through SimpleHelp remote management software, intruders can log in as a full admin. A CVSS 10.0 auth-bypass flaw (CVE-2026-48558) lets attackers forge a privileged Technician account and skip MFA. CISA set a July 2 patch deadline. Per Arctic Wolf and CISA.", "creation_timestamp": "2026-07-04T15:09:59.979287Z"} 2026-07-04T15:09:59.979287+00:00 https://vulnerability.circl.lu/sighting/ea39e69d-34e1-4525-9d9b-6422e73fb809/export 2026-07-04T23:06:04.277069+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ea39e69d-34e1-4525-9d9b-6422e73fb809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpsqigcwh72j", "content": "Two new malware families delivered through a single vulnerability.\n\nCVE-2026-48558.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-04T09:24:48.242999Z"} 2026-07-04T09:24:48.242999+00:00 https://vulnerability.circl.lu/sighting/a9ddd751-dafa-4f39-ad18-e6143cb48d9d/export 2026-07-04T23:06:04.277150+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a9ddd751-dafa-4f39-ad18-e6143cb48d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mpsd2qqq3x2z", "content": "EXCLUSIVE LEAK! \ud83d\udea8 Watch how hackers exploit SimpleHelp's CVE-2026-48558 to deploy TaskWeaver and Djinn Stealer. Download the setup installer and activate the premium mod menu tool \u2b07\ufe0f\u2699\ufe0f to stay safe! #USMNT", "creation_timestamp": "2026-07-04T05:24:30.821531Z"} 2026-07-04T05:24:30.821531+00:00 https://vulnerability.circl.lu/sighting/30bbf9d2-920a-4dbd-9e1b-ab41675dd2cb/export 2026-07-04T23:06:04.277226+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "30bbf9d2-920a-4dbd-9e1b-ab41675dd2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpqcf4cf3e27", "content": "A CVSS 10.0 bug is being exploited in the wild right now.\n\nSimpleHelp RCE.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-03T10:07:04.894653Z"} 2026-07-03T10:07:04.894653+00:00 https://vulnerability.circl.lu/sighting/2b9f29ce-e694-4e3c-99d6-e49aec14e252/export 2026-07-04T23:06:04.277301+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2b9f29ce-e694-4e3c-99d6-e49aec14e252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mppdv3irnl2n", "content": "Explotan una falla m\u00e1xima en SimpleHelp para colar malware.\n\nCVE-2026-48558 (severidad 10) deja falsificar sesiones de t\u00e9cnico en SimpleHelp, software de soporte remoto, y se usa para colar malware. Hay parche: urge actualizar.\n\nLeer en SimpleHelp\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-07-03T01:01:16.105540Z"} 2026-07-03T01:01:16.105540+00:00 https://vulnerability.circl.lu/sighting/66e85215-963d-467a-b971-5d71b3f5a0fe/export 2026-07-04T23:06:04.277373+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "66e85215-963d-467a-b971-5d71b3f5a0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://www.cert.dk/news/2026-07-02/Saarbarhederne-vaelter-ind-juni-saetter-tempoet-op-i-trusselslandskabet", "content": "", "creation_timestamp": "2026-07-02T13:45:07.455381Z"} 2026-07-02T13:45:07.455381+00:00 https://vulnerability.circl.lu/sighting/ca706ca1-e150-4893-9e06-a97dbfc5a05b/export 2026-07-04T23:06:04.278240+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca706ca1-e150-4893-9e06-a97dbfc5a05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mpnuuvsmrt2w", "content": "SimpleHelp CVE-2026-48558 (CVSS 10.0): forged OIDC token = full Technician session, no password needed. CISA KEV June 29. Attackers deploy TaskWeaver + Djinn Stealer via MSP access to hit customers. Patch to 5.5.16/6.0 RC2 now.\n \nzurl.co/OEhoY \n\n#CyberSecurity", "creation_timestamp": "2026-07-02T11:00:04.070313Z"} 2026-07-02T11:00:04.070313+00:00 https://vulnerability.circl.lu/sighting/22ea71bc-f0a4-44da-96fc-bd43ec719231/export 2026-07-04T23:06:04.278321+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "22ea71bc-f0a4-44da-96fc-bd43ec719231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpns6rekgd2k", "content": "\u26a0\ufe0f Two new malware families. One patched vulnerability. Zero attribution.\n\nCVE-2026-48558 in SimpleHelp.\nCVSS 10.0.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-02T10:11:53.560337Z"} 2026-07-02T10:11:53.560337+00:00 https://vulnerability.circl.lu/sighting/7854b8cd-932b-4aad-8ed8-d6a5ce39e3ac/export 2026-07-04T23:06:04.278394+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7854b8cd-932b-4aad-8ed8-d6a5ce39e3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/AfaluNulax.m.pupu.moe.ap.brid.gy/post/3mpnqch663x72", "content": "CISA adds critical SimpleHelp auth bypass to KEV CISA has added CVE-2026-48558 to the Known Exploited Vulnerabilities catalog. The flaw affects SimpleHelp 5.5.15 and earlier plus 6.0 pre-release builds, and allows remote unauthenticated attackers to forge OIDC [\u2026] \n\n[Original post on pupu.moe]", "creation_timestamp": "2026-07-02T09:38:15.215895Z"} 2026-07-02T09:38:15.215895+00:00