https://vulnerability.circl.lu/sightings/feed 2026-09-16T17:28:08.948397+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/69c24774-c721-4f33-ab2e-806c2d2ba6da/export 2026-09-16T17:28:08.981253+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "69c24774-c721-4f33-ab2e-806c2d2ba6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvmwi6ftxf2x", "content": "Original text: \"Gray Rabbits and the Tale of a One-Click Backdoor\" \u2014 Alexandru-Cristian Barda\u0219, Gen Digital / Gen Threat Labs (10 September 2026; 26-minute read). Figures, the command table, IOCs and published URLs be\nhttps://core-jmp.org/2026/09/gray-rabbits-one-click-backdoor-sogou-cve-2026-51990/", "creation_timestamp": "2026-09-16T10:27:15.304560Z"} 2026-09-16T10:27:15.304560+00:00 https://vulnerability.circl.lu/sighting/282650a1-dda9-4338-bb8b-1c4ed658d2df/export 2026-09-16T17:28:08.984406+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "282650a1-dda9-4338-bb8b-1c4ed658d2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvl4puma3w2l", "content": "A critical flaw (CVE-2026-51990) in Tencent's popular Sogou Input Method is being exploited by Chinese hackers for 1-click RCE. The attack chains a custom protocol handler flaw with an old browser engine. #CyberSecurity #Vulnerability #Tencent\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-15T17:13:35.172708Z"} 2026-09-15T17:13:35.172708+00:00 https://vulnerability.circl.lu/sighting/9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c/export 2026-09-16T17:28:08.984548+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/56d705b6-7c8b-4c3b-87dd-67b77e9b4a9a", "content": "", "creation_timestamp": "2026-09-15T14:00:40.145937Z"} 2026-09-15T14:00:40.145937+00:00 https://vulnerability.circl.lu/sighting/df6926d4-424b-4b3d-837d-838a0278a4fe/export 2026-09-16T17:28:08.984670+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "df6926d4-424b-4b3d-837d-838a0278a4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mvkl7uotq72g", "content": "China-aligned hackers exploiting critical Tencent flaw to drop GrayRabbit backdoor. CVE-2026-51990 poses immediate risk to Windows users\u2014SOC\u2026\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-09-15T12:00:24.468935Z"} 2026-09-15T12:00:24.468935+00:00 https://vulnerability.circl.lu/sighting/60c17918-7d5d-42c6-84be-62dc3e7dfd21/export 2026-09-16T17:28:08.984778+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "60c17918-7d5d-42c6-84be-62dc3e7dfd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvk6n5uc7cym", "content": "\u4e2d\u56fd\u7cfb\u30a2\u30af\u30bf\u30fc\u304cTencent\u88fd\u30bd\u30d5\u30c8\u306e\u91cd\u5927\u306a\u6b20\u9665\u3092\u60aa\u7528\u3057\u3001\u30d0\u30c3\u30af\u30c9\u30a2\u300cGrayRabbit\u300d\u3092\u5c55\u958b\uff08CVE-2026-51990\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47725/", "creation_timestamp": "2026-09-15T08:15:12.790640Z"} 2026-09-15T08:15:12.790640+00:00 https://vulnerability.circl.lu/sighting/7876d3d6-e890-4aa9-afa0-d10d82bd51b1/export 2026-09-16T17:28:08.984883+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7876d3d6-e890-4aa9-afa0-d10d82bd51b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/jarkafterdark.com/post/3mvk37wpdgo2m", "content": "the flaw, cve-2026-51990, opened the path to remote code execution through sogou's embedded browser. in the attack gen observed, UNC3569 chained it with an old chromium v8 flaw. one crafted link, one click, and the attacker could essentially do anything the currently logged-in user could do.", "creation_timestamp": "2026-09-15T07:14:06.573695Z"} 2026-09-15T07:14:06.573695+00:00 https://vulnerability.circl.lu/sighting/08bfa8f7-4380-473f-a9d8-0473a7168a22/export 2026-09-16T17:28:08.984984+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "08bfa8f7-4380-473f-a9d8-0473a7168a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvjz7klh3o2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-20079: 22 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-85706: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 5 interactions\nCVE-2026-76461: 5 interactions\nCVE-2026-85706: 5 interactions\n", "creation_timestamp": "2026-09-15T06:38:06.953080Z"} 2026-09-15T06:38:06.953080+00:00 https://vulnerability.circl.lu/sighting/34247ce8-c13e-4d53-83ba-a4e8ea49dcfa/export 2026-09-16T17:28:08.985086+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "34247ce8-c13e-4d53-83ba-a4e8ea49dcfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/HackerNewscyber/3457", "content": "\u2708 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Sogou \u0628\u0631\u0627\u06cc \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit\n\n\u00a9\ufe0f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0646\u062a\u0633\u0628 \u0628\u0647 \u06af\u0631\u0648\u0647 \u0647\u0645\u0633\u0648 \u0628\u0627 \u0686\u06cc\u0646 UNC3569 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-51990 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 Sogou Input Method \u0634\u0631\u06a9\u062a Tencent \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u0631\u0627 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0645\u0633\u062a\u0642\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062d\u0645\u0644\u0647 \u0628\u0627 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0648 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646\u060c \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc Sogou \u0648 \u06cc\u06a9 \u0646\u0633\u062e\u0647 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0628\u062f\u0648\u0646 sandbox \u0627\u0632 Chromium\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u06cc\u06a9 \u0628\u06a9\u200c\u062f\u0648\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0627\u06cc\u0646\u062f\u0647\u0627\u060c \u0627\u06cc\u062c\u0627\u062f \u067e\u0648\u0633\u062a\u0647 \u0645\u0639\u06a9\u0648\u0633\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0633\u06cc\u0633\u062a\u0645 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u062f\u0627\u0631\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u062f\u0627\u0645\u0647: Tencent \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 16.3.0.3498 \u062f\u0631 \u0622\u0648\u0631\u06cc\u0644 \u06f2\u06f0\u06f2\u06f6 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0648\u062a\u0648\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc \u0647\u0645\u0686\u0646\u0627\u0646 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0641\u0627\u0642\u062f sandbox \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062e\u0637\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-15T00:00:27.506613Z"} 2026-09-15T00:00:27.506613+00:00 https://vulnerability.circl.lu/sighting/4e593253-2223-4222-ae1c-67a95384c97a/export 2026-09-16T17:28:08.985212+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4e593253-2223-4222-ae1c-67a95384c97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "published-proof-of-concept", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.229728Z"} 2026-09-15T00:00:21.229728+00:00 https://vulnerability.circl.lu/sighting/6fecef12-a462-4053-8789-2704a517e439/export 2026-09-16T17:28:08.985307+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6fecef12-a462-4053-8789-2704a517e439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/BleepingComputer/25549", "content": "\u200aHackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-15T00:00:10.129471Z"} 2026-09-15T00:00:10.129471+00:00