<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-04T23:22:56.894305+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c9bb1e31-7c5f-417e-b71c-3dccbd7cd5a0/export</id>
    <title>c9bb1e31-7c5f-417e-b71c-3dccbd7cd5a0</title>
    <updated>2026-10-04T23:22:56.921623+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c9bb1e31-7c5f-417e-b71c-3dccbd7cd5a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "Telegram/qvAOpL-KL-8YiPhU1pF-Op5mdw4AQb1bkK1FqR5zcc9a8n0", "content": "", "creation_timestamp": "2026-09-25T09:16:31.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c9bb1e31-7c5f-417e-b71c-3dccbd7cd5a0/export"/>
    <published>2026-09-25T09:16:31+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dbce97a2-d530-49cd-a279-22db78fb2004/export</id>
    <title>dbce97a2-d530-49cd-a279-22db78fb2004</title>
    <updated>2026-10-04T23:22:56.925093+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dbce97a2-d530-49cd-a279-22db78fb2004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "published-proof-of-concept", "source": "Telegram/qvAOpL-KL-8YiPhU1pF-Op5mdw4AQb1bkK1FqR5zcc9a8n0", "content": "", "creation_timestamp": "2026-09-25T09:16:31.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dbce97a2-d530-49cd-a279-22db78fb2004/export"/>
    <published>2026-09-25T09:16:31+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a2299884-c508-4b47-b66f-c7c332b7f74b/export</id>
    <title>a2299884-c508-4b47-b66f-c7c332b7f74b</title>
    <updated>2026-10-04T23:22:56.925305+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a2299884-c508-4b47-b66f-c7c332b7f74b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "published-proof-of-concept", "source": "Telegram/5m9gt7Suf759-ncl35IEKPFK2MmwJAQLIxfst0nlP4NfPIY", "content": "", "creation_timestamp": "2026-09-19T00:00:12.537272Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a2299884-c508-4b47-b66f-c7c332b7f74b/export"/>
    <published>2026-09-19T00:00:12.537272+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9f0af66d-4e77-4b5b-8d97-1d3b8cb90bd6/export</id>
    <title>9f0af66d-4e77-4b5b-8d97-1d3b8cb90bd6</title>
    <updated>2026-10-04T23:22:56.925381+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9f0af66d-4e77-4b5b-8d97-1d3b8cb90bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "Telegram/5m9gt7Suf759-ncl35IEKPFK2MmwJAQLIxfst0nlP4NfPIY", "content": "", "creation_timestamp": "2026-09-18T18:00:06.206723Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9f0af66d-4e77-4b5b-8d97-1d3b8cb90bd6/export"/>
    <published>2026-09-18T18:00:06.206723+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc7bbf90-5633-48b9-85b5-1eb218062f44/export</id>
    <title>dc7bbf90-5633-48b9-85b5-1eb218062f44</title>
    <updated>2026-10-04T23:22:56.925444+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc7bbf90-5633-48b9-85b5-1eb218062f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "https://t.me/VulnerabilityNews/44009", "content": "Microsoft working on Defender patch for ShieldBreak zero-day\n\nMicrosoft is working on a security patch for the \"ShieldBreak\" zero-day vulnerability disclosed last week by security researcher \"Nightmare Eclipse\" and now tracked as CVE-2026-69414. [...]\nhttps://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/", "creation_timestamp": "2026-09-18T12:00:07.615095Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc7bbf90-5633-48b9-85b5-1eb218062f44/export"/>
    <published>2026-09-18T12:00:07.615095+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/90f00ae7-9f4c-43e9-a39f-b7de5f7a3b55/export</id>
    <title>90f00ae7-9f4c-43e9-a39f-b7de5f7a3b55</title>
    <updated>2026-10-04T23:22:56.925512+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "90f00ae7-9f4c-43e9-a39f-b7de5f7a3b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnjf22m6l27", "content": "~Spiderlabs~\nNightmare-Eclipse\u2019s ShieldCrash abuses Defender object-manager symlinks despite patches; current PoC is incomplete but may evolve.\n-\nIOCs: CVE-2026-69414\n-\n#CVE202669414 #ThreatIntel #Windows", "creation_timestamp": "2026-09-16T16:05:29.528115Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/90f00ae7-9f4c-43e9-a39f-b7de5f7a3b55/export"/>
    <published>2026-09-16T16:05:29.528115+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31a36624-d4f8-417c-9410-b8349586ea8a/export</id>
    <title>31a36624-d4f8-417c-9410-b8349586ea8a</title>
    <updated>2026-10-04T23:22:56.925582+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31a36624-d4f8-417c-9410-b8349586ea8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mvmduxriis2o", "content": "*burp* Chaotic Eclipse dropped ShieldCrash\u2014claims it sidesteps Microsoft\u2019s fresh ShieldBreak patch on Defender (CVE-2026-69414). Third time this year the antivirus becomes the privilege escalator. Congrats Earth: you patched the lock, left the hinge, and called it secure. day259.054", "creation_timestamp": "2026-09-16T04:54:23.907797Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31a36624-d4f8-417c-9410-b8349586ea8a/export"/>
    <published>2026-09-16T04:54:23.907797+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e660b6fa-cade-45af-9a18-8ae9f5951eeb/export</id>
    <title>e660b6fa-cade-45af-9a18-8ae9f5951eeb</title>
    <updated>2026-10-04T23:22:56.925645+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e660b6fa-cade-45af-9a18-8ae9f5951eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "published-proof-of-concept", "source": "Telegram/VOlGRhtOZUZ6cqqeplV9A8CxfpNet2Q8bIEa5I0EFpuTBm4", "content": "", "creation_timestamp": "2026-09-15T07:00:06.038433Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e660b6fa-cade-45af-9a18-8ae9f5951eeb/export"/>
    <published>2026-09-15T07:00:06.038433+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dfd9587b-dd22-46ae-a664-7d6a271c3ebc/export</id>
    <title>dfd9587b-dd22-46ae-a664-7d6a271c3ebc</title>
    <updated>2026-10-04T23:22:56.925706+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dfd9587b-dd22-46ae-a664-7d6a271c3ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvjtvbigm62x", "content": "Daily IT Security Digest \u2014 2026-09-15\nSource: @offseq@infosec.exchange \u2014 https://infosec.exchange/@offseq/117273174374332264\n\n## 7. ShieldCrash Zero-Day Enables System-Level Privilege Escalation (CRITICAL)\n\nCVE-2026-69414, dubbed ShieldCrash, exploits Microsoft Defender on patched Windows systems", "creation_timestamp": "2026-09-15T05:02:52.440773Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dfd9587b-dd22-46ae-a664-7d6a271c3ebc/export"/>
    <published>2026-09-15T05:02:52.440773+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7253712d-b9cf-4a8c-9e0a-4301b4f5c582/export</id>
    <title>7253712d-b9cf-4a8c-9e0a-4301b4f5c582</title>
    <updated>2026-10-04T23:22:56.925769+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7253712d-b9cf-4a8c-9e0a-4301b4f5c582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "published-proof-of-concept", "source": "Telegram/pRCwoGxbkMh2qvsq7Jc1YMODZ3IVa_YtRl6QnFqUQF3NVto", "content": "", "creation_timestamp": "2026-09-15T01:00:03.975535Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7253712d-b9cf-4a8c-9e0a-4301b4f5c582/export"/>
    <published>2026-09-15T01:00:03.975535+00:00</published>
  </entry>
</feed>
