<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-03T23:27:52.587220+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fc6309e6-9e35-46a3-a3f8-db7c5a39d21c/export</id>
    <title>fc6309e6-9e35-46a3-a3f8-db7c5a39d21c</title>
    <updated>2026-10-03T23:27:52.610131+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fc6309e6-9e35-46a3-a3f8-db7c5a39d21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mwy3eo2drk2j", "content": "Revenge of the SD-WAN: Exploring and Exploiting Yet Another Critical Cisco\nSD-WAN Vulnerability (CVE-2026-76504)\nwww.vulncheck.com/blog/revenge...", "creation_timestamp": "2026-10-03T14:19:18.062198Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fc6309e6-9e35-46a3-a3f8-db7c5a39d21c/export"/>
    <published>2026-10-03T14:19:18.062198+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6d9fd85a-d2b4-4f2f-896e-cd7862368eb8/export</id>
    <title>6d9fd85a-d2b4-4f2f-896e-cd7862368eb8</title>
    <updated>2026-10-03T23:27:52.613135+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6d9fd85a-d2b4-4f2f-896e-cd7862368eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/digitalpulsebrief.bsky.social/post/3mwxik33xeo25", "content": "Cisco SD-WAN CVE-2026-76504 Is Being Exploited: Fixed Versions, Detection Steps and What Admins Should Do\u00a0Now\n\nCisco confirms active exploitation of CVE-2026-76504 in Catalyst SD-WAN Manager. Here are the fixed versions, Cisco\u2019s response workflow, detection guidance, and the limits of the new Live\u2026", "creation_timestamp": "2026-10-03T08:42:14.252331Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6d9fd85a-d2b4-4f2f-896e-cd7862368eb8/export"/>
    <published>2026-10-03T08:42:14.252331+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e945ab9c-4d7d-4b2e-9f05-351cd7ed5572/export</id>
    <title>e945ab9c-4d7d-4b2e-9f05-351cd7ed5572</title>
    <updated>2026-10-03T23:27:52.613457+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e945ab9c-4d7d-4b2e-9f05-351cd7ed5572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mwxgmlgk5l2h", "content": "COGNOSCERE Tech Brief \u2014 2026-10-03\n\nCisco disclosed CVE-2026-76504, a CVSS 9.8 authentication bypass in Catalyst SD-\n\nhttps://www.cognoscerellc.com/news", "creation_timestamp": "2026-10-03T08:07:51.546025Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e945ab9c-4d7d-4b2e-9f05-351cd7ed5572/export"/>
    <published>2026-10-03T08:07:51.546025+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/061af895-ef64-4ab6-9f33-f1fc466c8eae/export</id>
    <title>061af895-ef64-4ab6-9f33-f1fc466c8eae</title>
    <updated>2026-10-03T23:27:52.613735+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "061af895-ef64-4ab6-9f33-f1fc466c8eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mww6tgmr3a2u", "content": "\ud83d\udce1 Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-76504): One Encoded Letter Away From Admin", "creation_timestamp": "2026-10-02T20:15:50.666513Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/061af895-ef64-4ab6-9f33-f1fc466c8eae/export"/>
    <published>2026-10-02T20:15:50.666513+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/09ceae34-ddd4-45c0-843e-967a0dc1b760/export</id>
    <title>09ceae34-ddd4-45c0-843e-967a0dc1b760</title>
    <updated>2026-10-03T23:27:52.613868+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "09ceae34-ddd4-45c0-843e-967a0dc1b760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mwvvrhpve32n", "content": "Revenge of the SD-WAN: Exploring and Exploiting yet Another Critical Cisco SD-WAN Vulnerability (CVE-2026-76504) https://packetstorm.news/news/view/44586 #news", "creation_timestamp": "2026-10-02T17:33:40.777742Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/09ceae34-ddd4-45c0-843e-967a0dc1b760/export"/>
    <published>2026-10-02T17:33:40.777742+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8fd242a8-cb14-4c29-be6f-c11a9df3cae2/export</id>
    <title>8fd242a8-cb14-4c29-be6f-c11a9df3cae2</title>
    <updated>2026-10-03T23:27:52.613973+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8fd242a8-cb14-4c29-be6f-c11a9df3cae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwvkssf53g2s", "content": "Cisco patches critical auth bypass zero-day (CVE-2026-76504) in Catalyst SD-WAN Manager. CVSS 9.8 flaw actively exploited. Unauthenticated attackers can gain admin access. CISA added to KEV. Patch immediately! #Cisco #ZeroDay #SDWAN #CVE202676504\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-02T14:17:34.465589Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8fd242a8-cb14-4c29-be6f-c11a9df3cae2/export"/>
    <published>2026-10-02T14:17:34.465589+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/24a3af72-f016-486c-9c63-205481f9bfe7/export</id>
    <title>24a3af72-f016-486c-9c63-205481f9bfe7</title>
    <updated>2026-10-03T23:27:52.614078+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "24a3af72-f016-486c-9c63-205481f9bfe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cybereyeq.bsky.social/post/3mwvcy2ewyl2q", "content": "Critical Cisco Catalyst SD-WAN Manager auth-bypass (CVE-2026-76504, CVSS 9.8) hit CISA's KEV catalog on 30 Sep. Federal fix due 3 Oct under BOD 26-04. https://www.cybereyeq.com/?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cisco_sdwan_kev", "creation_timestamp": "2026-10-02T11:57:20.769879Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/24a3af72-f016-486c-9c63-205481f9bfe7/export"/>
    <published>2026-10-02T11:57:20.769879+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/14cb9edf-d6b7-44e7-a8d2-a69e0d35206c/export</id>
    <title>14cb9edf-d6b7-44e7-a8d2-a69e0d35206c</title>
    <updated>2026-10-03T23:27:52.614192+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "14cb9edf-d6b7-44e7-a8d2-a69e0d35206c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwuryfv25s2f", "content": "\ud83d\udd34 Cisco SD-WAN CVE-2026-76504 \u2014 zero-day under active attack\nCritical CVSS 9.8 auth bypass lets remote attackers access Catalyst SD-WAN Manager APIs with admin privileges \u2014 no password required.\nstemshop.top/blog/cisco-s...\n#CVE #CVE202676504 #Cisco #SDWAN #ZeroDay #CyberSecurity", "creation_timestamp": "2026-10-02T06:53:24.026612Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/14cb9edf-d6b7-44e7-a8d2-a69e0d35206c/export"/>
    <published>2026-10-02T06:53:24.026612+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/85f8e9f8-0383-4c38-bdbb-56396c99f551/export</id>
    <title>85f8e9f8-0383-4c38-bdbb-56396c99f551</title>
    <updated>2026-10-03T23:27:52.614285+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "85f8e9f8-0383-4c38-bdbb-56396c99f551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mwuquqzsjm2p", "content": "Here we go again with Cisco Catalyst SD-WAN Manager users discovering that basic hex encoding was apparently too difficult to parse properly. Thanks to CVE-2026-76504, remote opportunists have been casually awarding themselves administrative API access in the wild without needing...\n\nRead full story", "creation_timestamp": "2026-10-02T06:33:22.872101Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/85f8e9f8-0383-4c38-bdbb-56396c99f551/export"/>
    <published>2026-10-02T06:33:22.872101+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/92db04af-4e05-47c1-8e62-7f2fd50f4492/export</id>
    <title>92db04af-4e05-47c1-8e62-7f2fd50f4492</title>
    <updated>2026-10-03T23:27:52.614381+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "92db04af-4e05-47c1-8e62-7f2fd50f4492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mwuqqu5xr32h", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-76504: \u26a0\ufe0f CVE-2026-76504: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 1.1%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-76504-a-vulnerability-in-the-api-session-based", "creation_timestamp": "2026-10-02T06:31:11.744898Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/92db04af-4e05-47c1-8e62-7f2fd50f4492/export"/>
    <published>2026-10-02T06:31:11.744898+00:00</published>
  </entry>
</feed>
