<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-15T22:58:47.191526+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f7a51faf-3bee-4465-a227-05bda4f4e51a/export</id>
    <title>f7a51faf-3bee-4465-a227-05bda4f4e51a</title>
    <updated>2026-09-15T22:58:47.218030+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f7a51faf-3bee-4465-a227-05bda4f4e51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-84869", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvjqfaskob2e", "content": "ConnectWise patched CVE-2026-84869 (CVSS 9.9) in ScreenConnect 26.6.5. Huntress tracked active worm-like exploitation\u2026 https://0daynews.com/articles/2026-09-14-screenconnect-worm-attacks-cve-2026-84869-patched/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2042", "creation_timestamp": "2026-09-15T04:00:14.889543Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f7a51faf-3bee-4465-a227-05bda4f4e51a/export"/>
    <published>2026-09-15T04:00:14.889543+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cea7e6f2-ad26-44e9-894b-041332a6104f/export</id>
    <title>cea7e6f2-ad26-44e9-894b-041332a6104f</title>
    <updated>2026-09-15T22:58:47.220258+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cea7e6f2-ad26-44e9-894b-041332a6104f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-della-cve-2026-84869-relativa-al-prodotto-connectwise-screenconnect", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-84869 con gravit\u00e0 \"critica\" - gi\u00e0 sanata dal vendor - relativa al prodotto ConnectWise ScreenConnect", "creation_timestamp": "2026-09-15T01:00:33.780810Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cea7e6f2-ad26-44e9-894b-041332a6104f/export"/>
    <published>2026-09-15T01:00:33.780810+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8f44f8d0-5648-4c07-b97e-562d53eb0653/export</id>
    <title>8f44f8d0-5648-4c07-b97e-562d53eb0653</title>
    <updated>2026-09-15T22:58:47.220392+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8f44f8d0-5648-4c07-b97e-562d53eb0653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvibjqh3ph2a", "content": "CRITICAL CISA KEV ALERT: CVE-2026-84869 targets ConnectWise ScreenConnect with unauthorized file transfer and RCE. Active exploitation verified. Access our TSUITE brief for Splunk, Sentinel, QRadar queries, and endpoint hardening steps to protect your environment. https://thecybermind.co/g5ob", "creation_timestamp": "2026-09-14T14:01:38.894640Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8f44f8d0-5648-4c07-b97e-562d53eb0653/export"/>
    <published>2026-09-14T14:01:38.894640+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/41d75bf2-021f-402d-b5e1-7447c450b5a8/export</id>
    <title>41d75bf2-021f-402d-b5e1-7447c450b5a8</title>
    <updated>2026-09-15T22:58:47.220501+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "41d75bf2-021f-402d-b5e1-7447c450b5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvhqpaf2kl24", "content": "ScreenConnect (&amp;lt;26.6.5) faces CRITICAL CVE-2026-84869 \u2014 actively exploited for worm-like attacks. Patch to 26.6.5 now &amp;amp; disable TransferFiles until done. CISA requires swift action. https://radar.offseq.com/threat/connectwise-patches-screenconnect-vulnerability-exploited-in-worm-like-attacks-c3e2...", "creation_timestamp": "2026-09-14T09:00:30.679185Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/41d75bf2-021f-402d-b5e1-7447c450b5a8/export"/>
    <published>2026-09-14T09:00:30.679185+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a8340477-dea7-4cfc-8ecb-b6ee63518e1e/export</id>
    <title>a8340477-dea7-4cfc-8ecb-b6ee63518e1e</title>
    <updated>2026-09-15T22:58:47.220608+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a8340477-dea7-4cfc-8ecb-b6ee63518e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117268573440992142", "content": "ConnectWise ScreenConnect CRITICAL vuln (CVE-2026-84869) exploited in worm-like attacks \u2014 unauthorized file transfer &amp;amp; execution via remote sessions in versions &amp;lt;26.6.5. Patch to 26.6.5 now or disable TransferFiles. https://radar.offseq.com/threat/connectwise-patches-screenconnect-vulnerability-exploited-in-worm-like-attacks-c3e27ae69aeeacb1 #OffSeq #Cybersecurity #Vuln #CISA", "creation_timestamp": "2026-09-14T09:00:26.736703Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a8340477-dea7-4cfc-8ecb-b6ee63518e1e/export"/>
    <published>2026-09-14T09:00:26.736703+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eb133f01-bdf2-4c0f-8e62-a74a2e6c5b5f/export</id>
    <title>eb133f01-bdf2-4c0f-8e62-a74a2e6c5b5f</title>
    <updated>2026-09-15T22:58:47.220709+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eb133f01-bdf2-4c0f-8e62-a74a2e6c5b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvhp6a4npw2g", "content": "ConnectWise released urgent patches for CVE-2026-84869, a critical ScreenConnect flaw exploited in worm-like attacks, enabling unauthorized file transfer and execution via remote sessions.\n", "creation_timestamp": "2026-09-14T08:33:05.170898Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eb133f01-bdf2-4c0f-8e62-a74a2e6c5b5f/export"/>
    <published>2026-09-14T08:33:05.170898+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/73e1d54f-0342-4de5-bb28-c33667236a94/export</id>
    <title>73e1d54f-0342-4de5-bb28-c33667236a94</title>
    <updated>2026-09-15T22:58:47.220812+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "73e1d54f-0342-4de5-bb28-c33667236a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-della-cve-2026-84869-relativa-al-prodotto-connectwise-screenconnect", "content": "", "creation_timestamp": "2026-09-14T08:15:01.996894Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/73e1d54f-0342-4de5-bb28-c33667236a94/export"/>
    <published>2026-09-14T08:15:01.996894+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5ffe5e08-40a8-4033-9268-19c935695042/export</id>
    <title>5ffe5e08-40a8-4033-9268-19c935695042</title>
    <updated>2026-09-15T22:58:47.221811+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5ffe5e08-40a8-4033-9268-19c935695042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvhehk5f2s2i", "content": "\ud83d\udd34 ScreenConnect CVE-2026-84869 \u2014 CVSS 9.9\n\nCISA confirms active exploitation of the critical ScreenConnect flaw. Attackers can abuse remote sessions to transfer and execute files without Host confirmati\n\nstemshop.top/blog/screenc...\n\n#CVE #CVE202684869 #ScreenConnect #ConnectWise #RMM #CyberSecurity", "creation_timestamp": "2026-09-14T05:21:37.802639Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5ffe5e08-40a8-4033-9268-19c935695042/export"/>
    <published>2026-09-14T05:21:37.802639+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d531298a-0968-4102-9209-31d4705cb107/export</id>
    <title>d531298a-0968-4102-9209-31d4705cb107</title>
    <updated>2026-09-15T22:58:47.221945+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d531298a-0968-4102-9209-31d4705cb107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvhdej5zwj2p", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f3\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA \uff08Sep 11\uff09 \n\nCVE-2026-42016 JFrog Artifactory\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-42018 JFrog Artifactory\u306e\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-84869 ConnectWise ScreenConnect\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u6a29\u9650\u7ba1\u7406\u3068\u8a8d\u8a3c\u306e\u6b20\u843d\u306e\u8106\u5f31\u6027\n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-14T05:01:51.385024Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d531298a-0968-4102-9209-31d4705cb107/export"/>
    <published>2026-09-14T05:01:51.385024+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f0f6b010-6f85-46bd-84bf-11a2f206feb6/export</id>
    <title>f0f6b010-6f85-46bd-84bf-11a2f206feb6</title>
    <updated>2026-09-15T22:58:47.222056+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f0f6b010-6f85-46bd-84bf-11a2f206feb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvdrpesjdd2l", "content": "CISA added 5 actively exploited flaws to KEV: ScreenConnect CVE-2026-84869 (CVSS 9.9), Artifactory and RouterOS bugs up to CVSS 9.2. Patch ScreenConnect to 26.6.5+ now. https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "creation_timestamp": "2026-09-12T19:07:48.784328Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f0f6b010-6f85-46bd-84bf-11a2f206feb6/export"/>
    <published>2026-09-12T19:07:48.784328+00:00</published>
  </entry>
</feed>
