https://vulnerability.circl.lu/sightings/feed 2026-10-01T00:50:54.669378+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/32ca3730-e3e7-4717-95e5-1271db7bba4f/export 2026-10-01T00:50:54.699666+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "32ca3730-e3e7-4717-95e5-1271db7bba4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-61d108e9-b1fca82f3ad9a154", "content": "WatchGuard fixes 15 Fireware OS flaws, including a critical RCE bug that could give attackers root access to vulnerable Firebox appliances. WatchGuard has released security updates for Fireware OS that address 15 vulnerabilities, including a critical code injection flaw, tracked as CVE-2026-86131 (CVSS score of 9.2), that could allow an attacker to execute commands with [\u2026]WatchGuard fixes critical Fireware OS flaw allowing remote code execution", "creation_timestamp": "2026-09-30T20:09:07.960432Z"} 2026-09-30T20:09:07.960432+00:00 https://vulnerability.circl.lu/sighting/24be13b6-e0f2-4005-9e86-d5b376a19dbb/export 2026-10-01T00:50:54.701539+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "24be13b6-e0f2-4005-9e86-d5b376a19dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwquntqwvm2v", "content": "WatchGuard fixed 15 Fireware OS flaws, including CVE-2026-86131, a critical code injection bug that could let a remote attacker run commands as root on Firebox appliances. #WatchGuard #FirewareOS #Firebox", "creation_timestamp": "2026-09-30T17:30:27.679185Z"} 2026-09-30T17:30:27.679185+00:00 https://vulnerability.circl.lu/sighting/85470799-0e98-41eb-ad19-1a01aafa3142/export 2026-10-01T00:50:54.701674+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "85470799-0e98-41eb-ad19-1a01aafa3142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwqhaupfpv2j", "content": "Fireware OS CRITICAL code injection (CVE-2026-86131): remote attackers can gain root via BOVPN over TLS. Patch affected WatchGuard systems & APs immediately. Details: https://radar.offseq.com/threat/watchguard-patches-critical-fireware-os-code-injection-vulnerability-36035f2a6c97cfc4 #OffSeq #Vul...", "creation_timestamp": "2026-09-30T13:30:33.862006Z"} 2026-09-30T13:30:33.862006+00:00 https://vulnerability.circl.lu/sighting/469b6d9d-0c6f-4605-b8eb-ff49b7dffdbb/export 2026-10-01T00:50:54.701776+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "469b6d9d-0c6f-4605-b8eb-ff49b7dffdbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117360232414282274", "content": "CRITICAL RCE (CVE-2026-86131) in WatchGuard Fireware OS enables root code execution via BOVPN over TLS. Multiple high-severity flaws also patched. No known in-the-wild attacks, but update ASAP. https://radar.offseq.com/threat/watchguard-patches-critical-fireware-os-code-injection-vulnerability-36035f2a6c97cfc4 #OffSeq #Vuln #WatchGuard #PatchTuesday #InfoSec", "creation_timestamp": "2026-09-30T13:30:31.526308Z"} 2026-09-30T13:30:31.526308+00:00 https://vulnerability.circl.lu/sighting/1380c930-2410-41cc-883e-dce9d40c01e3/export 2026-10-01T00:50:54.701874+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1380c930-2410-41cc-883e-dce9d40c01e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwqgwaapj52i", "content": "WatchGuard released Fireware OS patches fixing 15 vulnerabilities, including a critical CVE-2026-86131 RCE that can grant root command execution via BOVPN over TLS.\n", "creation_timestamp": "2026-09-30T13:24:37.177258Z"} 2026-09-30T13:24:37.177258+00:00 https://vulnerability.circl.lu/sighting/477207f8-55a9-4b23-a417-7fafed9a1b12/export 2026-10-01T00:50:54.701985+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "477207f8-55a9-4b23-a417-7fafed9a1b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117358019514104109", "content": "Another one from Watch Guard.\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.\nhttps://psirt.watchguard.com/CVE-2026-86131", "creation_timestamp": "2026-09-30T04:07:46.279402Z"} 2026-09-30T04:07:46.279402+00:00 https://vulnerability.circl.lu/sighting/be68d736-c899-43a8-88e1-b1c4356cda4e/export 2026-10-01T00:50:54.702081+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "be68d736-c899-43a8-88e1-b1c4356cda4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwpcuzobtf2c", "content": "WatchGuard patched 14 Fireware OS vulnerabilities, including CVSS 9.2 RCE flaw CVE-2026-86131 in BOVPN Over TLS. Update Firebox appliances now.\n\n#WatchGuard #FirewareOS #Firebox #CVE202686131 #FirewallSecurity #VPN #NetworkSecurity #PatchNow", "creation_timestamp": "2026-09-30T02:39:41.386570Z"} 2026-09-30T02:39:41.386570+00:00 https://vulnerability.circl.lu/sighting/ba9b1876-95a2-4a35-b841-0cdf5bbe11e2/export 2026-10-01T00:50:54.702176+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "ba9b1876-95a2-4a35-b841-0cdf5bbe11e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"} 2026-09-30T02:32:02+00:00 https://vulnerability.circl.lu/sighting/04f1bafe-6b99-44ed-bd8c-1e91cd940dfe/export 2026-10-01T00:50:54.703043+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "04f1bafe-6b99-44ed-bd8c-1e91cd940dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwpb55zbls2u", "content": "\ud83d\udea8 CVE-2026-86131 \u2014 CVSS 9.2 CRITICAL\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling all...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86131\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T02:08:26.555488Z"} 2026-09-30T02:08:26.555488+00:00 https://vulnerability.circl.lu/sighting/406036ed-b0d6-4ee2-88c1-408ab621d36e/export 2026-10-01T00:50:54.703163+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "406036ed-b0d6-4ee2-88c1-408ab621d36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwp6z7eeza24", "content": "WatchGuard Fireware OS hit by CRITICAL code injection (CVE-2026-86131). Attackers with VPN server control can gain root on Firebox devices. Avoid connecting to untrusted VPNs until a fix. \ud83d\udd12 https://radar.offseq.com/threat/a-code-injection-vulnerability-in-watchguard-fireware-oss-bovpn-over-tls-cl...", "creation_timestamp": "2026-09-30T01:30:26.938109Z"} 2026-09-30T01:30:26.938109+00:00