<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-30T10:38:02.337209+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/16ee359e-a31f-472a-9d87-e5ce5662363f/export</id>
    <title>16ee359e-a31f-472a-9d87-e5ce5662363f</title>
    <updated>2026-09-30T10:38:02.367247+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "16ee359e-a31f-472a-9d87-e5ce5662363f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwn5konmrk2a", "content": "\ud83d\udd34 Check Point: two critical flaws under active attack\n\nCVE-2026-85102 and CVE-2026-93616 both score CVSS 9.8, affecting VPN gateways and security management infrastructure. Both are now in CISA KEV.\n\nstemshop.top/blog/check-p...\n\n#CVE #CVE202685102 #CVE202693616 #CheckPoint #VPN #CyberSecurity", "creation_timestamp": "2026-09-29T05:59:09.965756Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/16ee359e-a31f-472a-9d87-e5ce5662363f/export"/>
    <published>2026-09-29T05:59:09.965756+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c2fa33b-d169-4b1b-ad6f-9cddb76bc35f/export</id>
    <title>2c2fa33b-d169-4b1b-ad6f-9cddb76bc35f</title>
    <updated>2026-09-30T10:38:02.369170+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2c2fa33b-d169-4b1b-ad6f-9cddb76bc35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwm4hainmw2l", "content": "~Checkpoint~\nActive exploitation targets critical Check Point, F5 and WordPress flaws.\n-\nIOCs: CVE-2026-85102, CVE-2026-93616, CVE-2026-94127\n-\n#Exploitation #Ransomware #ThreatIntel", "creation_timestamp": "2026-09-28T20:06:36.841706Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c2fa33b-d169-4b1b-ad6f-9cddb76bc35f/export"/>
    <published>2026-09-28T20:06:36.841706+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3518ac49-0f13-4b1d-870f-f356f1732d4d/export</id>
    <title>3518ac49-0f13-4b1d-870f-f356f1732d4d</title>
    <updated>2026-09-30T10:38:02.369317+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3518ac49-0f13-4b1d-870f-f356f1732d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mwln7rt2jq2u", "content": "On July 23, attackers exploited a zero-day flaw (CVE-2026-93616) in Check Point's Security Management Server. Check Point released a fix on Sept 22. Stay updated!", "creation_timestamp": "2026-09-28T15:34:00.319205Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3518ac49-0f13-4b1d-870f-f356f1732d4d/export"/>
    <published>2026-09-28T15:34:00.319205+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2dec036d-cdba-4b3b-80ad-35965e42030e/export</id>
    <title>2dec036d-cdba-4b3b-80ad-35965e42030e</title>
    <updated>2026-09-30T10:38:02.369437+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2dec036d-cdba-4b3b-80ad-35965e42030e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mwgbtxyo3g2a", "content": "(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-93616 \u2013 Check Point Multiple Products Path Traversal\u00a0Vulnerability\n\nAnalyze the technical mechanics of CVE-2026-93616 with our Check Point TSUITE brief, covering management server path traversal, remote code\u2026\n\nhttps://thecybermind.co/1yot", "creation_timestamp": "2026-09-26T12:27:15.209543Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2dec036d-cdba-4b3b-80ad-35965e42030e/export"/>
    <published>2026-09-26T12:27:15.209543+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ec014475-cc0f-4e45-a668-07d28794baff/export</id>
    <title>ec014475-cc0f-4e45-a668-07d28794baff</title>
    <updated>2026-09-30T10:38:02.369560+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ec014475-cc0f-4e45-a668-07d28794baff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mwflyc2jmw2n", "content": "\ud83d\udee1\ufe0f Failles exploit\u00e9es : Check Point SMS (CVE-2026-93616) et F5 BIG-IP (CVE-2026-94127) \u2014 CERT-FR ; CISA : SharePoint, WSO2 (CVE-2026-5430), Adobe Commerce.\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1219/", "creation_timestamp": "2026-09-26T05:55:56.660033Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ec014475-cc0f-4e45-a668-07d28794baff/export"/>
    <published>2026-09-26T05:55:56.660033+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c331b0b8-655a-4874-84b6-6aecc8650bb3/export</id>
    <title>c331b0b8-655a-4874-84b6-6aecc8650bb3</title>
    <updated>2026-09-30T10:38:02.369673+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c331b0b8-655a-4874-84b6-6aecc8650bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/br4inde4d.bsky.social/post/3mwe3pn6irc2j", "content": "Sneak preview - we fully exploited CVE-2026-93616, an unauthenticated root RCE in Check Point Security Management Server. Blog post coming soon!", "creation_timestamp": "2026-09-25T15:32:07.786459Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c331b0b8-655a-4874-84b6-6aecc8650bb3/export"/>
    <published>2026-09-25T15:32:07.786459+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a0a7fa62-c3d2-4967-acdf-db6222836f5d/export</id>
    <title>a0a7fa62-c3d2-4967-acdf-db6222836f5d</title>
    <updated>2026-09-30T10:38:02.369782+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a0a7fa62-c3d2-4967-acdf-db6222836f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mwd3koe3r22l", "content": "\u26a1 CERT-FR : deux RCE activement exploit\u00e9es \u2014 Check Point Security Management Server (CVE-2026-93616) et F5 BIG-IP (CVE-2026-94127). IoC publi\u00e9s.\n\n\ud83d\udd17 https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1219/\n\ud83d\udd17 https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1220/", "creation_timestamp": "2026-09-25T05:56:40.300158Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a0a7fa62-c3d2-4967-acdf-db6222836f5d/export"/>
    <published>2026-09-25T05:56:40.300158+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb5f9088-1d87-4582-a20c-c3d6a9a28748/export</id>
    <title>fb5f9088-1d87-4582-a20c-c3d6a9a28748</title>
    <updated>2026-09-30T10:38:02.369893+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb5f9088-1d87-4582-a20c-c3d6a9a28748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwbkuauq7z2y", "content": "\ud83d\udd34 EXPLOITED\n\nCheck Point is patching two flaws in its firewalls and management servers, both 9.8 and both exploited now.\n\nOne ran silent as a zero-day for two months.\n\nPatch, then hunt: the fix won't tell you if you were already hit. (CVE-2026-93616 / CVE-2026-85102)", "creation_timestamp": "2026-09-24T15:25:09.279923Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb5f9088-1d87-4582-a20c-c3d6a9a28748/export"/>
    <published>2026-09-24T15:25:09.279923+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fdfc3b62-91e2-4767-bfb6-56fcf789092f/export</id>
    <title>fdfc3b62-91e2-4767-bfb6-56fcf789092f</title>
    <updated>2026-09-30T10:38:02.370006+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fdfc3b62-91e2-4767-bfb6-56fcf789092f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93616", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwb37q7ewl2t", "content": "Check Point patches a 9.8-severity management server zero-day. Path traversal enables unauthenticated script execution. CISA\u2026 https://0daynews.com/articles/2026-09-23-check-point-mgmt-cve-2026-93616-kev-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-3417", "creation_timestamp": "2026-09-24T10:45:14.708996Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fdfc3b62-91e2-4767-bfb6-56fcf789092f/export"/>
    <published>2026-09-24T10:45:14.708996+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0610ddf6-b01b-4a79-bf4f-bcf329c0a616/export</id>
    <title>0610ddf6-b01b-4a79-bf4f-bcf329c0a616</title>
    <updated>2026-09-30T10:38:02.370124+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0610ddf6-b01b-4a79-bf4f-bcf329c0a616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://t.me/bizone_channel/2947", "content": "\ud83d\udd3a \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Check Point\n\n\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c\u0443 \u043a\u043e\u043d\u0442\u0443\u0440\u0443 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0438 VPN-\u0448\u043b\u044e\u0437\u043e\u0432.\n\n\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Check Point, \u0432 \u0438\u044e\u043b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u043e\u0447\u0435\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-93616 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 9,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\n\u27a1\ufe0f\u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0438 \u043a\u0430\u043a\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u2014 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435\n\n\ud83d\udcac \u041c\u044b \u0432 MAX", "creation_timestamp": "2026-09-24T10:40:40.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0610ddf6-b01b-4a79-bf4f-bcf329c0a616/export"/>
    <published>2026-09-24T10:40:40+00:00</published>
  </entry>
</feed>
