https://vulnerability.circl.lu/sightings/feed 2026-09-30T21:10:25.279581+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5572c749-a691-40fe-bd08-71557ce6be05/export 2026-09-30T21:10:25.310193+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5572c749-a691-40fe-bd08-71557ce6be05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwlnglobdj2s", "content": "Daily IT Security Digest \u2014 2026-09-28\n(CVE-2026-93952) that allows unauthenticated remote attackers to access privileged functions. Organizations running on-prem VeloCloud deployments must patch immediately and review system logs for any signs of unauthorized access.\nSource:", "creation_timestamp": "2026-09-28T15:37:48.437200Z"} 2026-09-28T15:37:48.437200+00:00 https://vulnerability.circl.lu/sighting/9047577b-5089-441e-bbd3-3d787ae3bcba/export 2026-09-30T21:10:25.313976+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9047577b-5089-441e-bbd3-3d787ae3bcba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mwktuc2uin2v", "content": "Arista VeloCloud Orchestrator: 2nd CVSS-10.0 CVE in 3 months. CVE-2026-93952 gives unauthenticated privileged access, actively exploited. Patch to 5.2.3.16+/6.4.2.8+ now. On 6.1.x/7.0.x? Call Arista TAC. \n\ud83c\uddec\ud83c\udde7 diesec.com/2026/09/aris...\n\ud83c\udde9\ud83c\uddea diesec.com/de/2026/09/a... \n#cybersecurity", "creation_timestamp": "2026-09-28T08:00:11.769024Z"} 2026-09-28T08:00:11.769024+00:00 https://vulnerability.circl.lu/sighting/67863e3d-2f79-4593-95b7-8da78610b021/export 2026-09-30T21:10:25.314440+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "67863e3d-2f79-4593-95b7-8da78610b021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrjsak2x", "content": "Daily IT Security Digest \u2014 2026-09-26\nmulti-person DMs), CVE-2026-100582 (HIGH, missing authorization in MS Teams channel read allowlist bypass), and CVE-2026-93952 variants affecting Discord integration, the Browser extension relay (DoS), diagnostics-prometheus, and third-party credential routing.", "creation_timestamp": "2026-09-26T05:01:58.101020Z"} 2026-09-26T05:01:58.101020+00:00 https://vulnerability.circl.lu/sighting/5e9ac148-a8eb-4db0-bc33-037cd3d17d63/export 2026-09-30T21:10:25.314750+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5e9ac148-a8eb-4db0-bc33-037cd3d17d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixorquc2x", "content": "Daily IT Security Digest \u2014 2026-09-26\nimmediately and monitor for OAuth authentication failures and TMM SIGABRT crashes. [Source](https://radar.offseq.com/threat/cve-2026-94127-missing-auth)\n\n2. **Arista VeloCloud Orchestrator Critical Zero-Day (CVE-2026-93952)**\n A critical zero-day", "creation_timestamp": "2026-09-26T05:01:55.173426Z"} 2026-09-26T05:01:55.173426+00:00 https://vulnerability.circl.lu/sighting/af1cca25-553b-4bd4-afda-fcefbd2109a8/export 2026-09-30T21:10:25.315014+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "af1cca25-553b-4bd4-afda-fcefbd2109a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwcyjmc2an23", "content": "Daily IT Security Digest \u2014 2026-09-25\nCVE-2026-93952 is a critical zero-day in on-premises Arista VeloCloud Orchestrator (versions < 5.2.3.16, < 6.4.2.8) that allows unauthenticated remote attackers to access privileged functions. Active exploitation has been observed, and administrators of on-prem", "creation_timestamp": "2026-09-25T05:02:23.270172Z"} 2026-09-25T05:02:23.270172+00:00 https://vulnerability.circl.lu/sighting/bce9736e-1dba-494a-9bae-bf953f85afce/export 2026-09-30T21:10:25.315295+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bce9736e-1dba-494a-9bae-bf953f85afce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2sjtsc2q", "content": "Daily IT Security Digest \u2014 2026-09-24\nare no workarounds \u2014 only patching resolves the issue.\nhttps://radar.offseq.com/threat/cisco-warns-ise\n\n## 6. Arista VeloCloud Orchestrator Zero-Day (CVE-2026-93952)\nAn actively exploited critical zero-day in on-premise Arista VeloCloud Orchestrator (versions", "creation_timestamp": "2026-09-24T05:02:27.651708Z"} 2026-09-24T05:02:27.651708+00:00 https://vulnerability.circl.lu/sighting/9733aea2-b7ff-4ebd-ad50-7cb3f953f95b/export 2026-09-30T21:10:25.315565+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9733aea2-b7ff-4ebd-ad50-7cb3f953f95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaelzmwpm2g", "content": "\ud83d\udcf0 Arista Rilis Patch untuk Zero-Day VeloCloud Orchestrator yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-93952-velocloud-orchestrator-zero-day/\n\n#arista #cisa #cve #cybersecurity #keamananJaringan #sd-wan #velocloud #velocloudOrchestrator #", "creation_timestamp": "2026-09-24T04:00:30.332733Z"} 2026-09-24T04:00:30.332733+00:00 https://vulnerability.circl.lu/sighting/e24d20e4-bc2c-40fa-8d12-3d8dbb9710dd/export 2026-09-30T21:10:25.315832+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e24d20e4-bc2c-40fa-8d12-3d8dbb9710dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwa7wwfqai2h", "content": "\ud83d\udccc CVE-2026-93952 - VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and... https://www.cyberhub.blog/cves/CVE-2026-93952", "creation_timestamp": "2026-09-24T02:37:07.355107Z"} 2026-09-24T02:37:07.355107+00:00 https://vulnerability.circl.lu/sighting/12bc360c-b9c7-4d6c-a623-13f799e4a406/export 2026-09-30T21:10:25.316083+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "12bc360c-b9c7-4d6c-a623-13f799e4a406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://t.me/pphm_HackerNews/3281", "content": "\ud83d\udd34 Arista patches actively exploited VeloCloud Orchestrator zero-day\n\nArista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments.\n\nVCO is a cloud-based centralized management platform that helps admins configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices.\n\nTracked as CVE-2026-93952, this maximum-severity flaw stems from an improper input validation weakness and affects VCO deployments where certificate-based authentication from the VeloCloud Edge to VeloCloud Orchestrator (VCO) is configured.", "creation_timestamp": "2026-09-23T21:02:01.000000Z"} 2026-09-23T21:02:01+00:00 https://vulnerability.circl.lu/sighting/9644c8b9-f928-426f-8e17-c492dad4d2da/export 2026-09-30T21:10:25.316339+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9644c8b9-f928-426f-8e17-c492dad4d2da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3281", "content": "\ud83d\udd34 Arista patches actively exploited VeloCloud Orchestrator zero-day\n\nArista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments.\n\nVCO is a cloud-based centralized management platform that helps admins configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices.\n\nTracked as CVE-2026-93952, this maximum-severity flaw stems from an improper input validation weakness and affects VCO deployments where certificate-based authentication from the VeloCloud Edge to VeloCloud Orchestrator (VCO) is configured.", "creation_timestamp": "2026-09-23T21:02:01.000000Z"} 2026-09-23T21:02:01+00:00