https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 21:53:47 +0000 https://vulnerability.circl.lu/sighting/5ae821b4-8ee8-4793-b816-0ed9abb14e20/export {"uuid": "5ae821b4-8ee8-4793-b816-0ed9abb14e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0298", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3ssspha23", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0298", "creation_timestamp": "2026-09-12T03:03:22.288970Z"} {"uuid": "5ae821b4-8ee8-4793-b816-0ed9abb14e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0298", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3ssspha23", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0298", "creation_timestamp": "2026-09-12T03:03:22.288970Z"} https://vulnerability.circl.lu/sighting/5ae821b4-8ee8-4793-b816-0ed9abb14e20/export Sat, 12 Sep 2026 03:03:22 +0000 https://vulnerability.circl.lu/sighting/6e848be9-a3c3-4088-bf3c-5a6fa5c10c6e/export {"uuid": "6e848be9-a3c3-4088-bf3c-5a6fa5c10c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0295", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3ssa24r2i", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0295", "creation_timestamp": "2026-09-12T03:03:21.393720Z"} {"uuid": "6e848be9-a3c3-4088-bf3c-5a6fa5c10c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0295", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3ssa24r2i", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0295", "creation_timestamp": "2026-09-12T03:03:21.393720Z"} https://vulnerability.circl.lu/sighting/6e848be9-a3c3-4088-bf3c-5a6fa5c10c6e/export Sat, 12 Sep 2026 03:03:21 +0000 https://vulnerability.circl.lu/sighting/ed10e632-b741-4dff-8cf9-dfdd1355f795/export {"uuid": "ed10e632-b741-4dff-8cf9-dfdd1355f795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0299", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3srljvk27", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0299", "creation_timestamp": "2026-09-12T03:03:20.632779Z"} {"uuid": "ed10e632-b741-4dff-8cf9-dfdd1355f795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0299", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3srljvk27", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0299", "creation_timestamp": "2026-09-12T03:03:20.632779Z"} https://vulnerability.circl.lu/sighting/ed10e632-b741-4dff-8cf9-dfdd1355f795/export Sat, 12 Sep 2026 03:03:20 +0000 https://vulnerability.circl.lu/sighting/4425291e-3ef2-42e4-867b-8717e99532f8/export {"uuid": "4425291e-3ef2-42e4-867b-8717e99532f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0297", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3sqwmxc27", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0297", "creation_timestamp": "2026-09-12T03:03:19.978857Z"} {"uuid": "4425291e-3ef2-42e4-867b-8717e99532f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0297", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3sqwmxc27", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0297", "creation_timestamp": "2026-09-12T03:03:19.978857Z"} https://vulnerability.circl.lu/sighting/4425291e-3ef2-42e4-867b-8717e99532f8/export Sat, 12 Sep 2026 03:03:19 +0000 https://vulnerability.circl.lu/sighting/a4b7c1bd-4ecf-4f28-808f-518cda99f18c/export {"uuid": "a4b7c1bd-4ecf-4f28-808f-518cda99f18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0250", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3sqas5p2a", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0250", "creation_timestamp": "2026-09-12T03:03:19.252401Z"} {"uuid": "a4b7c1bd-4ecf-4f28-808f-518cda99f18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0250", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3sqas5p2a", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0250", "creation_timestamp": "2026-09-12T03:03:19.252401Z"} https://vulnerability.circl.lu/sighting/a4b7c1bd-4ecf-4f28-808f-518cda99f18c/export Sat, 12 Sep 2026 03:03:19 +0000 https://vulnerability.circl.lu/sighting/728280f7-0652-47d4-959f-31207695d03a/export {"uuid": "728280f7-0652-47d4-959f-31207695d03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0296", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3soxdbj2s", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0296", "creation_timestamp": "2026-09-12T03:03:18.044359Z"} {"uuid": "728280f7-0652-47d4-959f-31207695d03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0296", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvc3soxdbj2s", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0296", "creation_timestamp": "2026-09-12T03:03:18.044359Z"} https://vulnerability.circl.lu/sighting/728280f7-0652-47d4-959f-31207695d03a/export Sat, 12 Sep 2026 03:03:18 +0000 https://vulnerability.circl.lu/sighting/0b7281b9-d103-4b4c-ad87-5dc755b5164b/export {"uuid": "0b7281b9-d103-4b4c-ad87-5dc755b5164b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/117248381496856559", "content": "The highest-volume malicious activity GreyNoise observed this week was a request for a file. Environment files, cloud configuration and repository configuration are all returned by a correctly functioning web server to anyone who asks for the right path.\nRented hosts forged the Googlebot identity while requesting environment files and cloud configuration, producing roughly two thirds of all forged search engine crawler traffic observed, and passing unchanged through the relaxed rate limiting many servers grant crawlers by user agent. Separately, adversaries attempted a GlobalProtect authentication bypass, CVE-2026-0257, from 64 exclusively malicious sources on one day against zero or one on every other day of the window. It is CVSS 9.1 and in CISA's Known Exploited Vulnerabilities catalog. Verify crawlers by source address, and alert on first sighting instead of on rate.\nCustomers get the full weekly brief. Our public At The Edge one-pager is attached + \ud83d\udd17 https://www.greynoise.io/resources/at-the-edge-090726", "creation_timestamp": "2026-09-10T19:25:22.113114Z"} {"uuid": "0b7281b9-d103-4b4c-ad87-5dc755b5164b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/117248381496856559", "content": "The highest-volume malicious activity GreyNoise observed this week was a request for a file. Environment files, cloud configuration and repository configuration are all returned by a correctly functioning web server to anyone who asks for the right path.\nRented hosts forged the Googlebot identity while requesting environment files and cloud configuration, producing roughly two thirds of all forged search engine crawler traffic observed, and passing unchanged through the relaxed rate limiting many servers grant crawlers by user agent. Separately, adversaries attempted a GlobalProtect authentication bypass, CVE-2026-0257, from 64 exclusively malicious sources on one day against zero or one on every other day of the window. It is CVSS 9.1 and in CISA's Known Exploited Vulnerabilities catalog. Verify crawlers by source address, and alert on first sighting instead of on rate.\nCustomers get the full weekly brief. Our public At The Edge one-pager is attached + \ud83d\udd17 https://www.greynoise.io/resources/at-the-edge-090726", "creation_timestamp": "2026-09-10T19:25:22.113114Z"} https://vulnerability.circl.lu/sighting/0b7281b9-d103-4b4c-ad87-5dc755b5164b/export Thu, 10 Sep 2026 19:25:22 +0000 https://vulnerability.circl.lu/sighting/2fc11c2a-a357-4b05-ac06-ceb5e71c6017/export {"uuid": "2fc11c2a-a357-4b05-ac06-ceb5e71c6017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0265", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/panos_cve_2026_0265.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Bishop Fox Team X\", \"Rapid7 Research / Deral Heiland adaptation\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module checks a PAN-OS GlobalProtect portal for CVE-2026-0265\\n using the Bishop Fox scanner decision flow. It performs anonymous\\n GET requests to the GlobalProtect prelogin endpoint, retrying transient\\n failures and HTTP 503 responses, then checks\\n whether CAS authentication is enabled, decodes the embedded SAML/JWT\\n token when present, extracts PanOSversion, and compares it against\\n the advisory version matrix.\", \"disclosure_date\": \"2026-05-21\", \"fullname\": \"auxiliary/scanner/http/panos_cve_2026_0265\", \"is_install_path\": true, \"mod_time\": \"2026-08-25 16:21:22 +0000\", \"name\": \"PAN-OS GlobalProtect CAS CVE-2026-0265 Vulnerability Checker\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/panos_cve_2026_0265.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/panos_cve_2026_0265\", \"references\": [\"CVE-2026-0265\", \"URL-https://security.paloaltonetworks.com/CVE-2026-0265\", \"URL-https://github.com/BishopFox/CVE-2026-0265-check\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:49.990716Z"} {"uuid": "2fc11c2a-a357-4b05-ac06-ceb5e71c6017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0265", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/panos_cve_2026_0265.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Bishop Fox Team X\", \"Rapid7 Research / Deral Heiland adaptation\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module checks a PAN-OS GlobalProtect portal for CVE-2026-0265\\n using the Bishop Fox scanner decision flow. It performs anonymous\\n GET requests to the GlobalProtect prelogin endpoint, retrying transient\\n failures and HTTP 503 responses, then checks\\n whether CAS authentication is enabled, decodes the embedded SAML/JWT\\n token when present, extracts PanOSversion, and compares it against\\n the advisory version matrix.\", \"disclosure_date\": \"2026-05-21\", \"fullname\": \"auxiliary/scanner/http/panos_cve_2026_0265\", \"is_install_path\": true, \"mod_time\": \"2026-08-25 16:21:22 +0000\", \"name\": \"PAN-OS GlobalProtect CAS CVE-2026-0265 Vulnerability Checker\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/panos_cve_2026_0265.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/panos_cve_2026_0265\", \"references\": [\"CVE-2026-0265\", \"URL-https://security.paloaltonetworks.com/CVE-2026-0265\", \"URL-https://github.com/BishopFox/CVE-2026-0265-check\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:49.990716Z"} https://vulnerability.circl.lu/sighting/2fc11c2a-a357-4b05-ac06-ceb5e71c6017/export Tue, 08 Sep 2026 06:47:49 +0000 https://vulnerability.circl.lu/sighting/53ba17ac-4538-4b25-9af2-0705b7a0370b/export {"uuid": "53ba17ac-4538-4b25-9af2-0705b7a0370b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:51.725619Z"} {"uuid": "53ba17ac-4538-4b25-9af2-0705b7a0370b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:51.725619Z"} https://vulnerability.circl.lu/sighting/53ba17ac-4538-4b25-9af2-0705b7a0370b/export Tue, 08 Sep 2026 00:00:51 +0000 https://vulnerability.circl.lu/sighting/dd35853f-56a3-4dbe-a7e7-0f7eb8f276a2/export {"uuid": "dd35853f-56a3-4dbe-a7e7-0f7eb8f276a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:05.247620Z"} {"uuid": "dd35853f-56a3-4dbe-a7e7-0f7eb8f276a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:05.247620Z"} https://vulnerability.circl.lu/sighting/dd35853f-56a3-4dbe-a7e7-0f7eb8f276a2/export Mon, 07 Sep 2026 08:00:05 +0000