https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 13 Sep 2026 15:24:15 +0000 https://vulnerability.circl.lu/sighting/c1636d6c-12ef-4f68-84ab-6e041353c0a0/export {"uuid": "c1636d6c-12ef-4f68-84ab-6e041353c0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvdxyu76762j", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-12T21:00:29.648088Z"} {"uuid": "c1636d6c-12ef-4f68-84ab-6e041353c0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvdxyu76762j", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-12T21:00:29.648088Z"} https://vulnerability.circl.lu/sighting/c1636d6c-12ef-4f68-84ab-6e041353c0a0/export Sat, 12 Sep 2026 21:00:29 +0000 https://vulnerability.circl.lu/sighting/81251447-3006-42fd-9c7a-7cf586f065f2/export {"uuid": "81251447-3006-42fd-9c7a-7cf586f065f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3muxfoebg6u22", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-07T21:00:33.103882Z"} {"uuid": "81251447-3006-42fd-9c7a-7cf586f065f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3muxfoebg6u22", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-07T21:00:33.103882Z"} https://vulnerability.circl.lu/sighting/81251447-3006-42fd-9c7a-7cf586f065f2/export Mon, 07 Sep 2026 21:00:33 +0000 https://vulnerability.circl.lu/sighting/b20e1b8f-d445-49de-bf73-286d389c35d9/export {"uuid": "b20e1b8f-d445-49de-bf73-286d389c35d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3muuv7f7wpe2g", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-06T21:00:31.573205Z"} {"uuid": "b20e1b8f-d445-49de-bf73-286d389c35d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3muuv7f7wpe2g", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-06T21:00:31.573205Z"} https://vulnerability.circl.lu/sighting/b20e1b8f-d445-49de-bf73-286d389c35d9/export Sun, 06 Sep 2026 21:00:31 +0000 https://vulnerability.circl.lu/sighting/6105d9eb-b740-40b3-8087-ab7b6f4d5192/export {"uuid": "6105d9eb-b740-40b3-8087-ab7b6f4d5192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3museqkvw5o2j", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-05T21:00:34.456482Z"} {"uuid": "6105d9eb-b740-40b3-8087-ab7b6f4d5192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3museqkvw5o2j", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-05T21:00:34.456482Z"} https://vulnerability.circl.lu/sighting/6105d9eb-b740-40b3-8087-ab7b6f4d5192/export Sat, 05 Sep 2026 21:00:34 +0000 https://vulnerability.circl.lu/sighting/24f12d3d-47b7-4db1-a3a2-6a8a229f89cf/export {"uuid": "24f12d3d-47b7-4db1-a3a2-6a8a229f89cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupv6frp2k2b", "content": "\u7c73CISA\u3001\u300cFortiSandbox\u300d\u300cSharePoint\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3092\u8b66\u544a\n\n\u7c73\u5f53\u5c40\u306f\u3001Fortinet\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u89e3\u6790\u88fd\u54c1\u300cFortiSandbox\u300d\u3084Microsoft\u306e\u60c5\u5831\u5171\u6709\u57fa\u76e4\u300cSharePoint\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n...\n\n\u300cFortiSandbox\u300d\u306b\u95a2\u3057\u3066\u306f\u3001OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-39808\u300d\u300cCVE-2026-25089\u300d\u3092\u767b\u9332\u3057\u305f\u3002\n\n\u305d\u308c\u305e\u308c4\u6708\u30016\u6708\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u304c\u516c\u8868\u3055\u308c\u3066\u3044\u308b\u3002\u7d30\u5de5\u3057\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u3088\u3063\u3066\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30b3\u30de\u30f3\u30c9\u3084\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002...", "creation_timestamp": "2026-09-04T21:16:40.336736Z"} {"uuid": "24f12d3d-47b7-4db1-a3a2-6a8a229f89cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupv6frp2k2b", "content": "\u7c73CISA\u3001\u300cFortiSandbox\u300d\u300cSharePoint\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3092\u8b66\u544a\n\n\u7c73\u5f53\u5c40\u306f\u3001Fortinet\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u89e3\u6790\u88fd\u54c1\u300cFortiSandbox\u300d\u3084Microsoft\u306e\u60c5\u5831\u5171\u6709\u57fa\u76e4\u300cSharePoint\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n...\n\n\u300cFortiSandbox\u300d\u306b\u95a2\u3057\u3066\u306f\u3001OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-39808\u300d\u300cCVE-2026-25089\u300d\u3092\u767b\u9332\u3057\u305f\u3002\n\n\u305d\u308c\u305e\u308c4\u6708\u30016\u6708\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u304c\u516c\u8868\u3055\u308c\u3066\u3044\u308b\u3002\u7d30\u5de5\u3057\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u3088\u3063\u3066\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30b3\u30de\u30f3\u30c9\u3084\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002...", "creation_timestamp": "2026-09-04T21:16:40.336736Z"} https://vulnerability.circl.lu/sighting/24f12d3d-47b7-4db1-a3a2-6a8a229f89cf/export Fri, 04 Sep 2026 21:16:40 +0000 https://vulnerability.circl.lu/sighting/1f0a65ba-e76a-4ff5-b0a6-22d0d033b865/export {"uuid": "1f0a65ba-e76a-4ff5-b0a6-22d0d033b865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupuzpnauk2b", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date July 16, 2026\n\nCVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability \nCVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability \nCVE-2026-58644 Microsoft SharePoint Deserialization of Untrust...", "creation_timestamp": "2026-09-04T21:14:04.697831Z"} {"uuid": "1f0a65ba-e76a-4ff5-b0a6-22d0d033b865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupuzpnauk2b", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date July 16, 2026\n\nCVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability \nCVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability \nCVE-2026-58644 Microsoft SharePoint Deserialization of Untrust...", "creation_timestamp": "2026-09-04T21:14:04.697831Z"} https://vulnerability.circl.lu/sighting/1f0a65ba-e76a-4ff5-b0a6-22d0d033b865/export Fri, 04 Sep 2026 21:14:04 +0000 https://vulnerability.circl.lu/sighting/7c73b636-3a0e-4f53-ae3a-127268df0cbc/export {"uuid": "7c73b636-3a0e-4f53-ae3a-127268df0cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mufsg6oemr2v", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-08-31T21:00:41.877026Z"} {"uuid": "7c73b636-3a0e-4f53-ae3a-127268df0cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mufsg6oemr2v", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-08-31T21:00:41.877026Z"} https://vulnerability.circl.lu/sighting/7c73b636-3a0e-4f53-ae3a-127268df0cbc/export Mon, 31 Aug 2026 21:00:41 +0000 https://vulnerability.circl.lu/sighting/04651e3a-cb44-499a-b733-2ba692606acd/export {"uuid": "04651e3a-cb44-499a-b733-2ba692606acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1510", "content": "Newly Patched Fortinet Vulnerabilities Attract Immediate Attention From Threat Actors\n\nFortinet customers are being urged to secure their FortiSandbox deployments after threat intelligence researchers observed active exploitation targeting three critical vulnerabilities: CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The attacks emerged shortly after security updates became available, highlighting how quickly threat actors are weaponizing newly disclosed flaws in internet-facing security appliances.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-23T00:00:41.592497Z"} {"uuid": "04651e3a-cb44-499a-b733-2ba692606acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1510", "content": "Newly Patched Fortinet Vulnerabilities Attract Immediate Attention From Threat Actors\n\nFortinet customers are being urged to secure their FortiSandbox deployments after threat intelligence researchers observed active exploitation targeting three critical vulnerabilities: CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The attacks emerged shortly after security updates became available, highlighting how quickly threat actors are weaponizing newly disclosed flaws in internet-facing security appliances.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-23T00:00:41.592497Z"} https://vulnerability.circl.lu/sighting/04651e3a-cb44-499a-b733-2ba692606acd/export Sun, 23 Aug 2026 00:00:41 +0000 https://vulnerability.circl.lu/sighting/b53b8711-4ccb-471a-b371-8809c2d92528/export {"uuid": "b53b8711-4ccb-471a-b371-8809c2d92528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://t.me/pphm_HackerNews/1510", "content": "Newly Patched Fortinet Vulnerabilities Attract Immediate Attention From Threat Actors\n\nFortinet customers are being urged to secure their FortiSandbox deployments after threat intelligence researchers observed active exploitation targeting three critical vulnerabilities: CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The attacks emerged shortly after security updates became available, highlighting how quickly threat actors are weaponizing newly disclosed flaws in internet-facing security appliances.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-22T00:00:27.781849Z"} {"uuid": "b53b8711-4ccb-471a-b371-8809c2d92528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://t.me/pphm_HackerNews/1510", "content": "Newly Patched Fortinet Vulnerabilities Attract Immediate Attention From Threat Actors\n\nFortinet customers are being urged to secure their FortiSandbox deployments after threat intelligence researchers observed active exploitation targeting three critical vulnerabilities: CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The attacks emerged shortly after security updates became available, highlighting how quickly threat actors are weaponizing newly disclosed flaws in internet-facing security appliances.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-22T00:00:27.781849Z"} https://vulnerability.circl.lu/sighting/b53b8711-4ccb-471a-b371-8809c2d92528/export Sat, 22 Aug 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/bb6ede7b-4bb2-4a88-bf97-924ab5ce4c72/export {"uuid": "bb6ede7b-4bb2-4a88-bf97-924ab5ce4c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://t.me/pphm_HackerNews/1510", "content": "Newly Patched Fortinet Vulnerabilities Attract Immediate Attention From Threat Actors\n\nFortinet customers are being urged to secure their FortiSandbox deployments after threat intelligence researchers observed active exploitation targeting three critical vulnerabilities: CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The attacks emerged shortly after security updates became available, highlighting how quickly threat actors are weaponizing newly disclosed flaws in internet-facing security appliances.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-21T23:00:11.642886Z"} {"uuid": "bb6ede7b-4bb2-4a88-bf97-924ab5ce4c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://t.me/pphm_HackerNews/1510", "content": "Newly Patched Fortinet Vulnerabilities Attract Immediate Attention From Threat Actors\n\nFortinet customers are being urged to secure their FortiSandbox deployments after threat intelligence researchers observed active exploitation targeting three critical vulnerabilities: CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The attacks emerged shortly after security updates became available, highlighting how quickly threat actors are weaponizing newly disclosed flaws in internet-facing security appliances.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-21T23:00:11.642886Z"} https://vulnerability.circl.lu/sighting/bb6ede7b-4bb2-4a88-bf97-924ab5ce4c72/export Fri, 21 Aug 2026 23:00:11 +0000