<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 16:59:29 +0000</lastBuildDate>
    <item>
      <title>33c78f3a-d2ff-4f8e-8171-946ff2ce8968</title>
      <link>https://vulnerability.circl.lu/sighting/33c78f3a-d2ff-4f8e-8171-946ff2ce8968/export</link>
      <description>{"uuid": "33c78f3a-d2ff-4f8e-8171-946ff2ce8968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43287", "content": "CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability\n\nCISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659). \nThe post CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/cisa-warns-of-actively-exploited-microsoft-sharepoint-vulnerability/", "creation_timestamp": "2026-09-18T05:00:04.832741Z"}</description>
      <content:encoded>{"uuid": "33c78f3a-d2ff-4f8e-8171-946ff2ce8968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43287", "content": "CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability\n\nCISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659). \nThe post CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/cisa-warns-of-actively-exploited-microsoft-sharepoint-vulnerability/", "creation_timestamp": "2026-09-18T05:00:04.832741Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/33c78f3a-d2ff-4f8e-8171-946ff2ce8968/export</guid>
      <pubDate>Fri, 18 Sep 2026 05:00:04 +0000</pubDate>
    </item>
    <item>
      <title>cb182f73-aa65-462b-948f-0d974df88314</title>
      <link>https://vulnerability.circl.lu/sighting/cb182f73-aa65-462b-948f-0d974df88314/export</link>
      <description>{"uuid": "cb182f73-aa65-462b-948f-0d974df88314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45659", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117282536315348210", "content": "CVE-2026-45659: SharePoint Authenticated Deserialization RCE#CVE_2026_45659 https://blog.securelayer7.net/cve-2026-45659-sharepoint-deserialization-rce/", "creation_timestamp": "2026-09-16T20:11:22.990267Z"}</description>
      <content:encoded>{"uuid": "cb182f73-aa65-462b-948f-0d974df88314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45659", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117282536315348210", "content": "CVE-2026-45659: SharePoint Authenticated Deserialization RCE#CVE_2026_45659 https://blog.securelayer7.net/cve-2026-45659-sharepoint-deserialization-rce/", "creation_timestamp": "2026-09-16T20:11:22.990267Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cb182f73-aa65-462b-948f-0d974df88314/export</guid>
      <pubDate>Wed, 16 Sep 2026 20:11:22 +0000</pubDate>
    </item>
    <item>
      <title>b950e2ec-acc9-4e0b-9b72-f419f81e503a</title>
      <link>https://vulnerability.circl.lu/sighting/b950e2ec-acc9-4e0b-9b72-f419f81e503a/export</link>
      <description>{"uuid": "b950e2ec-acc9-4e0b-9b72-f419f81e503a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupw5douy22b", "content": "\u300cSharePoint Server\u300d\u306e\u8907\u6570\u8106\u5f31\u6027\u60aa\u7528\u3067\u5bfe\u7b56\u547c\u3073\u304b\u3051 - \u7c73\u5f53\u5c40\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cSharePoint Server\u300d\u306b\u95a2\u3059\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3001\u5229\u7528\u8005\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n\u540c\u88fd\u54c1\u306b\u95a2\u3057\u3066\u3001\u300cCVE-2026-32201\u300d\u300cCVE-2026-45659\u300d\u300cCVE-2026-56164\u300d\u300cCVE-2026-58644\u300d\u306e4\u4ef6\u3092\u6319\u3052\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u307e\u305f\u60aa\u7528\u306f\u78ba\u8a8d\u3055\u308c\u3066\u3044\u306a\u3044\u3082\u306e\u306e\u300cCVE-2026-55040\u300d\u306b\u3064\u3044\u3066\u3082\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u306f\u30ea\u30b9\u30af\u304c\u9ad8...", "creation_timestamp": "2026-09-04T21:33:59.136253Z"}</description>
      <content:encoded>{"uuid": "b950e2ec-acc9-4e0b-9b72-f419f81e503a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupw5douy22b", "content": "\u300cSharePoint Server\u300d\u306e\u8907\u6570\u8106\u5f31\u6027\u60aa\u7528\u3067\u5bfe\u7b56\u547c\u3073\u304b\u3051 - \u7c73\u5f53\u5c40\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cSharePoint Server\u300d\u306b\u95a2\u3059\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3001\u5229\u7528\u8005\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n\u540c\u88fd\u54c1\u306b\u95a2\u3057\u3066\u3001\u300cCVE-2026-32201\u300d\u300cCVE-2026-45659\u300d\u300cCVE-2026-56164\u300d\u300cCVE-2026-58644\u300d\u306e4\u4ef6\u3092\u6319\u3052\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u307e\u305f\u60aa\u7528\u306f\u78ba\u8a8d\u3055\u308c\u3066\u3044\u306a\u3044\u3082\u306e\u306e\u300cCVE-2026-55040\u300d\u306b\u3064\u3044\u3066\u3082\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u306f\u30ea\u30b9\u30af\u304c\u9ad8...", "creation_timestamp": "2026-09-04T21:33:59.136253Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b950e2ec-acc9-4e0b-9b72-f419f81e503a/export</guid>
      <pubDate>Fri, 04 Sep 2026 21:33:59 +0000</pubDate>
    </item>
    <item>
      <title>93e91fcd-4248-4d66-85ea-32f3c1e76e9d</title>
      <link>https://vulnerability.circl.lu/sighting/93e91fcd-4248-4d66-85ea-32f3c1e76e9d/export</link>
      <description>{"uuid": "93e91fcd-4248-4d66-85ea-32f3c1e76e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mujpn36edk2w", "content": "\ud83d\udee1\ufe0f CVE-2026-45659 | CISA ordena parche urgente para Microsoft SharePoint: Vulnerabilidad de Ejecuci\u00f3n Remota de C\u00f3digo www.newstecnicas.com/2026/07/cisa...", "creation_timestamp": "2026-09-02T10:21:32.966066Z"}</description>
      <content:encoded>{"uuid": "93e91fcd-4248-4d66-85ea-32f3c1e76e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mujpn36edk2w", "content": "\ud83d\udee1\ufe0f CVE-2026-45659 | CISA ordena parche urgente para Microsoft SharePoint: Vulnerabilidad de Ejecuci\u00f3n Remota de C\u00f3digo www.newstecnicas.com/2026/07/cisa...", "creation_timestamp": "2026-09-02T10:21:32.966066Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/93e91fcd-4248-4d66-85ea-32f3c1e76e9d/export</guid>
      <pubDate>Wed, 02 Sep 2026 10:21:32 +0000</pubDate>
    </item>
    <item>
      <title>7c2b4740-b026-4c43-ac47-5fd6866e2a71</title>
      <link>https://vulnerability.circl.lu/sighting/7c2b4740-b026-4c43-ac47-5fd6866e2a71/export</link>
      <description>{"uuid": "7c2b4740-b026-4c43-ac47-5fd6866e2a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/CyberDispatch/2191", "content": "CISA added CVE-2026-45659 to KEV following active exploitation.\n\nThe SharePoint Server RCE was patched in May 2026.", "creation_timestamp": "2026-08-30T00:00:28.409798Z"}</description>
      <content:encoded>{"uuid": "7c2b4740-b026-4c43-ac47-5fd6866e2a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/CyberDispatch/2191", "content": "CISA added CVE-2026-45659 to KEV following active exploitation.\n\nThe SharePoint Server RCE was patched in May 2026.", "creation_timestamp": "2026-08-30T00:00:28.409798Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7c2b4740-b026-4c43-ac47-5fd6866e2a71/export</guid>
      <pubDate>Sun, 30 Aug 2026 00:00:28 +0000</pubDate>
    </item>
    <item>
      <title>7e7880f9-3f45-44ee-addb-4afa62cdce7a</title>
      <link>https://vulnerability.circl.lu/sighting/7e7880f9-3f45-44ee-addb-4afa62cdce7a/export</link>
      <description>{"uuid": "7e7880f9-3f45-44ee-addb-4afa62cdce7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://t.me/CyberDispatch/2191", "content": "CISA added CVE-2026-45659 to KEV following active exploitation.\n\nThe SharePoint Server RCE was patched in May 2026.", "creation_timestamp": "2026-08-29T20:00:08.011042Z"}</description>
      <content:encoded>{"uuid": "7e7880f9-3f45-44ee-addb-4afa62cdce7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://t.me/CyberDispatch/2191", "content": "CISA added CVE-2026-45659 to KEV following active exploitation.\n\nThe SharePoint Server RCE was patched in May 2026.", "creation_timestamp": "2026-08-29T20:00:08.011042Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7e7880f9-3f45-44ee-addb-4afa62cdce7a/export</guid>
      <pubDate>Sat, 29 Aug 2026 20:00:08 +0000</pubDate>
    </item>
    <item>
      <title>0057db71-326a-4402-8af9-dd5b80ecdf6e</title>
      <link>https://vulnerability.circl.lu/sighting/0057db71-326a-4402-8af9-dd5b80ecdf6e/export</link>
      <description>{"uuid": "0057db71-326a-4402-8af9-dd5b80ecdf6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/430", "content": "CVE-2026-45659\n\nDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", "creation_timestamp": "2026-08-28T00:00:33.517048Z"}</description>
      <content:encoded>{"uuid": "0057db71-326a-4402-8af9-dd5b80ecdf6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/430", "content": "CVE-2026-45659\n\nDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", "creation_timestamp": "2026-08-28T00:00:33.517048Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0057db71-326a-4402-8af9-dd5b80ecdf6e/export</guid>
      <pubDate>Fri, 28 Aug 2026 00:00:33 +0000</pubDate>
    </item>
    <item>
      <title>38518755-e36a-4afb-8fb9-68be61e3a8a4</title>
      <link>https://vulnerability.circl.lu/sighting/38518755-e36a-4afb-8fb9-68be61e3a8a4/export</link>
      <description>{"uuid": "38518755-e36a-4afb-8fb9-68be61e3a8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://t.me/cve0day/430", "content": "CVE-2026-45659\n\nDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", "creation_timestamp": "2026-08-27T15:00:06.989783Z"}</description>
      <content:encoded>{"uuid": "38518755-e36a-4afb-8fb9-68be61e3a8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://t.me/cve0day/430", "content": "CVE-2026-45659\n\nDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", "creation_timestamp": "2026-08-27T15:00:06.989783Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/38518755-e36a-4afb-8fb9-68be61e3a8a4/export</guid>
      <pubDate>Thu, 27 Aug 2026 15:00:06 +0000</pubDate>
    </item>
    <item>
      <title>609c40f9-f74b-4631-8f21-fbc500e9c2c7</title>
      <link>https://vulnerability.circl.lu/sighting/609c40f9-f74b-4631-8f21-fbc500e9c2c7/export</link>
      <description>{"uuid": "609c40f9-f74b-4631-8f21-fbc500e9c2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mtrihhujls2w", "content": "\ud83d\udea8 Gu\u00eda de remediaci\u00f3n urgente: Vulnerabilidad RCE en SharePoint (CVE-2026-45659) www.newstecnicas.com/2026/05/guia...", "creation_timestamp": "2026-08-23T19:09:12.719596Z"}</description>
      <content:encoded>{"uuid": "609c40f9-f74b-4631-8f21-fbc500e9c2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mtrihhujls2w", "content": "\ud83d\udea8 Gu\u00eda de remediaci\u00f3n urgente: Vulnerabilidad RCE en SharePoint (CVE-2026-45659) www.newstecnicas.com/2026/05/guia...", "creation_timestamp": "2026-08-23T19:09:12.719596Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/609c40f9-f74b-4631-8f21-fbc500e9c2c7/export</guid>
      <pubDate>Sun, 23 Aug 2026 19:09:12 +0000</pubDate>
    </item>
    <item>
      <title>e422d10b-4a76-4717-b9f6-29071e0fafc2</title>
      <link>https://vulnerability.circl.lu/sighting/e422d10b-4a76-4717-b9f6-29071e0fafc2/export</link>
      <description>{"uuid": "e422d10b-4a76-4717-b9f6-29071e0fafc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1758", "content": "\ud83d\udd34 SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case of remote code execution arising from the deserialization of untrusted data. The issue was addressed by Microsoft in May 2026 for SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.\n\nMicrosoft noted that any authenticated attacker could trigger the vulnerability, and that it does not require admin or other elevated privileges. In a network-based attack, an authenticated attacker with a minimum of Site Member permissions (PR:L) could leverage it to execute code remotely on the SharePoint Server.", "creation_timestamp": "2026-08-23T00:00:42.139464Z"}</description>
      <content:encoded>{"uuid": "e422d10b-4a76-4717-b9f6-29071e0fafc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45659", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1758", "content": "\ud83d\udd34 SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case of remote code execution arising from the deserialization of untrusted data. The issue was addressed by Microsoft in May 2026 for SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.\n\nMicrosoft noted that any authenticated attacker could trigger the vulnerability, and that it does not require admin or other elevated privileges. In a network-based attack, an authenticated attacker with a minimum of Site Member permissions (PR:L) could leverage it to execute code remotely on the SharePoint Server.", "creation_timestamp": "2026-08-23T00:00:42.139464Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e422d10b-4a76-4717-b9f6-29071e0fafc2/export</guid>
      <pubDate>Sun, 23 Aug 2026 00:00:42 +0000</pubDate>
    </item>
  </channel>
</rss>
