<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 05:52:56 +0000</lastBuildDate>
    <item>
      <title>74760fd3-0f10-45e9-86b2-e9389e58f460</title>
      <link>https://vulnerability.circl.lu/sighting/74760fd3-0f10-45e9-86b2-e9389e58f460/export</link>
      <description>{"uuid": "74760fd3-0f10-45e9-86b2-e9389e58f460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75937", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwx2hsq6pv2j", "content": "CRITICAL: CVE-2026-75937 in Digi IX Family enables unauthenticated root command execution via web admin. Disable web server if not in use. Patch not yet available. https://radar.offseq.com/threat/cve-2026-75937-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-de...", "creation_timestamp": "2026-10-03T04:30:25.977827Z"}</description>
      <content:encoded>{"uuid": "74760fd3-0f10-45e9-86b2-e9389e58f460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75937", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwx2hsq6pv2j", "content": "CRITICAL: CVE-2026-75937 in Digi IX Family enables unauthenticated root command execution via web admin. Disable web server if not in use. Patch not yet available. https://radar.offseq.com/threat/cve-2026-75937-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-de...", "creation_timestamp": "2026-10-03T04:30:25.977827Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/74760fd3-0f10-45e9-86b2-e9389e58f460/export</guid>
      <pubDate>Sat, 03 Oct 2026 04:30:25 +0000</pubDate>
    </item>
    <item>
      <title>5fd103af-7c2a-4b31-9871-e606be695ea9</title>
      <link>https://vulnerability.circl.lu/sighting/5fd103af-7c2a-4b31-9871-e606be695ea9/export</link>
      <description>{"uuid": "5fd103af-7c2a-4b31-9871-e606be695ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75937", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117375095480797763", "content": "Digi IX Family devices hit by CRITICAL OS command injection (CVE-2026-75937, CVSS 9.4). Unauthenticated remote attackers can execute root commands via HTTP POST. Disable web admin interface to reduce risk. https://radar.offseq.com/threat/cve-2026-75937-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-deedd882034e65bf #OffSeq #Vulnerability #IoT #Infosec", "creation_timestamp": "2026-10-03T04:30:23.899361Z"}</description>
      <content:encoded>{"uuid": "5fd103af-7c2a-4b31-9871-e606be695ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75937", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117375095480797763", "content": "Digi IX Family devices hit by CRITICAL OS command injection (CVE-2026-75937, CVSS 9.4). Unauthenticated remote attackers can execute root commands via HTTP POST. Disable web admin interface to reduce risk. https://radar.offseq.com/threat/cve-2026-75937-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-deedd882034e65bf #OffSeq #Vulnerability #IoT #Infosec", "creation_timestamp": "2026-10-03T04:30:23.899361Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5fd103af-7c2a-4b31-9871-e606be695ea9/export</guid>
      <pubDate>Sat, 03 Oct 2026 04:30:23 +0000</pubDate>
    </item>
    <item>
      <title>e601b1d6-86d2-499b-b376-81ec94e9c1a9</title>
      <link>https://vulnerability.circl.lu/sighting/e601b1d6-86d2-499b-b376-81ec94e9c1a9/export</link>
      <description>{"uuid": "e601b1d6-86d2-499b-b376-81ec94e9c1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwf3n2nqa2h", "content": "\ud83d\udea8 CVE-2026-75937 \u2014 CVSS 9.4 CRITICAL\n\nA specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75937\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T22:07:47.995543Z"}</description>
      <content:encoded>{"uuid": "e601b1d6-86d2-499b-b376-81ec94e9c1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwf3n2nqa2h", "content": "\ud83d\udea8 CVE-2026-75937 \u2014 CVSS 9.4 CRITICAL\n\nA specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75937\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T22:07:47.995543Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e601b1d6-86d2-499b-b376-81ec94e9c1a9/export</guid>
      <pubDate>Fri, 02 Oct 2026 22:07:47 +0000</pubDate>
    </item>
    <item>
      <title>77fdf8a0-0be5-4bbb-a2b1-1c3ba6fff4f3</title>
      <link>https://vulnerability.circl.lu/sighting/77fdf8a0-0be5-4bbb-a2b1-1c3ba6fff4f3/export</link>
      <description>{"uuid": "77fdf8a0-0be5-4bbb-a2b1-1c3ba6fff4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwweo5phq222", "content": "Digi DAL OS vulnerability CVE-2026-75937 (CVSS 9.4) lets attackers run root commands on Digi Accelerated Linux devices. Patch now.\n\n#Digi #DALOS #CVE202675937 #CommandInjection #IoTSecurity #OTSecurity #Vulnerability", "creation_timestamp": "2026-10-02T22:00:16.819180Z"}</description>
      <content:encoded>{"uuid": "77fdf8a0-0be5-4bbb-a2b1-1c3ba6fff4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwweo5phq222", "content": "Digi DAL OS vulnerability CVE-2026-75937 (CVSS 9.4) lets attackers run root commands on Digi Accelerated Linux devices. Patch now.\n\n#Digi #DALOS #CVE202675937 #CommandInjection #IoTSecurity #OTSecurity #Vulnerability", "creation_timestamp": "2026-10-02T22:00:16.819180Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/77fdf8a0-0be5-4bbb-a2b1-1c3ba6fff4f3/export</guid>
      <pubDate>Fri, 02 Oct 2026 22:00:16 +0000</pubDate>
    </item>
    <item>
      <title>08c835e1-be2e-4cd8-96f4-3ec5aa13c596</title>
      <link>https://vulnerability.circl.lu/sighting/08c835e1-be2e-4cd8-96f4-3ec5aa13c596/export</link>
      <description>{"uuid": "08c835e1-be2e-4cd8-96f4-3ec5aa13c596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6isehgai3ro7y", "content": "CVE-2026-75937 - OS Command Injection in Digi Accelerated Linux (DAL OS)\nCVE ID : CVE-2026-75937\n \n Published : Oct. 2, 2026, 8:33 p.m. | 28\u00a0minutes ago\n \n Description : A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacke...", "creation_timestamp": "2026-10-02T21:40:15.381657Z"}</description>
      <content:encoded>{"uuid": "08c835e1-be2e-4cd8-96f4-3ec5aa13c596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6isehgai3ro7y", "content": "CVE-2026-75937 - OS Command Injection in Digi Accelerated Linux (DAL OS)\nCVE ID : CVE-2026-75937\n \n Published : Oct. 2, 2026, 8:33 p.m. | 28\u00a0minutes ago\n \n Description : A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacke...", "creation_timestamp": "2026-10-02T21:40:15.381657Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/08c835e1-be2e-4cd8-96f4-3ec5aa13c596/export</guid>
      <pubDate>Fri, 02 Oct 2026 21:40:15 +0000</pubDate>
    </item>
  </channel>
</rss>
