https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 12 Sep 2026 21:34:03 +0000 https://vulnerability.circl.lu/sighting/f0f6b010-6f85-46bd-84bf-11a2f206feb6/export {"uuid": "f0f6b010-6f85-46bd-84bf-11a2f206feb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvdrpesjdd2l", "content": "CISA added 5 actively exploited flaws to KEV: ScreenConnect CVE-2026-84869 (CVSS 9.9), Artifactory and RouterOS bugs up to CVSS 9.2. Patch ScreenConnect to 26.6.5+ now. https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "creation_timestamp": "2026-09-12T19:07:48.784328Z"} {"uuid": "f0f6b010-6f85-46bd-84bf-11a2f206feb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvdrpesjdd2l", "content": "CISA added 5 actively exploited flaws to KEV: ScreenConnect CVE-2026-84869 (CVSS 9.9), Artifactory and RouterOS bugs up to CVSS 9.2. Patch ScreenConnect to 26.6.5+ now. https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "creation_timestamp": "2026-09-12T19:07:48.784328Z"} https://vulnerability.circl.lu/sighting/f0f6b010-6f85-46bd-84bf-11a2f206feb6/export Sat, 12 Sep 2026 19:07:48 +0000 https://vulnerability.circl.lu/sighting/7946194f-b69f-4023-b55e-6e1886d4517e/export {"uuid": "7946194f-b69f-4023-b55e-6e1886d4517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvchfo4vgx23", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-84869: \u26a0\ufe0f CVE-2026-84869: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-84869-a-condition-in-the-screenconnect-client", "creation_timestamp": "2026-09-12T06:30:45.903404Z"} {"uuid": "7946194f-b69f-4023-b55e-6e1886d4517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvchfo4vgx23", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-84869: \u26a0\ufe0f CVE-2026-84869: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-84869-a-condition-in-the-screenconnect-client", "creation_timestamp": "2026-09-12T06:30:45.903404Z"} https://vulnerability.circl.lu/sighting/7946194f-b69f-4023-b55e-6e1886d4517e/export Sat, 12 Sep 2026 06:30:45 +0000 https://vulnerability.circl.lu/sighting/9414d082-ad0b-4dee-a7e5-0af1322948a3/export {"uuid": "9414d082-ad0b-4dee-a7e5-0af1322948a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvbyoaaqym2k", "content": "\ud83d\udccc CVE-2026-84869 - A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host ... https://www.cyberhub.blog/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T02:07:07.903086Z"} {"uuid": "9414d082-ad0b-4dee-a7e5-0af1322948a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvbyoaaqym2k", "content": "\ud83d\udccc CVE-2026-84869 - A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host ... https://www.cyberhub.blog/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T02:07:07.903086Z"} https://vulnerability.circl.lu/sighting/9414d082-ad0b-4dee-a7e5-0af1322948a3/export Sat, 12 Sep 2026 02:07:07 +0000 https://vulnerability.circl.lu/sighting/709329c7-309a-4b0f-88a1-72800c0346b1/export {"uuid": "709329c7-309a-4b0f-88a1-72800c0346b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvbssao6td2u", "content": "CVE-2026-84869 is trending. Hype score 7, currently #7 on cvemon.\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T00:21:59.559771Z"} {"uuid": "709329c7-309a-4b0f-88a1-72800c0346b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvbssao6td2u", "content": "CVE-2026-84869 is trending. Hype score 7, currently #7 on cvemon.\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T00:21:59.559771Z"} https://vulnerability.circl.lu/sighting/709329c7-309a-4b0f-88a1-72800c0346b1/export Sat, 12 Sep 2026 00:21:59 +0000 https://vulnerability.circl.lu/sighting/6f027be6-40db-49ce-8e0d-247ccfd418d9/export {"uuid": "6f027be6-40db-49ce-8e0d-247ccfd418d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvbmyx4f3p2l", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-84869", "creation_timestamp": "2026-09-11T22:38:21.965002Z"} {"uuid": "6f027be6-40db-49ce-8e0d-247ccfd418d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvbmyx4f3p2l", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-84869", "creation_timestamp": "2026-09-11T22:38:21.965002Z"} https://vulnerability.circl.lu/sighting/6f027be6-40db-49ce-8e0d-247ccfd418d9/export Fri, 11 Sep 2026 22:38:21 +0000 https://vulnerability.circl.lu/sighting/08296ddb-1d18-45df-8b21-64089a761b60/export {"uuid": "08296ddb-1d18-45df-8b21-64089a761b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://gist.github.com/ichintu/8151c2994398b20c3f2c1cd0ecf05f94", "content": "This daily threat intelligence roundup consolidates critical software vulnerabilities, active exploitation campaigns, AI security threats, and infrastructure updates:\n\n**Critical Vulnerabilities & Patches:** Security advisories cover patched flaws in n8n, Progress Chef Automate, and Laci Synchroni (CVE-2026-54047), which allows critical account takeover via client-side config manipulation. An ST Engineering VSAT terminal flaw (CVE-2026-38056) exploits a factory pre-configured account, threatening critical infrastructure. \n\n**Active Exploitation:** A CVSS 10 file-read vulnerability in GitLab was rapidly probed in the wild shortly after disclosure. ConnectWise ScreenConnect (CVE-2026-84869) was actively exploited and added to CISA\u2019s KEV database before a patch was released, enabling unauthorized file transfer and execution during remote sessions.\n\n**AI Security & Community:** Anthropic reported unauthorized, industrial-scale Claude model distillation attacks by seven Chinese AI labs. This coincides with a widely viewed DEF CON talk on offensive AI hacking and a Reddit AMA on macOS offensive security.\n\n**Infrastructure Updates:** Microsoft is redirecting Teams and Copilot traffic to new cloud domains (`teams.cloud.microsoft` and `copilot.cloud.microsoft`). Organizations must immediately update firewall, proxy, and secure web gateway rules to maintain access and adjust tenant restrictions.", "creation_timestamp": "2026-09-11T20:03:10.462702Z"} {"uuid": "08296ddb-1d18-45df-8b21-64089a761b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://gist.github.com/ichintu/8151c2994398b20c3f2c1cd0ecf05f94", "content": "This daily threat intelligence roundup consolidates critical software vulnerabilities, active exploitation campaigns, AI security threats, and infrastructure updates:\n\n**Critical Vulnerabilities & Patches:** Security advisories cover patched flaws in n8n, Progress Chef Automate, and Laci Synchroni (CVE-2026-54047), which allows critical account takeover via client-side config manipulation. An ST Engineering VSAT terminal flaw (CVE-2026-38056) exploits a factory pre-configured account, threatening critical infrastructure. \n\n**Active Exploitation:** A CVSS 10 file-read vulnerability in GitLab was rapidly probed in the wild shortly after disclosure. ConnectWise ScreenConnect (CVE-2026-84869) was actively exploited and added to CISA\u2019s KEV database before a patch was released, enabling unauthorized file transfer and execution during remote sessions.\n\n**AI Security & Community:** Anthropic reported unauthorized, industrial-scale Claude model distillation attacks by seven Chinese AI labs. This coincides with a widely viewed DEF CON talk on offensive AI hacking and a Reddit AMA on macOS offensive security.\n\n**Infrastructure Updates:** Microsoft is redirecting Teams and Copilot traffic to new cloud domains (`teams.cloud.microsoft` and `copilot.cloud.microsoft`). Organizations must immediately update firewall, proxy, and secure web gateway rules to maintain access and adjust tenant restrictions.", "creation_timestamp": "2026-09-11T20:03:10.462702Z"} https://vulnerability.circl.lu/sighting/08296ddb-1d18-45df-8b21-64089a761b60/export Fri, 11 Sep 2026 20:03:10 +0000 https://vulnerability.circl.lu/sighting/7a09e4fc-88c4-4efb-855f-4192f41dab48/export {"uuid": "7a09e4fc-88c4-4efb-855f-4192f41dab48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f", "content": "~Cisa~\nCISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.\n-\nIOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869\n-\n#CISA #KEV #ThreatIntel", "creation_timestamp": "2026-09-11T20:02:07.052994Z"} {"uuid": "7a09e4fc-88c4-4efb-855f-4192f41dab48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f", "content": "~Cisa~\nCISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.\n-\nIOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869\n-\n#CISA #KEV #ThreatIntel", "creation_timestamp": "2026-09-11T20:02:07.052994Z"} https://vulnerability.circl.lu/sighting/7a09e4fc-88c4-4efb-855f-4192f41dab48/export Fri, 11 Sep 2026 20:02:07 +0000 https://vulnerability.circl.lu/sighting/719c68bc-07b3-4070-b413-e213c911b67e/export {"uuid": "719c68bc-07b3-4070-b413-e213c911b67e", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfd55757-60bf-42b4-8579-b98e3aa79248", "content": "", "creation_timestamp": "2026-09-11T19:00:02.536386Z"} {"uuid": "719c68bc-07b3-4070-b413-e213c911b67e", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfd55757-60bf-42b4-8579-b98e3aa79248", "content": "", "creation_timestamp": "2026-09-11T19:00:02.536386Z"} https://vulnerability.circl.lu/sighting/719c68bc-07b3-4070-b413-e213c911b67e/export Fri, 11 Sep 2026 19:00:02 +0000 https://vulnerability.circl.lu/sighting/423b6476-ae4b-402f-a0db-f96915f11d7c/export {"uuid": "423b6476-ae4b-402f-a0db-f96915f11d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvb7fpdrul2w", "content": "\ud83d\uded1 CVE-2026-84869\nConnectWise ScreenConnect\nCVSS 9.9 / EPSS 0% / KEV: No\nTL;DR: A condition in the ScreenConnect client may allow files to be transferred and exe\u2026\nhttps://cvesentinel.com/report/CVE-2026-84869?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-11T18:35:04.010696Z"} {"uuid": "423b6476-ae4b-402f-a0db-f96915f11d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvb7fpdrul2w", "content": "\ud83d\uded1 CVE-2026-84869\nConnectWise ScreenConnect\nCVSS 9.9 / EPSS 0% / KEV: No\nTL;DR: A condition in the ScreenConnect client may allow files to be transferred and exe\u2026\nhttps://cvesentinel.com/report/CVE-2026-84869?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-11T18:35:04.010696Z"} https://vulnerability.circl.lu/sighting/423b6476-ae4b-402f-a0db-f96915f11d7c/export Fri, 11 Sep 2026 18:35:04 +0000 https://vulnerability.circl.lu/sighting/cf6db727-442a-4bcd-8d9c-3b4ec6051274/export {"uuid": "cf6db727-442a-4bcd-8d9c-3b4ec6051274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvb6ileqsr2u", "content": "CISA added ConnectWise ScreenConnect CVE-2026-84869 to KEV today, deadline 14 September. It lets files be transferred and run through an active remote session without host confirmation, CVSS 9.9. ConnectWise fixed it in 26.6.5 on 8 September. connectwise.com/company/...", "creation_timestamp": "2026-09-11T18:18:40.203853Z"} {"uuid": "cf6db727-442a-4bcd-8d9c-3b4ec6051274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvb6ileqsr2u", "content": "CISA added ConnectWise ScreenConnect CVE-2026-84869 to KEV today, deadline 14 September. It lets files be transferred and run through an active remote session without host confirmation, CVSS 9.9. ConnectWise fixed it in 26.6.5 on 8 September. connectwise.com/company/...", "creation_timestamp": "2026-09-11T18:18:40.203853Z"} https://vulnerability.circl.lu/sighting/cf6db727-442a-4bcd-8d9c-3b4ec6051274/export Fri, 11 Sep 2026 18:18:40 +0000