<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 25 Sep 2026 18:15:28 +0000</lastBuildDate>
    <item>
      <title>d2236600-fda8-4295-90d7-81409610ad4b</title>
      <link>https://vulnerability.circl.lu/sighting/d2236600-fda8-4295-90d7-81409610ad4b/export</link>
      <description>{"uuid": "d2236600-fda8-4295-90d7-81409610ad4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "content": "", "creation_timestamp": "2026-09-25T09:24:45.000000Z"}</description>
      <content:encoded>{"uuid": "d2236600-fda8-4295-90d7-81409610ad4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "content": "", "creation_timestamp": "2026-09-25T09:24:45.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d2236600-fda8-4295-90d7-81409610ad4b/export</guid>
      <pubDate>Fri, 25 Sep 2026 09:24:45 +0000</pubDate>
    </item>
    <item>
      <title>43f4c7b3-be27-4b1e-96f6-4275be554974</title>
      <link>https://vulnerability.circl.lu/sighting/43f4c7b3-be27-4b1e-96f6-4275be554974/export</link>
      <description>{"uuid": "43f4c7b3-be27-4b1e-96f6-4275be554974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "published-proof-of-concept", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "content": "", "creation_timestamp": "2026-09-25T09:24:45.000000Z"}</description>
      <content:encoded>{"uuid": "43f4c7b3-be27-4b1e-96f6-4275be554974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "published-proof-of-concept", "source": "Telegram/cPnUkNDrzhC9sIWTfymlxK1szwNDW4bVEFI53yswT2mFGHU", "content": "", "creation_timestamp": "2026-09-25T09:24:45.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/43f4c7b3-be27-4b1e-96f6-4275be554974/export</guid>
      <pubDate>Fri, 25 Sep 2026 09:24:45 +0000</pubDate>
    </item>
    <item>
      <title>045dafe2-ff37-461e-9b16-e3e1c9e4ff51</title>
      <link>https://vulnerability.circl.lu/sighting/045dafe2-ff37-461e-9b16-e3e1c9e4ff51/export</link>
      <description>{"uuid": "045dafe2-ff37-461e-9b16-e3e1c9e4ff51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "published-proof-of-concept", "source": "Telegram/1ys77DIZO-GDJM12Y2kKkFL_LlZmH_iXH3Qq1ObYEEV1_pg", "content": "", "creation_timestamp": "2026-09-24T03:13:24.000000Z"}</description>
      <content:encoded>{"uuid": "045dafe2-ff37-461e-9b16-e3e1c9e4ff51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "published-proof-of-concept", "source": "Telegram/1ys77DIZO-GDJM12Y2kKkFL_LlZmH_iXH3Qq1ObYEEV1_pg", "content": "", "creation_timestamp": "2026-09-24T03:13:24.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/045dafe2-ff37-461e-9b16-e3e1c9e4ff51/export</guid>
      <pubDate>Thu, 24 Sep 2026 03:13:24 +0000</pubDate>
    </item>
    <item>
      <title>c4f0b25e-4c34-4272-9ec5-2463c198322b</title>
      <link>https://vulnerability.circl.lu/sighting/c4f0b25e-4c34-4272-9ec5-2463c198322b/export</link>
      <description>{"uuid": "c4f0b25e-4c34-4272-9ec5-2463c198322b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "exploited", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "content": "", "creation_timestamp": "2026-09-23T16:04:47.000000Z"}</description>
      <content:encoded>{"uuid": "c4f0b25e-4c34-4272-9ec5-2463c198322b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "exploited", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "content": "", "creation_timestamp": "2026-09-23T16:04:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c4f0b25e-4c34-4272-9ec5-2463c198322b/export</guid>
      <pubDate>Wed, 23 Sep 2026 16:04:47 +0000</pubDate>
    </item>
    <item>
      <title>13f85fd4-f108-4717-bc06-b4300cc8e09c</title>
      <link>https://vulnerability.circl.lu/sighting/13f85fd4-f108-4717-bc06-b4300cc8e09c/export</link>
      <description>{"uuid": "13f85fd4-f108-4717-bc06-b4300cc8e09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "content": "", "creation_timestamp": "2026-09-23T16:04:47.000000Z"}</description>
      <content:encoded>{"uuid": "13f85fd4-f108-4717-bc06-b4300cc8e09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "Telegram/dr-VTIf0y0-piLzHX9OaH2cRKRIq9yIESs9l0HfnzF0DhA", "content": "", "creation_timestamp": "2026-09-23T16:04:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/13f85fd4-f108-4717-bc06-b4300cc8e09c/export</guid>
      <pubDate>Wed, 23 Sep 2026 16:04:47 +0000</pubDate>
    </item>
    <item>
      <title>63628c95-ac63-4a1c-997c-1605f4577d89</title>
      <link>https://vulnerability.circl.lu/sighting/63628c95-ac63-4a1c-997c-1605f4577d89/export</link>
      <description>{"uuid": "63628c95-ac63-4a1c-997c-1605f4577d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mw6r3r34zu2p", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: UTA0565 Chains CVE-2026-85046, CVE-2026-87491, CVE-2026-85880 to Drop CLEANGULP\n\n#APT #ThreatIntel #CyberSecurity", "creation_timestamp": "2026-09-23T12:38:43.922609Z"}</description>
      <content:encoded>{"uuid": "63628c95-ac63-4a1c-997c-1605f4577d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mw6r3r34zu2p", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: UTA0565 Chains CVE-2026-85046, CVE-2026-87491, CVE-2026-85880 to Drop CLEANGULP\n\n#APT #ThreatIntel #CyberSecurity", "creation_timestamp": "2026-09-23T12:38:43.922609Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/63628c95-ac63-4a1c-997c-1605f4577d89/export</guid>
      <pubDate>Wed, 23 Sep 2026 12:38:43 +0000</pubDate>
    </item>
    <item>
      <title>1afada75-6f5c-4baf-9d2e-c8fefad77d0c</title>
      <link>https://vulnerability.circl.lu/sighting/1afada75-6f5c-4baf-9d2e-c8fefad77d0c/export</link>
      <description>{"uuid": "1afada75-6f5c-4baf-9d2e-c8fefad77d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6miyj5mf2f", "content": "\ud83e\udd16 Chinese threat actor UTA0565 chained Chrome (CVE-2026-85046, CVE-2026-87491) and Windows ALPC (CVE-2026-85880) zero-days via fake sites to deploy CLEANGULP malware.\nhttps://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "creation_timestamp": "2026-09-23T11:16:39.023661Z"}</description>
      <content:encoded>{"uuid": "1afada75-6f5c-4baf-9d2e-c8fefad77d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6miyj5mf2f", "content": "\ud83e\udd16 Chinese threat actor UTA0565 chained Chrome (CVE-2026-85046, CVE-2026-87491) and Windows ALPC (CVE-2026-85880) zero-days via fake sites to deploy CLEANGULP malware.\nhttps://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "creation_timestamp": "2026-09-23T11:16:39.023661Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1afada75-6f5c-4baf-9d2e-c8fefad77d0c/export</guid>
      <pubDate>Wed, 23 Sep 2026 11:16:39 +0000</pubDate>
    </item>
    <item>
      <title>978989fb-fa7c-4736-9f4a-a71e2bac9def</title>
      <link>https://vulnerability.circl.lu/sighting/978989fb-fa7c-4736-9f4a-a71e2bac9def/export</link>
      <description>{"uuid": "978989fb-fa7c-4736-9f4a-a71e2bac9def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "content": "A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites.\n\nThe attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break", "creation_timestamp": "2026-09-23T10:00:52.177033Z"}</description>
      <content:encoded>{"uuid": "978989fb-fa7c-4736-9f4a-a71e2bac9def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html", "content": "A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites.\n\nThe attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break", "creation_timestamp": "2026-09-23T10:00:52.177033Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/978989fb-fa7c-4736-9f4a-a71e2bac9def/export</guid>
      <pubDate>Wed, 23 Sep 2026 10:00:52 +0000</pubDate>
    </item>
    <item>
      <title>d5314ecb-7116-40ea-95e8-31b65c7b03af</title>
      <link>https://vulnerability.circl.lu/sighting/d5314ecb-7116-40ea-95e8-31b65c7b03af/export</link>
      <description>{"uuid": "d5314ecb-7116-40ea-95e8-31b65c7b03af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mw3mtrjgoo2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 27 interactions\nCVE-2026-76460: 22 interactions\nCVE-2026-58704: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85046: 8 interactions\nCVE-2026-85880: 8 interactions\nCVE-2026-87491: 8 interactions\n", "creation_timestamp": "2026-09-22T06:44:41.517020Z"}</description>
      <content:encoded>{"uuid": "d5314ecb-7116-40ea-95e8-31b65c7b03af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mw3mtrjgoo2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 27 interactions\nCVE-2026-76460: 22 interactions\nCVE-2026-58704: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85046: 8 interactions\nCVE-2026-85880: 8 interactions\nCVE-2026-87491: 8 interactions\n", "creation_timestamp": "2026-09-22T06:44:41.517020Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d5314ecb-7116-40ea-95e8-31b65c7b03af/export</guid>
      <pubDate>Tue, 22 Sep 2026 06:44:41 +0000</pubDate>
    </item>
    <item>
      <title>7033332e-3f42-4402-9f04-310d2d235aed</title>
      <link>https://vulnerability.circl.lu/sighting/7033332e-3f42-4402-9f04-310d2d235aed/export</link>
      <description>{"uuid": "7033332e-3f42-4402-9f04-310d2d235aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/volexity.com/post/3mw2mwrbgu22a", "content": "Following our Sept 9 blog on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) &amp;amp; Windows (CVE-2026-85880), Volexity found a third actor, UTA0565 using the same exploits Sept 3-4, while they were still unpatched.", "creation_timestamp": "2026-09-21T21:13:43.501576Z"}</description>
      <content:encoded>{"uuid": "7033332e-3f42-4402-9f04-310d2d235aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85046", "type": "seen", "source": "https://bsky.app/profile/volexity.com/post/3mw2mwrbgu22a", "content": "Following our Sept 9 blog on two Chinese APT actors chaining 0-days in Chrome (CVE-2026-85046, CVE-2026-87491) &amp;amp; Windows (CVE-2026-85880), Volexity found a third actor, UTA0565 using the same exploits Sept 3-4, while they were still unpatched.", "creation_timestamp": "2026-09-21T21:13:43.501576Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7033332e-3f42-4402-9f04-310d2d235aed/export</guid>
      <pubDate>Mon, 21 Sep 2026 21:13:43 +0000</pubDate>
    </item>
  </channel>
</rss>
