<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 18 Sep 2026 00:10:39 +0000</lastBuildDate>
    <item>
      <title>9dc7d04d-c990-4262-80c2-486bede071cd</title>
      <link>https://vulnerability.circl.lu/sighting/9dc7d04d-c990-4262-80c2-486bede071cd/export</link>
      <description>{"uuid": "9dc7d04d-c990-4262-80c2-486bede071cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/thehackernews/10092", "content": "\u203c\ufe0f NEW - Critical Check Point management flaw lets unauthenticated attackers run code as root.\n\nThe 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.\n\nAffected versions and fix details: https://thehackernews.com/2026/09/critical-check-point-management-server.html", "creation_timestamp": "2026-09-18T00:00:05.691973Z"}</description>
      <content:encoded>{"uuid": "9dc7d04d-c990-4262-80c2-486bede071cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/thehackernews/10092", "content": "\u203c\ufe0f NEW - Critical Check Point management flaw lets unauthenticated attackers run code as root.\n\nThe 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.\n\nAffected versions and fix details: https://thehackernews.com/2026/09/critical-check-point-management-server.html", "creation_timestamp": "2026-09-18T00:00:05.691973Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9dc7d04d-c990-4262-80c2-486bede071cd/export</guid>
      <pubDate>Fri, 18 Sep 2026 00:00:05 +0000</pubDate>
    </item>
    <item>
      <title>fc1e90bb-9a94-41e1-a0f8-4a5616c1189e</title>
      <link>https://vulnerability.circl.lu/sighting/fc1e90bb-9a94-41e1-a0f8-4a5616c1189e/export</link>
      <description>{"uuid": "fc1e90bb-9a94-41e1-a0f8-4a5616c1189e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/thehackernews/10092", "content": "\u203c\ufe0f NEW - Critical Check Point management flaw lets unauthenticated attackers run code as root.\n\nThe 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.\n\nAffected versions and fix details: https://thehackernews.com/2026/09/critical-check-point-management-server.html", "creation_timestamp": "2026-09-17T22:00:04.859008Z"}</description>
      <content:encoded>{"uuid": "fc1e90bb-9a94-41e1-a0f8-4a5616c1189e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/thehackernews/10092", "content": "\u203c\ufe0f NEW - Critical Check Point management flaw lets unauthenticated attackers run code as root.\n\nThe 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.\n\nAffected versions and fix details: https://thehackernews.com/2026/09/critical-check-point-management-server.html", "creation_timestamp": "2026-09-17T22:00:04.859008Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fc1e90bb-9a94-41e1-a0f8-4a5616c1189e/export</guid>
      <pubDate>Thu, 17 Sep 2026 22:00:04 +0000</pubDate>
    </item>
    <item>
      <title>289704e8-bc24-4af8-ae8f-70456a29619c</title>
      <link>https://vulnerability.circl.lu/sighting/289704e8-bc24-4af8-ae8f-70456a29619c/export</link>
      <description>{"uuid": "289704e8-bc24-4af8-ae8f-70456a29619c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/check-point-security-advisory-av26-933", "content": "", "creation_timestamp": "2026-09-17T20:15:23.633847Z"}</description>
      <content:encoded>{"uuid": "289704e8-bc24-4af8-ae8f-70456a29619c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/check-point-security-advisory-av26-933", "content": "", "creation_timestamp": "2026-09-17T20:15:23.633847Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/289704e8-bc24-4af8-ae8f-70456a29619c/export</guid>
      <pubDate>Thu, 17 Sep 2026 20:15:23 +0000</pubDate>
    </item>
    <item>
      <title>9b5edc7c-6737-461b-8885-496d234be643</title>
      <link>https://vulnerability.circl.lu/sighting/9b5edc7c-6737-461b-8885-496d234be643/export</link>
      <description>{"uuid": "9b5edc7c-6737-461b-8885-496d234be643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://gist.github.com/ichintu/4d54d491df96f43f63328c7ac7c50625", "content": "**Executive Summary (Sept 16\u201317, 2026)**\n\nThis threat intelligence digest highlights critical vulnerabilities and urgent patch requirements across major software and infrastructure vendors. Key fixes include:\n* **OpenDDS** (CVE-2026-52836): Remote DoS via malformed RTPS submessage (Fixed: v3.34.0)\n* **Check Point** (CVE-2026-91843): Login stack overflow affecting Management/Log Servers\n* **Dell Server Update Utility** (CVE-2026-56795): Local code execution via uncontrolled search path (Fixed: v26.07.01)\n* **BIND 9**: 14 patched flaws, including an unauthenticated DoS via DNS-over-HTTPS\n* **Cisco ISE &amp;amp; Related Products**: Multiple authentication bypass vulnerabilities patched. **CVE-2026-76460 is actively exploited in the wild** and has been added to the CISA KEV catalog. Patches also cover FTD, FMC, ASA, and Nexus Dashboard.\n\nThe digest also notes community discussions regarding a removed Reddit post, a potential API key image, and a new Claude AI skill for cybersecurity automation. Organizations are strongly advised to immediately apply vendor updates, prioritize actively exploited flaws, and enhance logging and network segmentation.", "creation_timestamp": "2026-09-17T20:01:46.519332Z"}</description>
      <content:encoded>{"uuid": "9b5edc7c-6737-461b-8885-496d234be643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://gist.github.com/ichintu/4d54d491df96f43f63328c7ac7c50625", "content": "**Executive Summary (Sept 16\u201317, 2026)**\n\nThis threat intelligence digest highlights critical vulnerabilities and urgent patch requirements across major software and infrastructure vendors. Key fixes include:\n* **OpenDDS** (CVE-2026-52836): Remote DoS via malformed RTPS submessage (Fixed: v3.34.0)\n* **Check Point** (CVE-2026-91843): Login stack overflow affecting Management/Log Servers\n* **Dell Server Update Utility** (CVE-2026-56795): Local code execution via uncontrolled search path (Fixed: v26.07.01)\n* **BIND 9**: 14 patched flaws, including an unauthenticated DoS via DNS-over-HTTPS\n* **Cisco ISE &amp;amp; Related Products**: Multiple authentication bypass vulnerabilities patched. **CVE-2026-76460 is actively exploited in the wild** and has been added to the CISA KEV catalog. Patches also cover FTD, FMC, ASA, and Nexus Dashboard.\n\nThe digest also notes community discussions regarding a removed Reddit post, a potential API key image, and a new Claude AI skill for cybersecurity automation. Organizations are strongly advised to immediately apply vendor updates, prioritize actively exploited flaws, and enhance logging and network segmentation.", "creation_timestamp": "2026-09-17T20:01:46.519332Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b5edc7c-6737-461b-8885-496d234be643/export</guid>
      <pubDate>Thu, 17 Sep 2026 20:01:46 +0000</pubDate>
    </item>
    <item>
      <title>33814386-8aec-43c8-99c1-f39faf117c6a</title>
      <link>https://vulnerability.circl.lu/sighting/33814386-8aec-43c8-99c1-f39faf117c6a/export</link>
      <description>{"uuid": "33814386-8aec-43c8-99c1-f39faf117c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvpprfewhs2w", "content": "\ud83d\udd17 CVE : CVE-2026-91843", "creation_timestamp": "2026-09-17T13:05:06.382695Z"}</description>
      <content:encoded>{"uuid": "33814386-8aec-43c8-99c1-f39faf117c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvpprfewhs2w", "content": "\ud83d\udd17 CVE : CVE-2026-91843", "creation_timestamp": "2026-09-17T13:05:06.382695Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/33814386-8aec-43c8-99c1-f39faf117c6a/export</guid>
      <pubDate>Thu, 17 Sep 2026 13:05:06 +0000</pubDate>
    </item>
    <item>
      <title>f523a7bc-9673-4ab1-bfdc-34ae842445c3</title>
      <link>https://vulnerability.circl.lu/sighting/f523a7bc-9673-4ab1-bfdc-34ae842445c3/export</link>
      <description>{"uuid": "f523a7bc-9673-4ab1-bfdc-34ae842445c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvp22ftku72p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 48 interactions\nCVE-2026-76461: 16 interactions\nCVE-2026-82078: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-76460: 10 interactions\nCVE-2026-91843: 9 interactions\nCVE-2026-76461: 8 interactions\n", "creation_timestamp": "2026-09-17T06:36:26.399913Z"}</description>
      <content:encoded>{"uuid": "f523a7bc-9673-4ab1-bfdc-34ae842445c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvp22ftku72p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 48 interactions\nCVE-2026-76461: 16 interactions\nCVE-2026-82078: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-76460: 10 interactions\nCVE-2026-91843: 9 interactions\nCVE-2026-76461: 8 interactions\n", "creation_timestamp": "2026-09-17T06:36:26.399913Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f523a7bc-9673-4ab1-bfdc-34ae842445c3/export</guid>
      <pubDate>Thu, 17 Sep 2026 06:36:26 +0000</pubDate>
    </item>
    <item>
      <title>045e5c07-ede5-4f81-b71f-b03093d6da72</title>
      <link>https://vulnerability.circl.lu/sighting/045e5c07-ede5-4f81-b71f-b03093d6da72/export</link>
      <description>{"uuid": "045e5c07-ede5-4f81-b71f-b03093d6da72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/daniel1820815/statuses/117282347479668935", "content": "\ud83d\udea8 Please read this important update from Check Point:\nCVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers\nhttps://support.checkpoint.com/results/sk/sk1000155\n#CheckPoint #CheckPointsoftwareTechnologies #CVE #CVE202691843", "creation_timestamp": "2026-09-17T00:58:23.187222Z"}</description>
      <content:encoded>{"uuid": "045e5c07-ede5-4f81-b71f-b03093d6da72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/daniel1820815/statuses/117282347479668935", "content": "\ud83d\udea8 Please read this important update from Check Point:\nCVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers\nhttps://support.checkpoint.com/results/sk/sk1000155\n#CheckPoint #CheckPointsoftwareTechnologies #CVE #CVE202691843", "creation_timestamp": "2026-09-17T00:58:23.187222Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/045e5c07-ede5-4f81-b71f-b03093d6da72/export</guid>
      <pubDate>Thu, 17 Sep 2026 00:58:23 +0000</pubDate>
    </item>
    <item>
      <title>07042145-6e7a-4a48-8e14-69d9c8a71bc7</title>
      <link>https://vulnerability.circl.lu/sighting/07042145-6e7a-4a48-8e14-69d9c8a71bc7/export</link>
      <description>{"uuid": "07042145-6e7a-4a48-8e14-69d9c8a71bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvofayuhzt2i", "content": "Check Point Login Flaw CVE-2026-91843: Critical Root RCE via Unauthenticated Login\uff08Check Point\u306e\u30ed\u30b0\u30a4\u30f3\u51e6\u7406\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u4e0d\u8981\u3067root\u6a29\u9650\u306eRCE\uff09 #SecurityOnline (Sep 16)\n\nsecurityonline.info/check-point-...", "creation_timestamp": "2026-09-17T00:24:18.945556Z"}</description>
      <content:encoded>{"uuid": "07042145-6e7a-4a48-8e14-69d9c8a71bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvofayuhzt2i", "content": "Check Point Login Flaw CVE-2026-91843: Critical Root RCE via Unauthenticated Login\uff08Check Point\u306e\u30ed\u30b0\u30a4\u30f3\u51e6\u7406\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u4e0d\u8981\u3067root\u6a29\u9650\u306eRCE\uff09 #SecurityOnline (Sep 16)\n\nsecurityonline.info/check-point-...", "creation_timestamp": "2026-09-17T00:24:18.945556Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/07042145-6e7a-4a48-8e14-69d9c8a71bc7/export</guid>
      <pubDate>Thu, 17 Sep 2026 00:24:18 +0000</pubDate>
    </item>
    <item>
      <title>a9f9809c-73a9-42c3-8fcf-854fd820007e</title>
      <link>https://vulnerability.circl.lu/sighting/a9f9809c-73a9-42c3-8fcf-854fd820007e/export</link>
      <description>{"uuid": "a9f9809c-73a9-42c3-8fcf-854fd820007e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/censys/statuses/117283080996096403", "content": "\ud83d\udea8New Censys Advisory: CVE-2026-91843\nA critical (CVSS 9.8) unauthenticated RCE affects Check Point Quantum Security Management and Log Servers.\nCensys observes 3,836 hosts globally exposing the management/log server role. This is total product presence, not a confirmed-vulnerable count.\nNo public PoC or confirmed exploitation has been reported as of publication. Check Point has released patches for supported versions via LivePatch.\nRead the analysis and remediation details: https://censys.com/advisory/cve-2026-91843/\n#Cybersecurity #CVE #Vulnerability #CensysARC", "creation_timestamp": "2026-09-16T22:38:50.668669Z"}</description>
      <content:encoded>{"uuid": "a9f9809c-73a9-42c3-8fcf-854fd820007e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/censys/statuses/117283080996096403", "content": "\ud83d\udea8New Censys Advisory: CVE-2026-91843\nA critical (CVSS 9.8) unauthenticated RCE affects Check Point Quantum Security Management and Log Servers.\nCensys observes 3,836 hosts globally exposing the management/log server role. This is total product presence, not a confirmed-vulnerable count.\nNo public PoC or confirmed exploitation has been reported as of publication. Check Point has released patches for supported versions via LivePatch.\nRead the analysis and remediation details: https://censys.com/advisory/cve-2026-91843/\n#Cybersecurity #CVE #Vulnerability #CensysARC", "creation_timestamp": "2026-09-16T22:38:50.668669Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a9f9809c-73a9-42c3-8fcf-854fd820007e/export</guid>
      <pubDate>Wed, 16 Sep 2026 22:38:50 +0000</pubDate>
    </item>
    <item>
      <title>72503c8f-6e10-40eb-8b14-eff3eb68f698</title>
      <link>https://vulnerability.circl.lu/sighting/72503c8f-6e10-40eb-8b14-eff3eb68f698/export</link>
      <description>{"uuid": "72503c8f-6e10-40eb-8b14-eff3eb68f698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mvo6ikd56b2w", "content": "\ud83d\udea8CVE-2026-91843 is a critical (CVSS 9.8) pre-auth RCE affecting Check Point Quantum Security Management and Log Servers.\n\nCensys sees 3,836 hosts globally with the management/log server role.\n\nNo public PoC or confirmed exploitation as of publication. Patches are available. https://bit.ly/4cRApEJ", "creation_timestamp": "2026-09-16T22:23:16.713963Z"}</description>
      <content:encoded>{"uuid": "72503c8f-6e10-40eb-8b14-eff3eb68f698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mvo6ikd56b2w", "content": "\ud83d\udea8CVE-2026-91843 is a critical (CVSS 9.8) pre-auth RCE affecting Check Point Quantum Security Management and Log Servers.\n\nCensys sees 3,836 hosts globally with the management/log server role.\n\nNo public PoC or confirmed exploitation as of publication. Patches are available. https://bit.ly/4cRApEJ", "creation_timestamp": "2026-09-16T22:23:16.713963Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/72503c8f-6e10-40eb-8b14-eff3eb68f698/export</guid>
      <pubDate>Wed, 16 Sep 2026 22:23:16 +0000</pubDate>
    </item>
  </channel>
</rss>
