<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 07:56:05 +0000</lastBuildDate>
    <item>
      <title>3c05ab98-f624-4283-a820-e7a8b8581e86</title>
      <link>https://vulnerability.circl.lu/sighting/3c05ab98-f624-4283-a820-e7a8b8581e86/export</link>
      <description>{"uuid": "3c05ab98-f624-4283-a820-e7a8b8581e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvwmipih4f2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 33 interactions\nCVE-2026-58704: 21 interactions\nCVE-2026-76460: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-62593: 4 interactions\nCVE-2026-19478: 4 interactions\nCVE-2026-13348: 3 interactions\n", "creation_timestamp": "2026-09-20T06:55:12.034841Z"}</description>
      <content:encoded>{"uuid": "3c05ab98-f624-4283-a820-e7a8b8581e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvwmipih4f2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 33 interactions\nCVE-2026-58704: 21 interactions\nCVE-2026-76460: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-62593: 4 interactions\nCVE-2026-19478: 4 interactions\nCVE-2026-13348: 3 interactions\n", "creation_timestamp": "2026-09-20T06:55:12.034841Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3c05ab98-f624-4283-a820-e7a8b8581e86/export</guid>
      <pubDate>Sun, 20 Sep 2026 06:55:12 +0000</pubDate>
    </item>
    <item>
      <title>68a5dc58-7c88-442b-9581-ac5a53dfd7fc</title>
      <link>https://vulnerability.circl.lu/sighting/68a5dc58-7c88-442b-9581-ac5a53dfd7fc/export</link>
      <description>{"uuid": "68a5dc58-7c88-442b-9581-ac5a53dfd7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjuvpsgk2x", "content": "CISA Adds One Known Exploited Vulnerability to Catalog \nRelease Date August 17, 2026\n\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability", "creation_timestamp": "2026-09-19T01:30:21.774928Z"}</description>
      <content:encoded>{"uuid": "68a5dc58-7c88-442b-9581-ac5a53dfd7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjuvpsgk2x", "content": "CISA Adds One Known Exploited Vulnerability to Catalog \nRelease Date August 17, 2026\n\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability", "creation_timestamp": "2026-09-19T01:30:21.774928Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/68a5dc58-7c88-442b-9581-ac5a53dfd7fc/export</guid>
      <pubDate>Sat, 19 Sep 2026 01:30:21 +0000</pubDate>
    </item>
    <item>
      <title>0d3d43f7-e5e5-4b8d-a0d4-ff88888d0a46</title>
      <link>https://vulnerability.circl.lu/sighting/0d3d43f7-e5e5-4b8d-a0d4-ff88888d0a46/export</link>
      <description>{"uuid": "0d3d43f7-e5e5-4b8d-a0d4-ff88888d0a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjpvovc22x", "content": "\u7c73\u5f53\u5c40\u3001AI\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cRay\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3092\u8b66\u544a\n\n\u7c73\u5f53\u5c40\u306f\u3001AI\u3084Python\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u30b9\u30b1\u30fc\u30eb\u3055\u305b\u308b\u305f\u3081\u306e\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cRay\u300d\u306b\u304a\u3051\u308b\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u30d6\u30e9\u30a6\u30b6\u4e0a\u3067\u60aa\u610f\u3042\u308b\u5e83\u544a\u3092\u8868\u793a\u3057\u305f\u3060\u3051\u3067\u3082\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u6ce8\u610f\u304c\u5fc5\u8981\u3068\u306a\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u304c\u73fe\u5730\u6642\u95932026\u5e748\u670817\u65e5\u3001\u300cCVE-2025-62593\u300d\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2025-62593\u300d\u306f\u3001\u30d6\u30e9\u30a6\u30b6\u300cFirefox\u300d\u300cSafari\u300d\u3092\u4ecb\u3057\u3066\u3001\u30ea...", "creation_timestamp": "2026-09-19T01:27:33.811089Z"}</description>
      <content:encoded>{"uuid": "0d3d43f7-e5e5-4b8d-a0d4-ff88888d0a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjpvovc22x", "content": "\u7c73\u5f53\u5c40\u3001AI\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cRay\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3092\u8b66\u544a\n\n\u7c73\u5f53\u5c40\u306f\u3001AI\u3084Python\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u30b9\u30b1\u30fc\u30eb\u3055\u305b\u308b\u305f\u3081\u306e\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cRay\u300d\u306b\u304a\u3051\u308b\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u30d6\u30e9\u30a6\u30b6\u4e0a\u3067\u60aa\u610f\u3042\u308b\u5e83\u544a\u3092\u8868\u793a\u3057\u305f\u3060\u3051\u3067\u3082\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u6ce8\u610f\u304c\u5fc5\u8981\u3068\u306a\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u304c\u73fe\u5730\u6642\u95932026\u5e748\u670817\u65e5\u3001\u300cCVE-2025-62593\u300d\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2025-62593\u300d\u306f\u3001\u30d6\u30e9\u30a6\u30b6\u300cFirefox\u300d\u300cSafari\u300d\u3092\u4ecb\u3057\u3066\u3001\u30ea...", "creation_timestamp": "2026-09-19T01:27:33.811089Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0d3d43f7-e5e5-4b8d-a0d4-ff88888d0a46/export</guid>
      <pubDate>Sat, 19 Sep 2026 01:27:33 +0000</pubDate>
    </item>
    <item>
      <title>0a9703ce-19de-4188-a2af-58ea78e897fa</title>
      <link>https://vulnerability.circl.lu/sighting/0a9703ce-19de-4188-a2af-58ea78e897fa/export</link>
      <description>{"uuid": "0a9703ce-19de-4188-a2af-58ea78e897fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjdkwylk2x", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Ray-Project Ray\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f \u3001Progress LoadMaster\u306e\u8106\u5f31\u6027\uff08CVE-2025-62593\u3001CVSS\u30b9\u30b3\u30a29.4\uff09\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2025-62593\u306f\u3001AI\u8a08\u7b97\u30a8\u30f3\u30b8\u30f3\u3067\u3042\u308bRay\u306b\u304a\u3051\u308b\u91cd\u5927\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306e\u8106\u5f31\u6027\u3067\u3059\u3002\u30d0\u30fc\u30b8\u30e7\u30f32.52.0\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u306f\u3001Ray\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9/API\u304c...", "creation_timestamp": "2026-09-19T01:20:40.034850Z"}</description>
      <content:encoded>{"uuid": "0a9703ce-19de-4188-a2af-58ea78e897fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvtjdkwylk2x", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Ray-Project Ray\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f \u3001Progress LoadMaster\u306e\u8106\u5f31\u6027\uff08CVE-2025-62593\u3001CVSS\u30b9\u30b3\u30a29.4\uff09\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2025-62593\u306f\u3001AI\u8a08\u7b97\u30a8\u30f3\u30b8\u30f3\u3067\u3042\u308bRay\u306b\u304a\u3051\u308b\u91cd\u5927\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306e\u8106\u5f31\u6027\u3067\u3059\u3002\u30d0\u30fc\u30b8\u30e7\u30f32.52.0\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u306f\u3001Ray\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9/API\u304c...", "creation_timestamp": "2026-09-19T01:20:40.034850Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0a9703ce-19de-4188-a2af-58ea78e897fa/export</guid>
      <pubDate>Sat, 19 Sep 2026 01:20:40 +0000</pubDate>
    </item>
    <item>
      <title>7eba8fc2-6386-4632-9c08-d69aa8f9acf3</title>
      <link>https://vulnerability.circl.lu/sighting/7eba8fc2-6386-4632-9c08-d69aa8f9acf3/export</link>
      <description>{"uuid": "7eba8fc2-6386-4632-9c08-d69aa8f9acf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44018", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\u00a0 \n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:26.742788Z"}</description>
      <content:encoded>{"uuid": "7eba8fc2-6386-4632-9c08-d69aa8f9acf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44018", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\u00a0 \n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:26.742788Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7eba8fc2-6386-4632-9c08-d69aa8f9acf3/export</guid>
      <pubDate>Sat, 19 Sep 2026 00:00:26 +0000</pubDate>
    </item>
    <item>
      <title>d798a369-2077-47ef-a694-e2aca2b19467</title>
      <link>https://vulnerability.circl.lu/sighting/d798a369-2077-47ef-a694-e2aca2b19467/export</link>
      <description>{"uuid": "d798a369-2077-47ef-a694-e2aca2b19467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://t.me/VulnerabilityNews/44018", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\u00a0 \n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-18T12:00:07.718314Z"}</description>
      <content:encoded>{"uuid": "d798a369-2077-47ef-a694-e2aca2b19467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://t.me/VulnerabilityNews/44018", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\u00a0 \n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2025-62593 Ray-Project Ray Code Injection Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-18T12:00:07.718314Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d798a369-2077-47ef-a694-e2aca2b19467/export</guid>
      <pubDate>Fri, 18 Sep 2026 12:00:07 +0000</pubDate>
    </item>
    <item>
      <title>62373539-d614-43cf-890b-1f3285498afa</title>
      <link>https://vulnerability.circl.lu/sighting/62373539-d614-43cf-890b-1f3285498afa/export</link>
      <description>{"uuid": "62373539-d614-43cf-890b-1f3285498afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "Telegram/xr1f3jCC6Nt8yrCzxGt3NSfyGX5h3TP5edCBNO561qMvXLI", "content": "", "creation_timestamp": "2026-09-02T05:00:05.028481Z"}</description>
      <content:encoded>{"uuid": "62373539-d614-43cf-890b-1f3285498afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "Telegram/xr1f3jCC6Nt8yrCzxGt3NSfyGX5h3TP5edCBNO561qMvXLI", "content": "", "creation_timestamp": "2026-09-02T05:00:05.028481Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/62373539-d614-43cf-890b-1f3285498afa/export</guid>
      <pubDate>Wed, 02 Sep 2026 05:00:05 +0000</pubDate>
    </item>
    <item>
      <title>a8eefe82-3939-48ee-b4cd-491bb5172dab</title>
      <link>https://vulnerability.circl.lu/sighting/a8eefe82-3939-48ee-b4cd-491bb5172dab/export</link>
      <description>{"uuid": "a8eefe82-3939-48ee-b4cd-491bb5172dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://t.me/GithubRedTeam/100693", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33017\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 18:34:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-62593 \u2014 Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T23:00:08.395783Z"}</description>
      <content:encoded>{"uuid": "a8eefe82-3939-48ee-b4cd-491bb5172dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://t.me/GithubRedTeam/100693", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33017\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 18:34:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-62593 \u2014 Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T23:00:08.395783Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a8eefe82-3939-48ee-b4cd-491bb5172dab/export</guid>
      <pubDate>Tue, 01 Sep 2026 23:00:08 +0000</pubDate>
    </item>
    <item>
      <title>e7c2ffee-520c-4fe4-8b72-91f443bed6b1</title>
      <link>https://vulnerability.circl.lu/sighting/e7c2ffee-520c-4fe4-8b72-91f443bed6b1/export</link>
      <description>{"uuid": "e7c2ffee-520c-4fe4-8b72-91f443bed6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/dafu09.bsky.social/post/3mtttgs7yfz2j", "content": "CISA \u7ed9\u8054\u90a6\u673a\u6784 3 \u5929\u65f6\u95f4\u4fee\u4e00\u4e2a Ray \u6f0f\u6d1e\uff08CVE-2025-62593\uff0c9.4\u5206\uff09\u3002\n\nRay\u2014\u2014Amazon\u3001Apple\u3001OpenAI \u90fd\u5728\u7528\u7684 ML \u5206\u5e03\u5f0f\u6846\u67b6\u3002\n\u653b\u51fb\u8005\u7528\u6d4f\u89c8\u5668\u5c31\u80fd RCE\uff0c\u50f5\u5c38\u7f51\u7edc\u5728\u6f0f\u6d1e\u516c\u5f00\u524d 2 \u5929\u5c31\u5df2\u5f00\u6253\u3002\n\n\u5f00\u53d1\u8005\u7acb\u523b\u81ea\u67e5\uff1a\n\u2705 Ray \u5347\u5230 2.52.0+\n\u2705 Dashboard \u522b\u66b4\u9732\u516c\u7f51\n\u2705 \u8bad\u7ec3/\u63a8\u7406\u73af\u5883\u6700\u5c0f\u6743\u9650\n\nAI \u57fa\u7840\u8bbe\u65bd\uff0c\u6b63\u5728\u6210\u4e3a\u653b\u51fb\u9762\u7684\u65b0\u5927\u5934\u3002\n\n#AgentSecurity #Ray #DevSecOps", "creation_timestamp": "2026-08-24T17:31:01.181570Z"}</description>
      <content:encoded>{"uuid": "e7c2ffee-520c-4fe4-8b72-91f443bed6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "seen", "source": "https://bsky.app/profile/dafu09.bsky.social/post/3mtttgs7yfz2j", "content": "CISA \u7ed9\u8054\u90a6\u673a\u6784 3 \u5929\u65f6\u95f4\u4fee\u4e00\u4e2a Ray \u6f0f\u6d1e\uff08CVE-2025-62593\uff0c9.4\u5206\uff09\u3002\n\nRay\u2014\u2014Amazon\u3001Apple\u3001OpenAI \u90fd\u5728\u7528\u7684 ML \u5206\u5e03\u5f0f\u6846\u67b6\u3002\n\u653b\u51fb\u8005\u7528\u6d4f\u89c8\u5668\u5c31\u80fd RCE\uff0c\u50f5\u5c38\u7f51\u7edc\u5728\u6f0f\u6d1e\u516c\u5f00\u524d 2 \u5929\u5c31\u5df2\u5f00\u6253\u3002\n\n\u5f00\u53d1\u8005\u7acb\u523b\u81ea\u67e5\uff1a\n\u2705 Ray \u5347\u5230 2.52.0+\n\u2705 Dashboard \u522b\u66b4\u9732\u516c\u7f51\n\u2705 \u8bad\u7ec3/\u63a8\u7406\u73af\u5883\u6700\u5c0f\u6743\u9650\n\nAI \u57fa\u7840\u8bbe\u65bd\uff0c\u6b63\u5728\u6210\u4e3a\u653b\u51fb\u9762\u7684\u65b0\u5927\u5934\u3002\n\n#AgentSecurity #Ray #DevSecOps", "creation_timestamp": "2026-08-24T17:31:01.181570Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e7c2ffee-520c-4fe4-8b72-91f443bed6b1/export</guid>
      <pubDate>Mon, 24 Aug 2026 17:31:01 +0000</pubDate>
    </item>
    <item>
      <title>855b7638-e368-4968-bdab-268ea7504aa7</title>
      <link>https://vulnerability.circl.lu/sighting/855b7638-e368-4968-bdab-268ea7504aa7/export</link>
      <description>{"uuid": "855b7638-e368-4968-bdab-268ea7504aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "exploited", "source": "https://t.me/thehackernews/9824", "content": "\u26a0\ufe0f An actively exploited Ray flaw can lead to browser-based RCE.\n\nCISA has added CVE-2025-62593 to its KEV catalog. The documented attack path uses DNS rebinding and requires a developer running Ray to visit a malicious site or be served a malicious ad in Firefox or Safari.\n\nSee how the attack works: https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html", "creation_timestamp": "2026-08-24T00:00:05.030179Z"}</description>
      <content:encoded>{"uuid": "855b7638-e368-4968-bdab-268ea7504aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-62593", "type": "exploited", "source": "https://t.me/thehackernews/9824", "content": "\u26a0\ufe0f An actively exploited Ray flaw can lead to browser-based RCE.\n\nCISA has added CVE-2025-62593 to its KEV catalog. The documented attack path uses DNS rebinding and requires a developer running Ray to visit a malicious site or be served a malicious ad in Firefox or Safari.\n\nSee how the attack works: https://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.html", "creation_timestamp": "2026-08-24T00:00:05.030179Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/855b7638-e368-4968-bdab-268ea7504aa7/export</guid>
      <pubDate>Mon, 24 Aug 2026 00:00:05 +0000</pubDate>
    </item>
  </channel>
</rss>
