<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 05 Oct 2026 23:25:21 +0000</lastBuildDate>
    <item>
      <title>e1e18de8-a43d-412e-a07c-4bca2ab77b44</title>
      <link>https://vulnerability.circl.lu/sighting/e1e18de8-a43d-412e-a07c-4bca2ab77b44/export</link>
      <description>{"uuid": "e1e18de8-a43d-412e-a07c-4bca2ab77b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "published-proof-of-concept", "source": "Telegram/zC7t4Lx05uyfmCVlTGAKrLAcTODowFQbx3kd_6HhY1YAH_E", "content": "", "creation_timestamp": "2026-10-05T15:00:22.000000Z"}</description>
      <content:encoded>{"uuid": "e1e18de8-a43d-412e-a07c-4bca2ab77b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "published-proof-of-concept", "source": "Telegram/zC7t4Lx05uyfmCVlTGAKrLAcTODowFQbx3kd_6HhY1YAH_E", "content": "", "creation_timestamp": "2026-10-05T15:00:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e1e18de8-a43d-412e-a07c-4bca2ab77b44/export</guid>
      <pubDate>Mon, 05 Oct 2026 15:00:22 +0000</pubDate>
    </item>
    <item>
      <title>9a205106-847a-4461-96c9-514eece13090</title>
      <link>https://vulnerability.circl.lu/sighting/9a205106-847a-4461-96c9-514eece13090/export</link>
      <description>{"uuid": "9a205106-847a-4461-96c9-514eece13090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx4agumjuv2a", "content": "CRITICAL: AhsayCBS &amp;lt;10.3.4 vulnerable to unauthenticated OS command injection (CVE-2026-105134). Remote exploit = full compromise. Upgrade to 10.3.4 now. https://radar.offseq.com/threat/a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-1032-cve-2026-105134-a9f0def985d0c48e #OffSeq #Vulnerability #Ahs...", "creation_timestamp": "2026-10-05T06:00:35.341135Z"}</description>
      <content:encoded>{"uuid": "9a205106-847a-4461-96c9-514eece13090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx4agumjuv2a", "content": "CRITICAL: AhsayCBS &amp;lt;10.3.4 vulnerable to unauthenticated OS command injection (CVE-2026-105134). Remote exploit = full compromise. Upgrade to 10.3.4 now. https://radar.offseq.com/threat/a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-1032-cve-2026-105134-a9f0def985d0c48e #OffSeq #Vulnerability #Ahs...", "creation_timestamp": "2026-10-05T06:00:35.341135Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a205106-847a-4461-96c9-514eece13090/export</guid>
      <pubDate>Mon, 05 Oct 2026 06:00:35 +0000</pubDate>
    </item>
    <item>
      <title>4c6f3422-a919-4d15-85a9-05aec218f75f</title>
      <link>https://vulnerability.circl.lu/sighting/4c6f3422-a919-4d15-85a9-05aec218f75f/export</link>
      <description>{"uuid": "4c6f3422-a919-4d15-85a9-05aec218f75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386774626746380", "content": "AhsayCBS &amp;lt;10.3.4 hit by CRITICAL OS command injection (CVE-2026-105134) in Replication Receiver. Remote, unauthenticated exploitation = total system compromise. Upgrade to 10.3.4 ASAP. Exploit is public. https://radar.offseq.com/threat/a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-1032-cve-2026-105134-a9f0def985d0c48e #OffSeq #CVE2026105134 #Infosec #Vulnerability", "creation_timestamp": "2026-10-05T06:00:35.318953Z"}</description>
      <content:encoded>{"uuid": "4c6f3422-a919-4d15-85a9-05aec218f75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386774626746380", "content": "AhsayCBS &amp;lt;10.3.4 hit by CRITICAL OS command injection (CVE-2026-105134) in Replication Receiver. Remote, unauthenticated exploitation = total system compromise. Upgrade to 10.3.4 ASAP. Exploit is public. https://radar.offseq.com/threat/a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-1032-cve-2026-105134-a9f0def985d0c48e #OffSeq #CVE2026105134 #Infosec #Vulnerability", "creation_timestamp": "2026-10-05T06:00:35.318953Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4c6f3422-a919-4d15-85a9-05aec218f75f/export</guid>
      <pubDate>Mon, 05 Oct 2026 06:00:35 +0000</pubDate>
    </item>
    <item>
      <title>7b741ed7-599b-49cb-96a3-4953335134d4</title>
      <link>https://vulnerability.circl.lu/sighting/7b741ed7-599b-49cb-96a3-4953335134d4/export</link>
      <description>{"uuid": "7b741ed7-599b-49cb-96a3-4953335134d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx2qyckmum2k", "content": "\ud83d\udd34 CVE-2026-105134 - Critical (10)\n\nA flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105134/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T15:51:20.864358Z"}</description>
      <content:encoded>{"uuid": "7b741ed7-599b-49cb-96a3-4953335134d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx2qyckmum2k", "content": "\ud83d\udd34 CVE-2026-105134 - Critical (10)\n\nA flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105134/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T15:51:20.864358Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7b741ed7-599b-49cb-96a3-4953335134d4/export</guid>
      <pubDate>Sun, 04 Oct 2026 15:51:20 +0000</pubDate>
    </item>
    <item>
      <title>67f61dce-820d-4efd-af3b-8be35e617595</title>
      <link>https://vulnerability.circl.lu/sighting/67f61dce-820d-4efd-af3b-8be35e617595/export</link>
      <description>{"uuid": "67f61dce-820d-4efd-af3b-8be35e617595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx272keqm52y", "content": "AhsayCBS 10.3.0 \u2013 10.3.2 hit by CRITICAL OS command injection (CVE-2026-105134). Remote code execution possible \u2014 exploit is public. Upgrade to 10.3.4+ immediately. https://radar.offseq.com/threat/cve-2026-105134-os-command-injection-in-ahsay-ahsaycbs-a9df873cc55c0ce9 #OffSeq #Vulnerability #CVE", "creation_timestamp": "2026-10-04T10:30:29.180561Z"}</description>
      <content:encoded>{"uuid": "67f61dce-820d-4efd-af3b-8be35e617595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx272keqm52y", "content": "AhsayCBS 10.3.0 \u2013 10.3.2 hit by CRITICAL OS command injection (CVE-2026-105134). Remote code execution possible \u2014 exploit is public. Upgrade to 10.3.4+ immediately. https://radar.offseq.com/threat/cve-2026-105134-os-command-injection-in-ahsay-ahsaycbs-a9df873cc55c0ce9 #OffSeq #Vulnerability #CVE", "creation_timestamp": "2026-10-04T10:30:29.180561Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/67f61dce-820d-4efd-af3b-8be35e617595/export</guid>
      <pubDate>Sun, 04 Oct 2026 10:30:29 +0000</pubDate>
    </item>
    <item>
      <title>2583ae6e-69a9-4817-8bf7-32dfb7cc75c9</title>
      <link>https://vulnerability.circl.lu/sighting/2583ae6e-69a9-4817-8bf7-32dfb7cc75c9/export</link>
      <description>{"uuid": "2583ae6e-69a9-4817-8bf7-32dfb7cc75c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117382173564078136", "content": "CVE-2026-105134 (CRITICAL): Ahsay AhsayCBS \u226410.3.2 suffers OS command injection in Replication Receiver (/rps/api/json/UpdateReceivers.do). Remote RCE possible \u2014 public exploit out. Patch to 10.3.4+ now. https://radar.offseq.com/threat/cve-2026-105134-os-command-injection-in-ahsay-ahsaycbs-a9df873cc55c0ce9 #OffSeq #Vuln #CVE #PatchNow", "creation_timestamp": "2026-10-04T10:30:26.879818Z"}</description>
      <content:encoded>{"uuid": "2583ae6e-69a9-4817-8bf7-32dfb7cc75c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117382173564078136", "content": "CVE-2026-105134 (CRITICAL): Ahsay AhsayCBS \u226410.3.2 suffers OS command injection in Replication Receiver (/rps/api/json/UpdateReceivers.do). Remote RCE possible \u2014 public exploit out. Patch to 10.3.4+ now. https://radar.offseq.com/threat/cve-2026-105134-os-command-injection-in-ahsay-ahsaycbs-a9df873cc55c0ce9 #OffSeq #Vuln #CVE #PatchNow", "creation_timestamp": "2026-10-04T10:30:26.879818Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2583ae6e-69a9-4817-8bf7-32dfb7cc75c9/export</guid>
      <pubDate>Sun, 04 Oct 2026 10:30:26 +0000</pubDate>
    </item>
    <item>
      <title>72c6ec05-c429-4873-92ee-add5f0a64048</title>
      <link>https://vulnerability.circl.lu/sighting/72c6ec05-c429-4873-92ee-add5f0a64048/export</link>
      <description>{"uuid": "72c6ec05-c429-4873-92ee-add5f0a64048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwzx26cith22", "content": "\ud83d\udea8 CVE-2026-105134 \u2014 CVSS 9.3 CRITICAL\n\nA flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105134\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T08:07:05.861390Z"}</description>
      <content:encoded>{"uuid": "72c6ec05-c429-4873-92ee-add5f0a64048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwzx26cith22", "content": "\ud83d\udea8 CVE-2026-105134 \u2014 CVSS 9.3 CRITICAL\n\nA flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105134\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T08:07:05.861390Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/72c6ec05-c429-4873-92ee-add5f0a64048/export</guid>
      <pubDate>Sun, 04 Oct 2026 08:07:05 +0000</pubDate>
    </item>
    <item>
      <title>a7951e9c-db34-429d-977a-f097d3a17afa</title>
      <link>https://vulnerability.circl.lu/sighting/a7951e9c-db34-429d-977a-f097d3a17afa/export</link>
      <description>{"uuid": "a7951e9c-db34-429d-977a-f097d3a17afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://gist.github.com/ichintu/231f28d16cc1668438fdb199fb3943c7", "content": "This daily cyber threat intelligence briefing covers critical vulnerabilities, enforcement actions, emerging threats, and strategic guidance:\n\n- **Critical Vulnerabilities:** Two CVSS 10.0 flaws were disclosed: a code injection in InternLM MindSearch (CVE-2026-105135) and an OS command injection in Ahsay AhsayCBS (CVE-2026-105134), both actively exploited in the wild.\n- **Law Enforcement &amp;amp; Espionage:** The FBI detained suspected ShinyHunters extortionist \u201cRey\u201d in Jordan, who is now cooperating with investigators. Separately, China-aligned TA419 is targeting U.S. AI policy experts with Microsoft account takeover phishing campaigns.\n- **Post-Quantum Migration:** Experts urge SMBs to immediately map cryptographic assets and begin migration to counter \u201charvest now, decrypt later\u201d threats, citing finalized NIST PQC standards and cloud vendor roadmaps.\n- **Industry Discourse:** Security professionals highlight that superficially renaming threats or security practices cannot substitute for addressing underlying vulnerabilities and operational gaps.", "creation_timestamp": "2026-10-04T08:00:33.000000Z"}</description>
      <content:encoded>{"uuid": "a7951e9c-db34-429d-977a-f097d3a17afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://gist.github.com/ichintu/231f28d16cc1668438fdb199fb3943c7", "content": "This daily cyber threat intelligence briefing covers critical vulnerabilities, enforcement actions, emerging threats, and strategic guidance:\n\n- **Critical Vulnerabilities:** Two CVSS 10.0 flaws were disclosed: a code injection in InternLM MindSearch (CVE-2026-105135) and an OS command injection in Ahsay AhsayCBS (CVE-2026-105134), both actively exploited in the wild.\n- **Law Enforcement &amp;amp; Espionage:** The FBI detained suspected ShinyHunters extortionist \u201cRey\u201d in Jordan, who is now cooperating with investigators. Separately, China-aligned TA419 is targeting U.S. AI policy experts with Microsoft account takeover phishing campaigns.\n- **Post-Quantum Migration:** Experts urge SMBs to immediately map cryptographic assets and begin migration to counter \u201charvest now, decrypt later\u201d threats, citing finalized NIST PQC standards and cloud vendor roadmaps.\n- **Industry Discourse:** Security professionals highlight that superficially renaming threats or security practices cannot substitute for addressing underlying vulnerabilities and operational gaps.", "creation_timestamp": "2026-10-04T08:00:33.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a7951e9c-db34-429d-977a-f097d3a17afa/export</guid>
      <pubDate>Sun, 04 Oct 2026 08:00:33 +0000</pubDate>
    </item>
    <item>
      <title>3a6a5260-bf72-4a40-be72-96f48919f31f</title>
      <link>https://vulnerability.circl.lu/sighting/3a6a5260-bf72-4a40-be72-96f48919f31f/export</link>
      <description>{"uuid": "3a6a5260-bf72-4a40-be72-96f48919f31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378933239812056", "content": "There is a new vulnerability with elevated criticality in Ahsay AhsayCBS (CVE-2026-105134) https://vuldb.com/vuln/413351", "creation_timestamp": "2026-10-03T20:46:23.154787Z"}</description>
      <content:encoded>{"uuid": "3a6a5260-bf72-4a40-be72-96f48919f31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105134", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378933239812056", "content": "There is a new vulnerability with elevated criticality in Ahsay AhsayCBS (CVE-2026-105134) https://vuldb.com/vuln/413351", "creation_timestamp": "2026-10-03T20:46:23.154787Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3a6a5260-bf72-4a40-be72-96f48919f31f/export</guid>
      <pubDate>Sat, 03 Oct 2026 20:46:23 +0000</pubDate>
    </item>
  </channel>
</rss>
