<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 20:31:23 +0000</lastBuildDate>
    <item>
      <title>00be46f3-a115-44de-900c-e6a0e42c854a</title>
      <link>https://vulnerability.circl.lu/sighting/00be46f3-a115-44de-900c-e6a0e42c854a/export</link>
      <description>{"uuid": "00be46f3-a115-44de-900c-e6a0e42c854a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18397", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwxeuemg452q", "content": "\ud83e\udd16 CVE-2026-18397 (CVSS 9.4): drive-by RCE in Thales SConnect, the browser extension behind SWIFT 3SKey hardware MFA. A hand-rolled RSA check reads a stale buffer; heap spray bypasses it in ~6-10s.\nhttps://www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce", "creation_timestamp": "2026-10-03T07:36:24.254233Z"}</description>
      <content:encoded>{"uuid": "00be46f3-a115-44de-900c-e6a0e42c854a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18397", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwxeuemg452q", "content": "\ud83e\udd16 CVE-2026-18397 (CVSS 9.4): drive-by RCE in Thales SConnect, the browser extension behind SWIFT 3SKey hardware MFA. A hand-rolled RSA check reads a stale buffer; heap spray bypasses it in ~6-10s.\nhttps://www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce", "creation_timestamp": "2026-10-03T07:36:24.254233Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/00be46f3-a115-44de-900c-e6a0e42c854a/export</guid>
      <pubDate>Sat, 03 Oct 2026 07:36:24 +0000</pubDate>
    </item>
    <item>
      <title>2604af66-d0c8-4892-9a80-8582ee0a4a5a</title>
      <link>https://vulnerability.circl.lu/sighting/2604af66-d0c8-4892-9a80-8582ee0a4a5a/export</link>
      <description>{"uuid": "2604af66-d0c8-4892-9a80-8582ee0a4a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18397", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mww2z4wf5d2p", "content": "CVE-2026-18397: AI Agents Lower the Bar for Exploiting SConnect", "creation_timestamp": "2026-10-02T19:07:26.761873Z"}</description>
      <content:encoded>{"uuid": "2604af66-d0c8-4892-9a80-8582ee0a4a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18397", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mww2z4wf5d2p", "content": "CVE-2026-18397: AI Agents Lower the Bar for Exploiting SConnect", "creation_timestamp": "2026-10-02T19:07:26.761873Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2604af66-d0c8-4892-9a80-8582ee0a4a5a/export</guid>
      <pubDate>Fri, 02 Oct 2026 19:07:26 +0000</pubDate>
    </item>
  </channel>
</rss>
