<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 04 Jul 2026 14:45:56 +0000</lastBuildDate>
    <item>
      <title>ea39e69d-34e1-4525-9d9b-6422e73fb809</title>
      <link>https://vulnerability.circl.lu/sighting/ea39e69d-34e1-4525-9d9b-6422e73fb809/export</link>
      <description>{"uuid": "ea39e69d-34e1-4525-9d9b-6422e73fb809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpsqigcwh72j", "content": "Two new malware families delivered through a single vulnerability.\n\nCVE-2026-48558.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-04T09:24:48.242999Z"}</description>
      <content:encoded>{"uuid": "ea39e69d-34e1-4525-9d9b-6422e73fb809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpsqigcwh72j", "content": "Two new malware families delivered through a single vulnerability.\n\nCVE-2026-48558.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-04T09:24:48.242999Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ea39e69d-34e1-4525-9d9b-6422e73fb809/export</guid>
      <pubDate>Sat, 04 Jul 2026 09:24:48 +0000</pubDate>
    </item>
    <item>
      <title>a9ddd751-dafa-4f39-ad18-e6143cb48d9d</title>
      <link>https://vulnerability.circl.lu/sighting/a9ddd751-dafa-4f39-ad18-e6143cb48d9d/export</link>
      <description>{"uuid": "a9ddd751-dafa-4f39-ad18-e6143cb48d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mpsd2qqq3x2z", "content": "EXCLUSIVE LEAK! \ud83d\udea8 Watch how hackers exploit SimpleHelp's CVE-2026-48558 to deploy TaskWeaver and Djinn Stealer. Download the setup installer and activate the premium mod menu tool \u2b07\ufe0f\u2699\ufe0f to stay safe! #USMNT", "creation_timestamp": "2026-07-04T05:24:30.821531Z"}</description>
      <content:encoded>{"uuid": "a9ddd751-dafa-4f39-ad18-e6143cb48d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mpsd2qqq3x2z", "content": "EXCLUSIVE LEAK! \ud83d\udea8 Watch how hackers exploit SimpleHelp's CVE-2026-48558 to deploy TaskWeaver and Djinn Stealer. Download the setup installer and activate the premium mod menu tool \u2b07\ufe0f\u2699\ufe0f to stay safe! #USMNT", "creation_timestamp": "2026-07-04T05:24:30.821531Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a9ddd751-dafa-4f39-ad18-e6143cb48d9d/export</guid>
      <pubDate>Sat, 04 Jul 2026 05:24:30 +0000</pubDate>
    </item>
    <item>
      <title>30bbf9d2-920a-4dbd-9e1b-ab41675dd2cb</title>
      <link>https://vulnerability.circl.lu/sighting/30bbf9d2-920a-4dbd-9e1b-ab41675dd2cb/export</link>
      <description>{"uuid": "30bbf9d2-920a-4dbd-9e1b-ab41675dd2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpqcf4cf3e27", "content": "A CVSS 10.0 bug is being exploited in the wild right now.\n\nSimpleHelp RCE.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-03T10:07:04.894653Z"}</description>
      <content:encoded>{"uuid": "30bbf9d2-920a-4dbd-9e1b-ab41675dd2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpqcf4cf3e27", "content": "A CVSS 10.0 bug is being exploited in the wild right now.\n\nSimpleHelp RCE.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-03T10:07:04.894653Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/30bbf9d2-920a-4dbd-9e1b-ab41675dd2cb/export</guid>
      <pubDate>Fri, 03 Jul 2026 10:07:04 +0000</pubDate>
    </item>
    <item>
      <title>2b9f29ce-e694-4e3c-99d6-e49aec14e252</title>
      <link>https://vulnerability.circl.lu/sighting/2b9f29ce-e694-4e3c-99d6-e49aec14e252/export</link>
      <description>{"uuid": "2b9f29ce-e694-4e3c-99d6-e49aec14e252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mppdv3irnl2n", "content": "Explotan una falla m\u00e1xima en SimpleHelp para colar malware.\n\nCVE-2026-48558 (severidad 10) deja falsificar sesiones de t\u00e9cnico en SimpleHelp, software de soporte remoto, y se usa para colar malware. Hay parche: urge actualizar.\n\nLeer en SimpleHelp\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-07-03T01:01:16.105540Z"}</description>
      <content:encoded>{"uuid": "2b9f29ce-e694-4e3c-99d6-e49aec14e252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mppdv3irnl2n", "content": "Explotan una falla m\u00e1xima en SimpleHelp para colar malware.\n\nCVE-2026-48558 (severidad 10) deja falsificar sesiones de t\u00e9cnico en SimpleHelp, software de soporte remoto, y se usa para colar malware. Hay parche: urge actualizar.\n\nLeer en SimpleHelp\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-07-03T01:01:16.105540Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2b9f29ce-e694-4e3c-99d6-e49aec14e252/export</guid>
      <pubDate>Fri, 03 Jul 2026 01:01:16 +0000</pubDate>
    </item>
    <item>
      <title>66e85215-963d-467a-b971-5d71b3f5a0fe</title>
      <link>https://vulnerability.circl.lu/sighting/66e85215-963d-467a-b971-5d71b3f5a0fe/export</link>
      <description>{"uuid": "66e85215-963d-467a-b971-5d71b3f5a0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://www.cert.dk/news/2026-07-02/Saarbarhederne-vaelter-ind-juni-saetter-tempoet-op-i-trusselslandskabet", "content": "", "creation_timestamp": "2026-07-02T13:45:07.455381Z"}</description>
      <content:encoded>{"uuid": "66e85215-963d-467a-b971-5d71b3f5a0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://www.cert.dk/news/2026-07-02/Saarbarhederne-vaelter-ind-juni-saetter-tempoet-op-i-trusselslandskabet", "content": "", "creation_timestamp": "2026-07-02T13:45:07.455381Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/66e85215-963d-467a-b971-5d71b3f5a0fe/export</guid>
      <pubDate>Thu, 02 Jul 2026 13:45:07 +0000</pubDate>
    </item>
    <item>
      <title>ca706ca1-e150-4893-9e06-a97dbfc5a05b</title>
      <link>https://vulnerability.circl.lu/sighting/ca706ca1-e150-4893-9e06-a97dbfc5a05b/export</link>
      <description>{"uuid": "ca706ca1-e150-4893-9e06-a97dbfc5a05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mpnuuvsmrt2w", "content": "SimpleHelp CVE-2026-48558 (CVSS 10.0): forged OIDC token = full Technician session, no password needed. CISA KEV June 29. Attackers deploy TaskWeaver + Djinn Stealer via MSP access to hit customers. Patch to 5.5.16/6.0 RC2 now.\n \nzurl.co/OEhoY \n\n#CyberSecurity", "creation_timestamp": "2026-07-02T11:00:04.070313Z"}</description>
      <content:encoded>{"uuid": "ca706ca1-e150-4893-9e06-a97dbfc5a05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mpnuuvsmrt2w", "content": "SimpleHelp CVE-2026-48558 (CVSS 10.0): forged OIDC token = full Technician session, no password needed. CISA KEV June 29. Attackers deploy TaskWeaver + Djinn Stealer via MSP access to hit customers. Patch to 5.5.16/6.0 RC2 now.\n \nzurl.co/OEhoY \n\n#CyberSecurity", "creation_timestamp": "2026-07-02T11:00:04.070313Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ca706ca1-e150-4893-9e06-a97dbfc5a05b/export</guid>
      <pubDate>Thu, 02 Jul 2026 11:00:04 +0000</pubDate>
    </item>
    <item>
      <title>22ea71bc-f0a4-44da-96fc-bd43ec719231</title>
      <link>https://vulnerability.circl.lu/sighting/22ea71bc-f0a4-44da-96fc-bd43ec719231/export</link>
      <description>{"uuid": "22ea71bc-f0a4-44da-96fc-bd43ec719231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpns6rekgd2k", "content": "\u26a0\ufe0f Two new malware families. One patched vulnerability. Zero attribution.\n\nCVE-2026-48558 in SimpleHelp.\nCVSS 10.0.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-02T10:11:53.560337Z"}</description>
      <content:encoded>{"uuid": "22ea71bc-f0a4-44da-96fc-bd43ec719231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48558", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpns6rekgd2k", "content": "\u26a0\ufe0f Two new malware families. One patched vulnerability. Zero attribution.\n\nCVE-2026-48558 in SimpleHelp.\nCVSS 10.0.\n\nhttps://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-02T10:11:53.560337Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/22ea71bc-f0a4-44da-96fc-bd43ec719231/export</guid>
      <pubDate>Thu, 02 Jul 2026 10:11:53 +0000</pubDate>
    </item>
    <item>
      <title>7854b8cd-932b-4aad-8ed8-d6a5ce39e3ac</title>
      <link>https://vulnerability.circl.lu/sighting/7854b8cd-932b-4aad-8ed8-d6a5ce39e3ac/export</link>
      <description>{"uuid": "7854b8cd-932b-4aad-8ed8-d6a5ce39e3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/AfaluNulax.m.pupu.moe.ap.brid.gy/post/3mpnqch663x72", "content": "CISA adds critical SimpleHelp auth bypass to KEV CISA has added CVE-2026-48558 to the Known Exploited Vulnerabilities catalog. The flaw affects SimpleHelp 5.5.15 and earlier plus 6.0 pre-release builds, and allows remote unauthenticated attackers to forge OIDC [\u2026] \n\n[Original post on pupu.moe]", "creation_timestamp": "2026-07-02T09:38:15.215895Z"}</description>
      <content:encoded>{"uuid": "7854b8cd-932b-4aad-8ed8-d6a5ce39e3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/AfaluNulax.m.pupu.moe.ap.brid.gy/post/3mpnqch663x72", "content": "CISA adds critical SimpleHelp auth bypass to KEV CISA has added CVE-2026-48558 to the Known Exploited Vulnerabilities catalog. The flaw affects SimpleHelp 5.5.15 and earlier plus 6.0 pre-release builds, and allows remote unauthenticated attackers to forge OIDC [\u2026] \n\n[Original post on pupu.moe]", "creation_timestamp": "2026-07-02T09:38:15.215895Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7854b8cd-932b-4aad-8ed8-d6a5ce39e3ac/export</guid>
      <pubDate>Thu, 02 Jul 2026 09:38:15 +0000</pubDate>
    </item>
    <item>
      <title>8217f8ef-1bb9-4adc-a1f9-2dd02c13c37d</title>
      <link>https://vulnerability.circl.lu/sighting/8217f8ef-1bb9-4adc-a1f9-2dd02c13c37d/export</link>
      <description>{"uuid": "8217f8ef-1bb9-4adc-a1f9-2dd02c13c37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mpnq3cfdcs2t", "content": "SimpleHelp CVE-2026-48558 is now confirmed exploited-in-the-wild &amp;amp; on US CISA KEV \nwww.cisa.gov/known-exploi...\n\nWe are scanning for CVE-2026-48558 vulnerable instances since 2026-06-16. We see 439 unpatched (2026-07-01 scan)\n\nDashboard World Map view:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-07-02T09:34:10.791888Z"}</description>
      <content:encoded>{"uuid": "8217f8ef-1bb9-4adc-a1f9-2dd02c13c37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mpnq3cfdcs2t", "content": "SimpleHelp CVE-2026-48558 is now confirmed exploited-in-the-wild &amp;amp; on US CISA KEV \nwww.cisa.gov/known-exploi...\n\nWe are scanning for CVE-2026-48558 vulnerable instances since 2026-06-16. We see 439 unpatched (2026-07-01 scan)\n\nDashboard World Map view:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-07-02T09:34:10.791888Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8217f8ef-1bb9-4adc-a1f9-2dd02c13c37d/export</guid>
      <pubDate>Thu, 02 Jul 2026 09:34:10 +0000</pubDate>
    </item>
    <item>
      <title>1d231460-8bcb-4467-9d7a-0c0f5d55481c</title>
      <link>https://vulnerability.circl.lu/sighting/1d231460-8bcb-4467-9d7a-0c0f5d55481c/export</link>
      <description>{"uuid": "1d231460-8bcb-4467-9d7a-0c0f5d55481c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mpnq36omic2t", "content": "SimpleHelp CVE-2026-48558 is now confirmed exploited-in-the-wild &amp;amp; on US CISA KEV \nwww.cisa.gov/known-exploi...\n\nWe are scanning for CVE-2026-48558 vulnerable instances since 2026-06-16. We see 439 unpatched (2026-07-01 scan)\n\nDashboard World Map view:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-07-02T09:34:10.339162Z"}</description>
      <content:encoded>{"uuid": "1d231460-8bcb-4467-9d7a-0c0f5d55481c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48558", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mpnq36omic2t", "content": "SimpleHelp CVE-2026-48558 is now confirmed exploited-in-the-wild &amp;amp; on US CISA KEV \nwww.cisa.gov/known-exploi...\n\nWe are scanning for CVE-2026-48558 vulnerable instances since 2026-06-16. We see 439 unpatched (2026-07-01 scan)\n\nDashboard World Map view:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-07-02T09:34:10.339162Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1d231460-8bcb-4467-9d7a-0c0f5d55481c/export</guid>
      <pubDate>Thu, 02 Jul 2026 09:34:10 +0000</pubDate>
    </item>
  </channel>
</rss>
