<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-28T20:40:21.475759+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/347134c9-fdb5-471a-97e1-5de78b8a869d/export</id>
    <title>347134c9-fdb5-471a-97e1-5de78b8a869d</title>
    <updated>2026-09-28T20:40:21.494174+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "347134c9-fdb5-471a-97e1-5de78b8a869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.692297Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/347134c9-fdb5-471a-97e1-5de78b8a869d/export"/>
    <published>2026-09-04T00:01:01.692297+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/15652bbc-4c7d-4de0-b83d-24f834ee1796/export</id>
    <title>15652bbc-4c7d-4de0-b83d-24f834ee1796</title>
    <updated>2026-09-28T20:40:21.496856+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "15652bbc-4c7d-4de0-b83d-24f834ee1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.595157Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/15652bbc-4c7d-4de0-b83d-24f834ee1796/export"/>
    <published>2026-09-03T03:00:05.595157+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5/export</id>
    <title>0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5</title>
    <updated>2026-09-28T20:40:21.496995+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T02:00:05.267375Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5/export"/>
    <published>2026-09-03T02:00:05.267375+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1884d4ec-5be6-4c10-bd13-43fab0662ced/export</id>
    <title>1884d4ec-5be6-4c10-bd13-43fab0662ced</title>
    <updated>2026-09-28T20:40:21.497113+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1884d4ec-5be6-4c10-bd13-43fab0662ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0830", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/177660", "content": "(Write-up) RCE in AWS Kiro IDE\nhttps://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/\n\n  submitted by    /u/SkyFallRobin  (https://www.reddit.com/user/SkyFallRobin) \n [link] (https://medium.com/@dhiraj_mishra/cve-2026-0830-aws-kiro-gitlab-helper-remote-code-execution-1f826469228d)   [comments] (https://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/)", "creation_timestamp": "2026-09-03T02:00:05.155985Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1884d4ec-5be6-4c10-bd13-43fab0662ced/export"/>
    <published>2026-09-03T02:00:05.155985+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2d91ced9-838b-4c3b-8627-6c5a3cd52006/export</id>
    <title>2d91ced9-838b-4c3b-8627-6c5a3cd52006</title>
    <updated>2026-09-28T20:40:21.497230+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2d91ced9-838b-4c3b-8627-6c5a3cd52006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-03T00:00:50.751689Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2d91ced9-838b-4c3b-8627-6c5a3cd52006/export"/>
    <published>2026-09-03T00:00:50.751689+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c2f35e2d-f399-4bef-9333-9d085068de2c/export</id>
    <title>c2f35e2d-f399-4bef-9333-9d085068de2c</title>
    <updated>2026-09-28T20:40:21.497346+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c2f35e2d-f399-4bef-9333-9d085068de2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44388", "content": "Una vulnerabilidad recientemente revelada, CVE-2026-0828, en el controlador del n\u00facleo de Windows ProcessMonitorDriver.sys pone de manifiesto una capacidad peligrosa: cualquier aplicaci\u00f3n en modo usuario que obtenga un identificador del dispositivo puede finalizar procesos arbitrarios, incluidos los procesos protegidos del sistema, sin que se realicen las comprobaciones de control de acceso adecuadas. Esta falla elude de hecho el modelo de seguridad habitual de Windows que protege los servicios cr\u00edticos del sistema y los componentes de seguridad.\n\nhttps://github.com/oxfemale/KillChain\n\n#maldev #github #killprocess", "creation_timestamp": "2026-09-03T00:00:47.422670Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c2f35e2d-f399-4bef-9333-9d085068de2c/export"/>
    <published>2026-09-03T00:00:47.422670+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c15c5a87-4977-48eb-9404-2ddb740015bf/export</id>
    <title>c15c5a87-4977-48eb-9404-2ddb740015bf</title>
    <updated>2026-09-28T20:40:21.497449+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c15c5a87-4977-48eb-9404-2ddb740015bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0848", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44124", "content": "https://unaaldia.hispasec.com/2026/03/como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848.html?utm_source=rss&amp;amp;utm_medium=rss&amp;amp;utm_campaign=como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848", "creation_timestamp": "2026-09-03T00:00:47.165005Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c15c5a87-4977-48eb-9404-2ddb740015bf/export"/>
    <published>2026-09-03T00:00:47.165005+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/89b9925f-f0c4-4196-bd60-81eba0878e93/export</id>
    <title>89b9925f-f0c4-4196-bd60-81eba0878e93</title>
    <updated>2026-09-28T20:40:21.497549+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "89b9925f-f0c4-4196-bd60-81eba0878e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100799", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a dast\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ximerag\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 13:50:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0828\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T00:00:43.505229Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/89b9925f-f0c4-4196-bd60-81eba0878e93/export"/>
    <published>2026-09-03T00:00:43.505229+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9948aa83-0c31-4985-8716-ce0bd49b800b/export</id>
    <title>9948aa83-0c31-4985-8716-ce0bd49b800b</title>
    <updated>2026-09-28T20:40:21.497660+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9948aa83-0c31-4985-8716-ce0bd49b800b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "https://t.me/GithubRedTeam/100799", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a dast\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ximerag\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 13:50:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0828\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T15:00:05.952423Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9948aa83-0c31-4985-8716-ce0bd49b800b/export"/>
    <published>2026-09-02T15:00:05.952423+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/742577c8-557c-4af6-9c5a-7873ac7e9115/export</id>
    <title>742577c8-557c-4af6-9c5a-7873ac7e9115</title>
    <updated>2026-09-28T20:40:21.497769+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "742577c8-557c-4af6-9c5a-7873ac7e9115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0848", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/44124", "content": "https://unaaldia.hispasec.com/2026/03/como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848.html?utm_source=rss&amp;amp;utm_medium=rss&amp;amp;utm_campaign=como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848", "creation_timestamp": "2026-09-02T06:00:15.559222Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/742577c8-557c-4af6-9c5a-7873ac7e9115/export"/>
    <published>2026-09-02T06:00:15.559222+00:00</published>
  </entry>
</feed>
