https://vulnerability.circl.lu/sightings/feed 2026-09-21T05:13:54.782451+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9133edeb-a01c-4ec2-9359-80db7e403393/export 2026-09-21T05:13:54.808795+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9133edeb-a01c-4ec2-9359-80db7e403393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102771", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32996\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a suce0155\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 14:58:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T00:00:07.273347Z"} 2026-09-20T00:00:07.273347+00:00 https://vulnerability.circl.lu/sighting/53724773-4948-40d6-ba9a-826ed7792a0f/export 2026-09-21T05:13:54.812070+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "53724773-4948-40d6-ba9a-826ed7792a0f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fbe0bf49-cd97-455c-89f8-8cc99b2ea6b7", "content": "", "creation_timestamp": "2026-09-19T21:00:33.764456Z"} 2026-09-19T21:00:33.764456+00:00 https://vulnerability.circl.lu/sighting/ee61cf7a-815c-4f10-a00a-dcba35a3d12d/export 2026-09-21T05:13:54.812213+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ee61cf7a-815c-4f10-a00a-dcba35a3d12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102771", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32996\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a suce0155\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 14:58:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T17:00:04.803045Z"} 2026-09-19T17:00:04.803045+00:00 https://vulnerability.circl.lu/sighting/38df7ee8-1cf6-4516-a952-9597be92f7c0/export 2026-09-21T05:13:54.812325+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "38df7ee8-1cf6-4516-a952-9597be92f7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "seen", "source": "https://gist.github.com/ichintu/5841827a4cd9286d1b1bda016e23c9f0", "content": "This daily cyber threat intelligence digest highlights four key developments: (1) identity visibility remains foundational to modern security, despite increasing complexities in cloud and multicloud environments; (2) significant technical and operational hurdles continue to complicate out-of-band patching of compromised Operational Technology (OT) devices; (3) researchers leveraged Anthropic\u2019s Claude Opus 5 to chain vulnerabilities and breach OpenAI employee accounts (CVE-2026-32882, Sept 19, 2026); and (4) a critical RCE vulnerability (CVE-2026-93985, Sept 19, 2026) in OpenPanel\u2019s JavaScript runtime enables sandbox escapes for arbitrary code execution. Together, these updates underscore emerging threats in identity management, OT security, AI-assisted exploitation, and critical software flaws.", "creation_timestamp": "2026-09-19T16:01:30.134203Z"} 2026-09-19T16:01:30.134203+00:00 https://vulnerability.circl.lu/sighting/038fb766-9962-4c85-a667-d2d665855e0a/export 2026-09-21T05:13:54.812442+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "038fb766-9962-4c85-a667-d2d665855e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32194", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/43646", "content": "Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers\n\nA crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet.\n\nXBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and\nhttps://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html", "creation_timestamp": "2026-09-19T00:00:43.392804Z"} 2026-09-19T00:00:43.392804+00:00 https://vulnerability.circl.lu/sighting/a9f3ec90-1489-4451-9007-a85362eb6de5/export 2026-09-21T05:13:54.812563+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a9f3ec90-1489-4451-9007-a85362eb6de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44341", "content": "Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites\n\nTracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions.\nThe post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek.\nhttps://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/", "creation_timestamp": "2026-09-19T00:00:37.104860Z"} 2026-09-19T00:00:37.104860+00:00 https://vulnerability.circl.lu/sighting/4f413462-49a8-4cba-afdf-089a0efe6554/export 2026-09-21T05:13:54.812667+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4f413462-49a8-4cba-afdf-089a0efe6554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44305", "content": "Critical Elementor Pro flaw exploited to take over WordPress sites\n\nA recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-elementor-pro-flaw-exploited-to-take-over-wordpress-sites/", "creation_timestamp": "2026-09-19T00:00:36.290866Z"} 2026-09-19T00:00:36.290866+00:00 https://vulnerability.circl.lu/sighting/bfceb75c-f5ff-403f-8c2e-ce30b165640f/export 2026-09-21T05:13:54.812773+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bfceb75c-f5ff-403f-8c2e-ce30b165640f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32604", "type": "published-proof-of-concept", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-19T00:00:26.352028Z"} 2026-09-19T00:00:26.352028+00:00 https://vulnerability.circl.lu/sighting/83beb65b-9a36-4089-bba7-7b945941cad1/export 2026-09-21T05:13:54.812877+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "83beb65b-9a36-4089-bba7-7b945941cad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-19T00:00:14.252914Z"} 2026-09-19T00:00:14.252914+00:00 https://vulnerability.circl.lu/sighting/d33f4336-a9cb-4120-b24f-eda155bbc181/export 2026-09-21T05:13:54.812974+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d33f4336-a9cb-4120-b24f-eda155bbc181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32604", "type": "seen", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-18T12:00:08.076406Z"} 2026-09-18T12:00:08.076406+00:00