<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-20T21:55:02.850748+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/092868a2-2b9d-4d16-a13f-d6c365b3d0ff/export</id>
    <title>092868a2-2b9d-4d16-a13f-d6c365b3d0ff</title>
    <updated>2026-09-20T21:55:02.864229+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "092868a2-2b9d-4d16-a13f-d6c365b3d0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5027", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42921", "content": "Path traversal flaw in AI dev platform Langflow exploited in attacks\n\nAttackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. [...]\nhttps://www.bleepingcomputer.com/news/security/path-traversal-flaw-in-ai-dev-platform-langflow-exploited-in-attacks/", "creation_timestamp": "2026-09-19T00:00:47.226898Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/092868a2-2b9d-4d16-a13f-d6c365b3d0ff/export"/>
    <published>2026-09-19T00:00:47.226898+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d7060bb0-e30b-4eb1-947d-ffb05e8d7ab4/export</id>
    <title>d7060bb0-e30b-4eb1-947d-ffb05e8d7ab4</title>
    <updated>2026-09-20T21:55:02.867314+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d7060bb0-e30b-4eb1-947d-ffb05e8d7ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43609", "content": "Fourth SharePoint Vulnerability Exploited in Past Month\u2019s Wave of Attacks\n\nCVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access.\nThe post Fourth SharePoint Vulnerability Exploited in Past Month\u2019s Wave of Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/fourth-sharepoint-vulnerability-exploited-in-past-months-wave-of-attacks/", "creation_timestamp": "2026-09-19T00:00:43.558389Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d7060bb0-e30b-4eb1-947d-ffb05e8d7ab4/export"/>
    <published>2026-09-19T00:00:43.558389+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/708ae957-b908-4743-b363-929ed063235f/export</id>
    <title>708ae957-b908-4743-b363-929ed063235f</title>
    <updated>2026-09-20T21:55:02.867457+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "708ae957-b908-4743-b363-929ed063235f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43571", "content": "Critical SharePoint RCE flaw exploited to steal machine keys\n\nHackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-sharepoint-rce-flaw-exploited-to-steal-machine-keys/", "creation_timestamp": "2026-09-19T00:00:42.763467Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/708ae957-b908-4743-b363-929ed063235f/export"/>
    <published>2026-09-19T00:00:42.763467+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/30e9a319-1dd6-4529-8cf4-e9181a006e16/export</id>
    <title>30e9a319-1dd6-4529-8cf4-e9181a006e16</title>
    <updated>2026-09-20T21:55:02.867586+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "30e9a319-1dd6-4529-8cf4-e9181a006e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50656", "type": "seen", "source": "https://t.me/VulnerabilityNews/43395", "content": "Microsoft Patches Defender \u2018RoguePlanet\u2019 Vulnerability\n\nThe privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update.\nThe post Microsoft Patches Defender \u2018RoguePlanet\u2019 Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/microsoft-patches-defender-rogueplanet-vulnerability/", "creation_timestamp": "2026-09-19T00:00:42.185666Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/30e9a319-1dd6-4529-8cf4-e9181a006e16/export"/>
    <published>2026-09-19T00:00:42.185666+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1526014f-d55e-48d0-95e1-d8873127c603/export</id>
    <title>1526014f-d55e-48d0-95e1-d8873127c603</title>
    <updated>2026-09-20T21:55:02.867690+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1526014f-d55e-48d0-95e1-d8873127c603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50656", "type": "seen", "source": "https://t.me/VulnerabilityNews/43395", "content": "Microsoft Patches Defender \u2018RoguePlanet\u2019 Vulnerability\n\nThe privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update.\nThe post Microsoft Patches Defender \u2018RoguePlanet\u2019 Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/microsoft-patches-defender-rogueplanet-vulnerability/", "creation_timestamp": "2026-09-18T08:00:07.184924Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1526014f-d55e-48d0-95e1-d8873127c603/export"/>
    <published>2026-09-18T08:00:07.184924+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bdceeac3-9dd8-4a1f-bf17-3a37e76e299f/export</id>
    <title>bdceeac3-9dd8-4a1f-bf17-3a37e76e299f</title>
    <updated>2026-09-20T21:55:02.867805+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bdceeac3-9dd8-4a1f-bf17-3a37e76e299f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "seen", "source": "https://t.me/VulnerabilityNews/43571", "content": "Critical SharePoint RCE flaw exploited to steal machine keys\n\nHackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-sharepoint-rce-flaw-exploited-to-steal-machine-keys/", "creation_timestamp": "2026-09-18T08:00:06.711606Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bdceeac3-9dd8-4a1f-bf17-3a37e76e299f/export"/>
    <published>2026-09-18T08:00:06.711606+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/79c25626-6f22-400d-9859-c53e7c48a00e/export</id>
    <title>79c25626-6f22-400d-9859-c53e7c48a00e</title>
    <updated>2026-09-20T21:55:02.867904+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "79c25626-6f22-400d-9859-c53e7c48a00e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50522", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43609", "content": "Fourth SharePoint Vulnerability Exploited in Past Month\u2019s Wave of Attacks\n\nCVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access.\nThe post Fourth SharePoint Vulnerability Exploited in Past Month\u2019s Wave of Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/fourth-sharepoint-vulnerability-exploited-in-past-months-wave-of-attacks/", "creation_timestamp": "2026-09-18T08:00:05.985359Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/79c25626-6f22-400d-9859-c53e7c48a00e/export"/>
    <published>2026-09-18T08:00:05.985359+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/24e9b3bf-47c8-4fb7-8ace-da455aefaccd/export</id>
    <title>24e9b3bf-47c8-4fb7-8ace-da455aefaccd</title>
    <updated>2026-09-20T21:55:02.868007+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "24e9b3bf-47c8-4fb7-8ace-da455aefaccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5027", "type": "seen", "source": "https://t.me/VulnerabilityNews/42921", "content": "Path traversal flaw in AI dev platform Langflow exploited in attacks\n\nAttackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. [...]\nhttps://www.bleepingcomputer.com/news/security/path-traversal-flaw-in-ai-dev-platform-langflow-exploited-in-attacks/", "creation_timestamp": "2026-09-18T05:00:05.639981Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/24e9b3bf-47c8-4fb7-8ace-da455aefaccd/export"/>
    <published>2026-09-18T05:00:05.639981+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f15486e0-6557-45c2-a4f4-8db9e34fc77c/export</id>
    <title>f15486e0-6557-45c2-a4f4-8db9e34fc77c</title>
    <updated>2026-09-20T21:55:02.868106+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f15486e0-6557-45c2-a4f4-8db9e34fc77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50751", "type": "published-proof-of-concept", "source": "Telegram/Mx0XHRqKDFkkn713qz5kssm-jfee4J-uNcsNi6zmWgMM-TA", "content": "", "creation_timestamp": "2026-09-17T01:00:05.133391Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f15486e0-6557-45c2-a4f4-8db9e34fc77c/export"/>
    <published>2026-09-17T01:00:05.133391+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/298a2788-c3d4-4d7f-8a34-a2485dd0bf45/export</id>
    <title>298a2788-c3d4-4d7f-8a34-a2485dd0bf45</title>
    <updated>2026-09-20T21:55:02.868203+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "298a2788-c3d4-4d7f-8a34-a2485dd0bf45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50751", "type": "seen", "source": "Telegram/Mx0XHRqKDFkkn713qz5kssm-jfee4J-uNcsNi6zmWgMM-TA", "content": "", "creation_timestamp": "2026-09-16T06:00:05.432559Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/298a2788-c3d4-4d7f-8a34-a2485dd0bf45/export"/>
    <published>2026-09-16T06:00:05.432559+00:00</published>
  </entry>
</feed>
