<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-24T08:17:50.114772+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5fbc6ac3-1ea0-4a43-9ade-463920fefcf1/export</id>
    <title>5fbc6ac3-1ea0-4a43-9ade-463920fefcf1</title>
    <updated>2026-09-24T08:17:50.117082+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5fbc6ac3-1ea0-4a43-9ade-463920fefcf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwanmp5ywy2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-86296: 25 interactions\nCVE-2026-7273: 20 interactions\nCVE-2026-58704: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-94127: 10 interactions\nCVE-2026-69836: 7 interactions\nCVE-2026-87902: 7 interactions\n", "creation_timestamp": "2026-09-24T06:41:57.606282Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5fbc6ac3-1ea0-4a43-9ade-463920fefcf1/export"/>
    <published>2026-09-24T06:41:57.606282+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8765cdb4-cb1e-41b0-b81d-52417b29ceb1/export</id>
    <title>8765cdb4-cb1e-41b0-b81d-52417b29ceb1</title>
    <updated>2026-09-24T08:17:50.118156+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8765cdb4-cb1e-41b0-b81d-52417b29ceb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6928", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa4qzhzsu24", "content": "CVE-2026-6928 - concert\nVersions 1.0.0 through 3.0.0 of IBM Concert can mishandle memory, which could let a malicious user cause the program to stop working or run their own code. This risk appears when an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concert #ibm #CVE #infosec", "creation_timestamp": "2026-09-24T01:40:07.826278Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8765cdb4-cb1e-41b0-b81d-52417b29ceb1/export"/>
    <published>2026-09-24T01:40:07.826278+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fbee96dc-e898-4da9-8272-ed792750c003/export</id>
    <title>fbee96dc-e898-4da9-8272-ed792750c003</title>
    <updated>2026-09-24T08:17:50.118252+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fbee96dc-e898-4da9-8272-ed792750c003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6928", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwa47qmwlj24", "content": "IBM Concert (v1.0.0 \u2013 3.0.0) is affected by a CRITICAL use-after-free vulnerability (CVSS 9.8). Remote exploitation possible \u2014 patch status unconfirmed. Monitor IBM advisories: https://radar.offseq.com/threat/cve-2026-6928-cwe-416-use-after-free-in-ibm-concert-2eb5c8a4bd6982d7 #OffSeq #IBM #CVE20...", "creation_timestamp": "2026-09-24T01:30:29.284117Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fbee96dc-e898-4da9-8272-ed792750c003/export"/>
    <published>2026-09-24T01:30:29.284117+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7c262225-d252-44f3-ac88-6122885e0b57/export</id>
    <title>7c262225-d252-44f3-ac88-6122885e0b57</title>
    <updated>2026-09-24T08:17:50.118326+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7c262225-d252-44f3-ac88-6122885e0b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6928", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117323427081734466", "content": "IBM Concert v1.0.0 \u2013 3.0.0 hit by CRITICAL use-after-free bug (CVE-2026-6928, CVSS 9.8). Remote code execution &amp;amp; full compromise possible; no patch confirmed. Monitor IBM advisories. https://radar.offseq.com/threat/cve-2026-6928-cwe-416-use-after-free-in-ibm-concert-2eb5c8a4bd6982d7 #OffSeq #Vuln #IBM #CVE20266928 #Infosec", "creation_timestamp": "2026-09-24T01:30:26.631583Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7c262225-d252-44f3-ac88-6122885e0b57/export"/>
    <published>2026-09-24T01:30:26.631583+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a5cf1f30-f395-4f6f-9741-330a7ae4baed/export</id>
    <title>a5cf1f30-f395-4f6f-9741-330a7ae4baed</title>
    <updated>2026-09-24T08:17:50.118402+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a5cf1f30-f395-4f6f-9741-330a7ae4baed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69197", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mw7x655rqn2d", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-69197) Umbraco CMS Protected Content Disclosure via Delivery API Expansion\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-09-24T00:00:06.856124Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a5cf1f30-f395-4f6f-9741-330a7ae4baed/export"/>
    <published>2026-09-24T00:00:06.856124+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2d289fba-443b-4403-819d-38dbc35e6476/export</id>
    <title>2d289fba-443b-4403-819d-38dbc35e6476</title>
    <updated>2026-09-24T08:17:50.118480+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2d289fba-443b-4403-819d-38dbc35e6476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6928", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qyhxpcv2f", "content": "\ud83d\udea8 CVE-2026-6928 \u2014 CVSS 9.8 CRITICAL\n\nIBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-6928\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:09:32.874430Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2d289fba-443b-4403-819d-38dbc35e6476/export"/>
    <published>2026-09-23T22:09:32.874430+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4483fdfc-60a8-4b0d-bf6c-823f4d439ca5/export</id>
    <title>4483fdfc-60a8-4b0d-bf6c-823f4d439ca5</title>
    <updated>2026-09-24T08:17:50.118563+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4483fdfc-60a8-4b0d-bf6c-823f4d439ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mw7pnzu6gk2c", "content": "Microsoft Entra ID\u306eRCE\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u4e0d\u6b63\u306a\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\n\n\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306f\u3001 Microsoft Entra ID\u306b\u91cd\u5927\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-69836\uff09\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u6a29\u9650\u306e\u306a\u3044\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n2026\u5e748\u670820\u65e5\u306b\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u3053\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u306f\u3001CVSS 3.1\u57fa\u672c\u30b9\u30b3\u30a2\u3067\u6700\u592710.0\u3092\u7372\u5f97\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u9ad8\u3044\u30b9\u30b3\u30a2\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u653b\u6483\u53ef\u80fd\u306a\u9818\u57df\u3001\u4f4e\u3044\u60aa\u7528\u8907\u96d1\u6027\u3001\u8a8d\u8a3c\u8981\u4ef6\u306e\u6b20\u5982\u3001\u304a\u3088\u3073\u30e6\u30fc\u30b6\u30fc\u64cd\u4f5c\u306e\u4e0d\u5728\u3092\u53cd\u6620\u3057\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-09-23T21:45:52.392307Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4483fdfc-60a8-4b0d-bf6c-823f4d439ca5/export"/>
    <published>2026-09-23T21:45:52.392307+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b2e57dc2-92af-4060-8941-51796826938a/export</id>
    <title>b2e57dc2-92af-4060-8941-51796826938a</title>
    <updated>2026-09-24T08:17:50.118643+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b2e57dc2-92af-4060-8941-51796826938a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6928", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117322465250926958", "content": "The severity is increased for this new vulnerability affecting IBM Concert (CVE-2026-6928) https://vuldb.com/vuln/409244", "creation_timestamp": "2026-09-23T21:25:50.117725Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b2e57dc2-92af-4060-8941-51796826938a/export"/>
    <published>2026-09-23T21:25:50.117725+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5a303e47-9bdf-4d08-a9a4-c196f4620d35/export</id>
    <title>5a303e47-9bdf-4d08-a9a4-c196f4620d35</title>
    <updated>2026-09-24T08:17:50.118711+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5a303e47-9bdf-4d08-a9a4-c196f4620d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69184", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw7n47k6dv22", "content": "CVE-2026-69184 c-ares memory corruption, CVSS 7.5. Malicious DNS server can stall any app using the resolver via crafted compression pointers. Patch to 1.34.7 now. https://www.valtersit.com/cve/CVE-2026-69184/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-23T21:00:03.928977Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5a303e47-9bdf-4d08-a9a4-c196f4620d35/export"/>
    <published>2026-09-23T21:00:03.928977+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d4cb0eb3-16d2-48f1-a8bf-6ed6d8bbcb9c/export</id>
    <title>d4cb0eb3-16d2-48f1-a8bf-6ed6d8bbcb9c</title>
    <updated>2026-09-24T08:17:50.118781+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d4cb0eb3-16d2-48f1-a8bf-6ed6d8bbcb9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69184", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117322285943580932", "content": "CVE-2026-69184 c-ares memory corruption, CVSS 7.5. Malicious DNS server can stall any app using the resolver via crafted compression pointers. Patch to 1.34.7 now. https://www.valtersit.com/cve/CVE-2026-69184/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-23T20:40:20.639251Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d4cb0eb3-16d2-48f1-a8bf-6ed6d8bbcb9c/export"/>
    <published>2026-09-23T20:40:20.639251+00:00</published>
  </entry>
</feed>
