<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-31T20:51:59.610223+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fd1fc4d2-b648-4fbb-87a3-0932404aa0dd/export</id>
    <title>fd1fc4d2-b648-4fbb-87a3-0932404aa0dd</title>
    <updated>2026-05-31T20:51:59.614298+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fd1fc4d2-b648-4fbb-87a3-0932404aa0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0257", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mn5wqh3dzl2v", "content": "\ud83d\udce2 CVE-2026-0257 : contournement d'authentification GlobalProtect VPN activement exploit\u00e9\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nSource : BleepingComputer, publi\u00e9 le 30 mai \u2026\nhttps://cyberveille.ch/posts/2026-05-31-cve-2026-0257-contournement-d-authentification-globalprotect-vpn-activement-exploite/ #CISA_KEV #Cyberveille", "creation_timestamp": "2026-05-31T16:00:22.679127Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fd1fc4d2-b648-4fbb-87a3-0932404aa0dd/export"/>
    <published>2026-05-31T16:00:22.679127+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4ecf0ff0-0fdf-4b38-85be-59a7f0df0a93/export</id>
    <title>4ecf0ff0-0fdf-4b38-85be-59a7f0df0a93</title>
    <updated>2026-05-31T20:51:59.614227+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4ecf0ff0-0fdf-4b38-85be-59a7f0df0a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mn5xbrnsrf2l", "content": "Urgent: Palo Alto Networks' PAN-OS vulnerability CVE-2026-0257 is being actively exploited. Update your systems immediately to prevent unauthorized VPN access. #CyberSecurity #PANOS #Vulnerability Link: thedailytechfeed.com/critical-pan...", "creation_timestamp": "2026-05-31T16:10:03.899965Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4ecf0ff0-0fdf-4b38-85be-59a7f0df0a93/export"/>
    <published>2026-05-31T16:10:03.899965+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/01c93a83-7c83-40b8-89be-fcdc5ccb0b5e/export</id>
    <title>01c93a83-7c83-40b8-89be-fcdc5ccb0b5e</title>
    <updated>2026-05-31T20:51:59.614159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "01c93a83-7c83-40b8-89be-fcdc5ccb0b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mn66nncbwl2t", "content": "CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers\n\nA new vulnerability has landed and it deserves attention. CVE-2026-0257: Palo Al\n\nhttps://securitycyber.uk\n\n\n\nTraining: https://www.hackthebox.com https://portswigger.net/web-security", "creation_timestamp": "2026-05-31T18:21:57.808723Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/01c93a83-7c83-40b8-89be-fcdc5ccb0b5e/export"/>
    <published>2026-05-31T18:21:57.808723+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7e73de1c-8636-4534-b097-93b445dce33a/export</id>
    <title>7e73de1c-8636-4534-b097-93b445dce33a</title>
    <updated>2026-05-31T20:51:59.614092+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7e73de1c-8636-4534-b097-93b445dce33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://t.me/ctinow/251072", "content": "CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers\nhttps://ift.tt/1k8GvWA", "creation_timestamp": "2026-05-31T18:24:18.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7e73de1c-8636-4534-b097-93b445dce33a/export"/>
    <published>2026-05-31T18:24:18+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/759fa293-de0e-42ea-9645-22256870167f/export</id>
    <title>759fa293-de0e-42ea-9645-22256870167f</title>
    <updated>2026-05-31T20:51:59.614009+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "759fa293-de0e-42ea-9645-22256870167f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mn66pc2bz3y2", "content": "CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers CVE-2026-0257 lets attackers forge Palo Alto GlobalProtect auth cookies and bypass VPN login. Exploitati...\n\n#Breaking #News #Hacking #Security #CVE-2026-0257 #hacking #news #information #security #news [\u2026]", "creation_timestamp": "2026-05-31T18:29:10.174111Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/759fa293-de0e-42ea-9645-22256870167f/export"/>
    <published>2026-05-31T18:29:10.174111+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a2ac3b8b-bceb-4a0d-a639-564cdeb101d9/export</id>
    <title>a2ac3b8b-bceb-4a0d-a639-564cdeb101d9</title>
    <updated>2026-05-31T20:51:59.613937+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a2ac3b8b-bceb-4a0d-a639-564cdeb101d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mn66pcse7l22", "content": "CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers CVE-2026-0257 lets attackers forge Palo Alto GlobalProtect auth cookies and bypass VPN login. Exploitati...\n\n#Breaking #News #Hacking #Security #CVE-2026-0257 #hacking #news #information #security #news [\u2026]", "creation_timestamp": "2026-05-31T18:29:10.845434Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a2ac3b8b-bceb-4a0d-a639-564cdeb101d9/export"/>
    <published>2026-05-31T18:29:10.845434+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7427cf13-1ac1-4336-ae6e-b8006a2be6d9/export</id>
    <title>7427cf13-1ac1-4336-ae6e-b8006a2be6d9</title>
    <updated>2026-05-31T20:51:59.613869+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7427cf13-1ac1-4336-ae6e-b8006a2be6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "Telegram/tuuyQjSt67W6GFdJc_v4rA_pJUjj4D5A3erNCRnckvk0ZNct", "content": "", "creation_timestamp": "2026-05-31T18:30:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7427cf13-1ac1-4336-ae6e-b8006a2be6d9/export"/>
    <published>2026-05-31T18:30:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2028cd6f-20db-4d7e-806b-f08011d4f838/export</id>
    <title>2028cd6f-20db-4d7e-806b-f08011d4f838</title>
    <updated>2026-05-31T20:51:59.613797+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2028cd6f-20db-4d7e-806b-f08011d4f838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mn6777qf2t2p", "content": "On May 13, 2026, Palo Alto Networks disclosed CVE-2026-0257, a medium severity authentication bypass vulnerability in PAN-OS and Prisma Access. Exploitation allows remote unauthenticated attackers to establish VPN connections.", "creation_timestamp": "2026-05-31T18:31:47.570567Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2028cd6f-20db-4d7e-806b-f08011d4f838/export"/>
    <published>2026-05-31T18:31:47.570567+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c3e7e82-47a3-4ee7-9b2d-924f5791eed7/export</id>
    <title>2c3e7e82-47a3-4ee7-9b2d-924f5791eed7</title>
    <updated>2026-05-31T20:51:59.613701+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2c3e7e82-47a3-4ee7-9b2d-924f5791eed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn67trpkkp2a", "content": "CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers", "creation_timestamp": "2026-05-31T18:43:17.524586Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c3e7e82-47a3-4ee7-9b2d-924f5791eed7/export"/>
    <published>2026-05-31T18:43:17.524586+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/535ee9bc-3a7b-4ccf-97d1-bb2da80a0830/export</id>
    <title>535ee9bc-3a7b-4ccf-97d1-bb2da80a0830</title>
    <updated>2026-05-31T20:51:59.612440+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "535ee9bc-3a7b-4ccf-97d1-bb2da80a0830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0257", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mn6bbykokg25", "content": "Palo Alto Networks VPN Flaw Under Active Attack as Hackers Bypass Authentication and Slip Directly Into Enterprise\u00a0Networks\n\nA Critical VPN Security Failure Turns Into a Real-World Cyber Threat A dangerous security vulnerability affecting Palo Alto The vulnerability, tracked as CVE-2026-0257, was\u2026", "creation_timestamp": "2026-05-31T19:09:09.232815Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/535ee9bc-3a7b-4ccf-97d1-bb2da80a0830/export"/>
    <published>2026-05-31T19:09:09.232815+00:00</published>
  </entry>
</feed>
