https://vulnerability.circl.lu/sightings/feed 2026-09-04T11:00:27.912133+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ef7d2f9c-9535-480d-a6cc-32176304743f/export 2026-09-04T11:00:28.009784+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ef7d2f9c-9535-480d-a6cc-32176304743f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:00:15.378025Z"} 2026-09-04T10:00:15.378025+00:00 https://vulnerability.circl.lu/sighting/4aa7ebed-5d71-4f8a-af07-14dfcfd36d7e/export 2026-09-04T11:00:28.011701+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4aa7ebed-5d71-4f8a-af07-14dfcfd36d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://t.me/Russian_OSINT/7317", "content": "\ud83d\udc7a\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10520 \u0432 Ivanti Sentry \u2014 \u2194\ufe0f CVSS 10/10:\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10520 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Ivanti Sentry \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 API \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (MICS) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\ud83d\ude18https://hellorecon.com/blog/cve-2026-10520\n\n\ud83d\udc7a \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20253 \u0432 Splunk \u2014 \u2194\ufe0f CVSS 9.8/10:\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Splunk Enterprise \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9,8 \u0431\u0430\u043b\u043b\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr Labs \u0434\u043e\u0432\u0435\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 RCE \u043f\u0443\u0442\u0451\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 PostgreSQL Sidecar.\n\n\ud83d\ude18 https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:44.883477Z"} 2026-09-03T00:00:44.883477+00:00 https://vulnerability.circl.lu/sighting/7c3c636e-c22c-458e-b694-4e442432d57b/export 2026-09-04T11:00:28.011863+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7c3c636e-c22c-458e-b694-4e442432d57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/Russian_OSINT/7317", "content": "\ud83d\udc7a\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10520 \u0432 Ivanti Sentry \u2014 \u2194\ufe0f CVSS 10/10:\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10520 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Ivanti Sentry \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 API \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (MICS) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\ud83d\ude18https://hellorecon.com/blog/cve-2026-10520\n\n\ud83d\udc7a \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20253 \u0432 Splunk \u2014 \u2194\ufe0f CVSS 9.8/10:\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Splunk Enterprise \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9,8 \u0431\u0430\u043b\u043b\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr Labs \u0434\u043e\u0432\u0435\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 RCE \u043f\u0443\u0442\u0451\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 PostgreSQL Sidecar.\n\n\ud83d\ude18 https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:17.671503Z"} 2026-09-02T06:00:17.671503+00:00 https://vulnerability.circl.lu/sighting/d0d6ff9f-dc67-40b6-8244-b8b23cd2d741/export 2026-09-04T11:00:28.011997+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d0d6ff9f-dc67-40b6-8244-b8b23cd2d741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://t.me/CyberDispatch/2048", "content": "This Splunk flaw is no longer just theoretical.\n\nSplunk says it is aware of limited exploitation of CVE-2026-20253.", "creation_timestamp": "2026-08-31T00:00:39.831822Z"} 2026-08-31T00:00:39.831822+00:00 https://vulnerability.circl.lu/sighting/c45f2eb9-a651-47c4-a262-30ab108dbf06/export 2026-09-04T11:00:28.012112+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c45f2eb9-a651-47c4-a262-30ab108dbf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/1958", "content": "A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\n\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.", "creation_timestamp": "2026-08-31T00:00:39.179196Z"} 2026-08-31T00:00:39.179196+00:00 https://vulnerability.circl.lu/sighting/434ac938-f728-4484-97a9-b20e9b922c2a/export 2026-09-04T11:00:28.012222+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "434ac938-f728-4484-97a9-b20e9b922c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:10.979491Z"} 2026-08-30T10:15:10.979491+00:00 https://vulnerability.circl.lu/sighting/d011d0ae-a132-4655-9b8d-9d495998fe97/export 2026-09-04T11:00:28.012322+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d011d0ae-a132-4655-9b8d-9d495998fe97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:00:07.526783Z"} 2026-08-30T10:00:07.526783+00:00 https://vulnerability.circl.lu/sighting/1d4c4a7a-2c3e-46c1-8328-f6563793d0e5/export 2026-09-04T11:00:28.012423+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1d4c4a7a-2c3e-46c1-8328-f6563793d0e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/1958", "content": "A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\n\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.", "creation_timestamp": "2026-08-30T00:00:39.799412Z"} 2026-08-30T00:00:39.799412+00:00 https://vulnerability.circl.lu/sighting/2cb64de1-6455-4ee6-9a75-c3a8d0e2e098/export 2026-09-04T11:00:28.012519+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2cb64de1-6455-4ee6-9a75-c3a8d0e2e098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/2048", "content": "This Splunk flaw is no longer just theoretical.\n\nSplunk says it is aware of limited exploitation of CVE-2026-20253.", "creation_timestamp": "2026-08-30T00:00:39.346949Z"} 2026-08-30T00:00:39.346949+00:00 https://vulnerability.circl.lu/sighting/bf148d15-73a9-4a89-a22a-3a1cdbc64407/export 2026-09-04T11:00:28.012623+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bf148d15-73a9-4a89-a22a-3a1cdbc64407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/1958", "content": "A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\n\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.", "creation_timestamp": "2026-08-29T20:00:13.227340Z"} 2026-08-29T20:00:13.227340+00:00