<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-31T21:10:09.660356+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7a6edb93-f235-4a37-a8ac-70501987a568/export</id>
    <title>7a6edb93-f235-4a37-a8ac-70501987a568</title>
    <updated>2026-07-31T21:10:09.683866+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7a6edb93-f235-4a37-a8ac-70501987a568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20316", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mrxqtxvk7j2k", "content": "Cisco shipped hotfixes for FMC zero-day CVE-2026-20316. CISA set an August 1 deadline.\n\nFMC is the management plane for your firewall estate.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/cisco-fmc-zero-day-cve-2026-20316-static-credentials-2026", "creation_timestamp": "2026-07-31T20:04:58.010421Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7a6edb93-f235-4a37-a8ac-70501987a568/export"/>
    <published>2026-07-31T20:04:58.010421+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/92915b99-cb9c-4238-84c0-b7d8ee86912f/export</id>
    <title>92915b99-cb9c-4238-84c0-b7d8ee86912f</title>
    <updated>2026-07-31T21:10:09.686501+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "92915b99-cb9c-4238-84c0-b7d8ee86912f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrxiugterx2y", "content": "Static credentials. Zero-day. Cisco FMC. That's a bad combination.\n\nCVE-2026-20316.\n\nhttps://www.yazoul.net/news/article/cisco-fmc-zero-day-actively-exploited-static-credentials-could-expose-sensitive-/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-31T17:42:05.137127Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/92915b99-cb9c-4238-84c0-b7d8ee86912f/export"/>
    <published>2026-07-31T17:42:05.137127+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8028462a-1538-4f46-bb7b-f963b14f1f1a/export</id>
    <title>8028462a-1538-4f46-bb7b-f963b14f1f1a</title>
    <updated>2026-07-31T21:10:09.686595+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8028462a-1538-4f46-bb7b-f963b14f1f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mrxh6ki5rb2t", "content": "CISA added a Cisco $CSCO Secure Firewall Management Center flaw, CVE-2026-20316, to its Known Exploited Vulnerabilities catalog after confirming active exploitation. Static credentials on a low-privilege account let attackers log in unauthenticated. Hotfixes exist. Patch by August 1.", "creation_timestamp": "2026-07-31T17:11:55.249254Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8028462a-1538-4f46-bb7b-f963b14f1f1a/export"/>
    <published>2026-07-31T17:11:55.249254+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e3533119-9160-45e1-8007-0a10e306f3f1/export</id>
    <title>e3533119-9160-45e1-8007-0a10e306f3f1</title>
    <updated>2026-07-31T21:10:09.686665+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e3533119-9160-45e1-8007-0a10e306f3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/soft-management.bsky.social/post/3mrwl6vx42g2h", "content": "Backdoor (CVE-2026-20316) in Cisco Firewall wird ausgenutzt", "creation_timestamp": "2026-07-31T08:51:06.123717Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e3533119-9160-45e1-8007-0a10e306f3f1/export"/>
    <published>2026-07-31T08:51:06.123717+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/674cd6fe-10fa-4356-8ab0-fc86d68888de/export</id>
    <title>674cd6fe-10fa-4356-8ab0-fc86d68888de</title>
    <updated>2026-07-31T21:10:09.686729+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "674cd6fe-10fa-4356-8ab0-fc86d68888de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrwdjv4qs72u", "content": "In what can only be described as a masterclass in enterprise security engineering, Cisco has graciously patched an actively exploited zero-day flaw, CVE-2026-20316, lurking within their Secure Firewall Management Center software. This delightful oversight left federal agencies an...\n\nRead full story", "creation_timestamp": "2026-07-31T06:34:01.103435Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/674cd6fe-10fa-4356-8ab0-fc86d68888de/export"/>
    <published>2026-07-31T06:34:01.103435+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1b99c2dc-8fd9-4928-8a74-f6ce7fa878d0/export</id>
    <title>1b99c2dc-8fd9-4928-8a74-f6ce7fa878d0</title>
    <updated>2026-07-31T21:10:09.686794+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1b99c2dc-8fd9-4928-8a74-f6ce7fa878d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrwczndbbk2a", "content": "Cisco FMC static credentials exploited by attackers (CVE-2026-20316)\n\nA static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged\u2026\n#hackernews #news", "creation_timestamp": "2026-07-31T06:24:56.266693Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1b99c2dc-8fd9-4928-8a74-f6ce7fa878d0/export"/>
    <published>2026-07-31T06:24:56.266693+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/523b7442-9763-46dd-a295-33a915a2f7ed/export</id>
    <title>523b7442-9763-46dd-a295-33a915a2f7ed</title>
    <updated>2026-07-31T21:10:09.686865+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "523b7442-9763-46dd-a295-33a915a2f7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mrw6qirmzi2v", "content": "Cisco FMC\u306e\u9759\u7684\u8a8d\u8a3c\u60c5\u5831\u304c\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u308b\u8106\u5f31\u6027\uff08CVE-2026-20316\uff09\n\nCisco FMC static credentials exploited by attackers (CVE-2026-20316)  #HelpNetSecurity (Jul 30)\n\nwww.helpnetsecurity.com/2026/07/30/c...", "creation_timestamp": "2026-07-31T05:08:14.018395Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/523b7442-9763-46dd-a295-33a915a2f7ed/export"/>
    <published>2026-07-31T05:08:14.018395+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8f2cf27b-084b-4ea2-ae9f-9451e1e34cbf/export</id>
    <title>8f2cf27b-084b-4ea2-ae9f-9451e1e34cbf</title>
    <updated>2026-07-31T21:10:09.686930+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8f2cf27b-084b-4ea2-ae9f-9451e1e34cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrw6k4w2zo2x", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 32 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-66066: 33 interactions\nCVE-2026-59726: 9 interactions\nCVE-2026-20316: 6 interactions\n", "creation_timestamp": "2026-07-31T05:04:40.826447Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8f2cf27b-084b-4ea2-ae9f-9451e1e34cbf/export"/>
    <published>2026-07-31T05:04:40.826447+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3923b1e8-430d-4bc7-ba6a-32d8e054955c/export</id>
    <title>3923b1e8-430d-4bc7-ba6a-32d8e054955c</title>
    <updated>2026-07-31T21:10:09.686993+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3923b1e8-430d-4bc7-ba6a-32d8e054955c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mrw6fdq25sut", "content": "Cisco FMC\u306e\u8106\u5f31\u6027\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-20316\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46948/", "creation_timestamp": "2026-07-31T05:02:23.728996Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3923b1e8-430d-4bc7-ba6a-32d8e054955c/export"/>
    <published>2026-07-31T05:02:23.728996+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5ac158b4-a058-4767-a90b-7e3e8a8f2d26/export</id>
    <title>5ac158b4-a058-4767-a90b-7e3e8a8f2d26</title>
    <updated>2026-07-31T21:10:09.687057+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5ac158b4-a058-4767-a90b-7e3e8a8f2d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://threatintel.cc/2026/07/30/cisco-warns-of-fmc-static.html", "content": "www.bleepingcomputer.com/news/secu&amp;hellip;\n\nCisco disclosed that CVE-2026-20316, a static-credential vulnerability in Secure Firewall Management Center (FMC) Software, has been actively exploited in zero-day attacks. The flaw allows an unauthenticated remote attacker to log in with a built-in low-privilege account and access sensitive data. Although its CVSS score is 5.3, Cisco rated it High severity because it can be chained with other FMC flaws for privilege escalation.\n\nHotfixes are available for FMC releases 7.0, 7.2, 7.4, 7.6, 7.7 and 10.0. There are no workarounds. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog with an August 1 remediation deadline for federal agencies. Organizations should also check logs for indicators such as references to /var/tmp/license.tmp and rotate credentials if compromise is suspected.", "creation_timestamp": "2026-07-31T01:00:33.407496Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5ac158b4-a058-4767-a90b-7e3e8a8f2d26/export"/>
    <published>2026-07-31T01:00:33.407496+00:00</published>
  </entry>
</feed>
