<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-24T15:46:08.628908+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dade843f-057c-4fa7-9828-fa848a340242/export</id>
    <title>dade843f-057c-4fa7-9828-fa848a340242</title>
    <updated>2026-09-24T15:46:08.656202+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dade843f-057c-4fa7-9828-fa848a340242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw47lkmd6e2i", "content": "\ud83d\udd17 CVE : CVE-2026-28326", "creation_timestamp": "2026-09-22T12:20:07.464383Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dade843f-057c-4fa7-9828-fa848a340242/export"/>
    <published>2026-09-22T12:20:07.464383+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9659f66-4472-47a7-a6e5-d69081462662/export</id>
    <title>d9659f66-4472-47a7-a6e5-d69081462662</title>
    <updated>2026-09-24T15:46:08.657871+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9659f66-4472-47a7-a6e5-d69081462662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "Telegram/1-EB3sD2oC0U6c2SZrR9j-FHDJPzOjVG4szn66l4DgZ9Jg", "content": "", "creation_timestamp": "2026-09-22T07:00:04.382633Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9659f66-4472-47a7-a6e5-d69081462662/export"/>
    <published>2026-09-22T07:00:04.382633+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b/export</id>
    <title>633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b</title>
    <updated>2026-09-24T15:46:08.658003+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/CyberDispatch/3010", "content": "A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.", "creation_timestamp": "2026-09-21T13:00:04.659633Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b/export"/>
    <published>2026-09-21T13:00:04.659633+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/de81faaa-bc2c-4dbb-9fa4-230e57b2abce/export</id>
    <title>de81faaa-bc2c-4dbb-9fa4-230e57b2abce</title>
    <updated>2026-09-24T15:46:08.658105+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "de81faaa-bc2c-4dbb-9fa4-230e57b2abce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117304453563682831", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T17:05:13.405804Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/de81faaa-bc2c-4dbb-9fa4-230e57b2abce/export"/>
    <published>2026-09-20T17:05:13.405804+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f763ec09-1d0b-4de8-a9b8-f606d95aeba1/export</id>
    <title>f763ec09-1d0b-4de8-a9b8-f606d95aeba1</title>
    <updated>2026-09-24T15:46:08.658212+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f763ec09-1d0b-4de8-a9b8-f606d95aeba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvxkgxpaan24", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE (CVE-2026-28326) #patchmanagement", "creation_timestamp": "2026-09-20T15:51:05.890210Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f763ec09-1d0b-4de8-a9b8-f606d95aeba1/export"/>
    <published>2026-09-20T15:51:05.890210+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7645ab4c-1b95-4fe2-a47b-5f2ef462928c/export</id>
    <title>7645ab4c-1b95-4fe2-a47b-5f2ef462928c</title>
    <updated>2026-09-24T15:46:08.658314+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7645ab4c-1b95-4fe2-a47b-5f2ef462928c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28326", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvwze6xbxs2b", "content": "SolarWinds ARM through 2026.2: hard-coded key enables unauthenticated RCE. CVE-2026-28326, CVSS 8.8. Patch to ARM\u2026 https://0daynews.com/articles/2026-09-20-solarwinds-arm-cve-2026-28326-hardcoded-key-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2656", "creation_timestamp": "2026-09-20T10:45:19.044566Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7645ab4c-1b95-4fe2-a47b-5f2ef462928c/export"/>
    <published>2026-09-20T10:45:19.044566+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b46fccd0-f765-4451-8ab9-128b4d5974e1/export</id>
    <title>b46fccd0-f765-4451-8ab9-128b4d5974e1</title>
    <updated>2026-09-24T15:46:08.658412+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b46fccd0-f765-4451-8ab9-128b4d5974e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mvwle6x7lq25", "content": "SolarWinds Fixes Critical ARM Vulnerability Allowing Remote Code\u00a0Execution\n\nSolarWinds has released a security update for Access Rights Manager to fix CVE-2026-28326, a high-severity vulnerability that could enable unauthenticated remote code execution.", "creation_timestamp": "2026-09-20T06:34:46.455672Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b46fccd0-f765-4451-8ab9-128b4d5974e1/export"/>
    <published>2026-09-20T06:34:46.455672+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/73fa88c7-b75c-4b47-bc3d-51dff4b34c28/export</id>
    <title>73fa88c7-b75c-4b47-bc3d-51dff4b34c28</title>
    <updated>2026-09-24T15:46:08.658508+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "73fa88c7-b75c-4b47-bc3d-51dff4b34c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvw3jds2hu26", "content": "\ud83e\udd16 CVE-2026-28326 (CVSS 8.8): SolarWinds Access Rights Manager ships a hard-coded cryptographic key enabling unauthenticated RCE. Affects ARM 2026.2 and prior; patch released.\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:51:19.411662Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/73fa88c7-b75c-4b47-bc3d-51dff4b34c28/export"/>
    <published>2026-09-20T01:51:19.411662+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf/export</id>
    <title>0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf</title>
    <updated>2026-09-24T15:46:08.658614+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/VulnerabilityNews/44501", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE\n\nSolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:00:04.742111Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf/export"/>
    <published>2026-09-20T01:00:04.742111+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0175362c-de75-4414-9b08-d41f27e5bc56/export</id>
    <title>0175362c-de75-4414-9b08-d41f27e5bc56</title>
    <updated>2026-09-24T15:46:08.658720+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0175362c-de75-4414-9b08-d41f27e5bc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "content": "SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds", "creation_timestamp": "2026-09-19T13:00:34.729603Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0175362c-de75-4414-9b08-d41f27e5bc56/export"/>
    <published>2026-09-19T13:00:34.729603+00:00</published>
  </entry>
</feed>
