https://vulnerability.circl.lu/sightings/feed 2026-09-12T13:24:23.409291+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7e27c579-7473-4450-9c1d-af7c19492dfe/export 2026-09-12T13:24:23.436225+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7e27c579-7473-4450-9c1d-af7c19492dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38056", "type": "seen", "source": "https://gist.github.com/ichintu/8151c2994398b20c3f2c1cd0ecf05f94", "content": "This daily threat intelligence roundup consolidates critical software vulnerabilities, active exploitation campaigns, AI security threats, and infrastructure updates:\n\n**Critical Vulnerabilities & Patches:** Security advisories cover patched flaws in n8n, Progress Chef Automate, and Laci Synchroni (CVE-2026-54047), which allows critical account takeover via client-side config manipulation. An ST Engineering VSAT terminal flaw (CVE-2026-38056) exploits a factory pre-configured account, threatening critical infrastructure. \n\n**Active Exploitation:** A CVSS 10 file-read vulnerability in GitLab was rapidly probed in the wild shortly after disclosure. ConnectWise ScreenConnect (CVE-2026-84869) was actively exploited and added to CISA\u2019s KEV database before a patch was released, enabling unauthorized file transfer and execution during remote sessions.\n\n**AI Security & Community:** Anthropic reported unauthorized, industrial-scale Claude model distillation attacks by seven Chinese AI labs. This coincides with a widely viewed DEF CON talk on offensive AI hacking and a Reddit AMA on macOS offensive security.\n\n**Infrastructure Updates:** Microsoft is redirecting Teams and Copilot traffic to new cloud domains (`teams.cloud.microsoft` and `copilot.cloud.microsoft`). Organizations must immediately update firewall, proxy, and secure web gateway rules to maintain access and adjust tenant restrictions.", "creation_timestamp": "2026-09-11T20:03:10.357954Z"} 2026-09-11T20:03:10.357954+00:00 https://vulnerability.circl.lu/sighting/43a9b1c1-ad32-4444-bf0d-1a0752fbd7ad/export 2026-09-12T13:24:23.438125+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "43a9b1c1-ad32-4444-bf0d-1a0752fbd7ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38056", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvaxujzf3k2b", "content": "CVE-2026-38056 - evolution iq\u2011series terminals\nThe iQ200 satellite modem and related iDirect terminals run with a built-in low\u2011privilege user account that can be used to gain full control of the device. This means an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-11T16:20:05.174403Z"} 2026-09-11T16:20:05.174403+00:00 https://vulnerability.circl.lu/sighting/6423cbb5-5585-4a24-a170-2ff54ee94519/export 2026-09-12T13:24:23.438266+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6423cbb5-5585-4a24-a170-2ff54ee94519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38056", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvax6umwty2r", "content": "\ud83d\udea8 CVE-2026-38056 \u2014 CVSS 9.4 CRITICAL\n\nA local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-38056\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T16:07:58.275465Z"} 2026-09-11T16:07:58.275465+00:00 https://vulnerability.circl.lu/sighting/862e5623-e90c-4595-b62f-86309e6e6296/export 2026-09-12T13:24:23.438369+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "862e5623-e90c-4595-b62f-86309e6e6296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-38056", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01", "content": "", "creation_timestamp": "2026-09-10T16:15:12.536862Z"} 2026-09-10T16:15:12.536862+00:00 https://vulnerability.circl.lu/sighting/889e6865-01de-410c-89e1-08979be60a72/export 2026-09-12T13:24:23.439592+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "889e6865-01de-410c-89e1-08979be60a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38056", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv6gp7bwml2q", "content": "~Cisa~\nUnauthenticated access, CSRF, privilege escalation, and data exposure affect terminals \u22644.5.2.1; update to 4.5.3.0+.\n-\nIOCs: support[.]idirect[.]net, CVE-2026-38056, CVE-2026-38059\n-\n#CVE202638056 #ICS #ThreatIntel", "creation_timestamp": "2026-09-10T16:07:33.151416Z"} 2026-09-10T16:07:33.151416+00:00