https://vulnerability.circl.lu/sightings/feed 2026-09-14T02:18:39.667943+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6279865b-f7e6-4408-867d-597a0e05fe5b/export 2026-09-14T02:18:39.696587+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6279865b-f7e6-4408-867d-597a0e05fe5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75166", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117261455745586059", "content": "CVE-2026-75166: Insecure permission in MBS-Solutions X-Serie Gateway (V6_00_05) lets low-priv user run tcpdump as root, leading to RCE via -z flag. CVSS: N/A. Patch unknown\u2014assume vulnerable. Restrict access & monitor now. https://www.valtersit.com/cve/CVE-2026-75166/ #CVE #infos", "creation_timestamp": "2026-09-13T02:50:20.632138Z"} 2026-09-13T02:50:20.632138+00:00 https://vulnerability.circl.lu/sighting/ff53ceff-7615-4225-8ab0-78ac8cd414df/export 2026-09-14T02:18:39.698279+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ff53ceff-7615-4225-8ab0-78ac8cd414df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75166", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvelkffegq2t", "content": "CVE-2026-75166: Insecure permission in MBS-Solutions X-Serie Gateway (V6_00_05) lets low-priv user run tcpdump as root, leading to RCE via -z flag. CVSS: N/A. Patch unknown\u2014assume vulnerable. Restrict access & monitor now. https://www.valtersit.com/cve/CVE-2026-75166/ #CVE #infos", "creation_timestamp": "2026-09-13T02:50:19.370818Z"} 2026-09-13T02:50:19.370818+00:00 https://vulnerability.circl.lu/sighting/6b752724-4c7f-4812-93f3-94dfb55ab041/export 2026-09-14T02:18:39.698411+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6b752724-4c7f-4812-93f3-94dfb55ab041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75162", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117254612752271368", "content": "CVE-2026-75162: Info disclosure in MBS-Solutions X-Serie Gateway. Any low-priv user can grab OPC-UA creds in cleartext via /cgi-bin/wwwugw.cgi. CVSS N/A, patch unknown. Assume exposed\u2014restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75162/ #CVE #infosec #OTsec", "creation_timestamp": "2026-09-11T21:50:04.024070Z"} 2026-09-11T21:50:04.024070+00:00 https://vulnerability.circl.lu/sighting/b80d9ad1-47d3-435b-8e77-1edad5205a40/export 2026-09-14T02:18:39.698519+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b80d9ad1-47d3-435b-8e77-1edad5205a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75162", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvbkcjpdpc2o", "content": "CVE-2026-75162: Info disclosure in MBS-Solutions X-Serie Gateway. Any low-priv user can grab OPC-UA creds in cleartext via /cgi-bin/wwwugw.cgi. CVSS N/A, patch unknown. Assume exposed\u2014restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75162/ #CVE #infosec #OTsec", "creation_timestamp": "2026-09-11T21:50:04.019960Z"} 2026-09-11T21:50:04.019960+00:00 https://vulnerability.circl.lu/sighting/d89ef979-95d3-4763-b7a6-edefcf04dd9a/export 2026-09-14T02:18:39.698626+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d89ef979-95d3-4763-b7a6-edefcf04dd9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75165", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv7mbpjtzc2g", "content": "CVE-2026-75165: Authenticated RCE risk via hidden diagnostics in MBS-Solutions X-Serie Gateway (V6_00_05). Low-privileged users can trigger ugw-ping/traceroute to leak sensitive data. CVSS: N/A, unpatched. Restrict access & monitor logs now. Details: https://www.valtersit.com/cve", "creation_timestamp": "2026-09-11T03:20:02.908197Z"} 2026-09-11T03:20:02.908197+00:00 https://vulnerability.circl.lu/sighting/f5936403-00b4-4acf-82bf-08bcdfa6f3b7/export 2026-09-14T02:18:39.698726+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f5936403-00b4-4acf-82bf-08bcdfa6f3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75165", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117250209706950186", "content": "CVE-2026-75165: Authenticated RCE risk via hidden diagnostics in MBS-Solutions X-Serie Gateway (V6_00_05). Low-privileged users can trigger ugw-ping/traceroute to leak sensitive data. CVSS: N/A, unpatched. Restrict access & monitor logs now. Details: https://www.valtersit.com/cve", "creation_timestamp": "2026-09-11T03:10:49.433023Z"} 2026-09-11T03:10:49.433023+00:00 https://vulnerability.circl.lu/sighting/d1788446-f064-4454-9a0e-6e08c7fb2271/export 2026-09-14T02:18:39.698846+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d1788446-f064-4454-9a0e-6e08c7fb2271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxejp2lmt2v", "content": "CVE-2026-75160: Critical flaw in X-Serie Gateway Firmware V6_00_05 allows remote privilege escalation via /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. CVSS 9.1. Unpatched\u2014assume exposure. Isolate devices, restrict access, monitor logs now. Details: https://www.valtersit.com/", "creation_timestamp": "2026-09-07T20:40:04.291042Z"} 2026-09-07T20:40:04.291042+00:00 https://vulnerability.circl.lu/sighting/5b8c0aa3-290d-4781-a6c1-6195f522f2c9/export 2026-09-14T02:18:39.698943+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5b8c0aa3-290d-4781-a6c1-6195f522f2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117231688279141803", "content": "CVE-2026-75160: Critical flaw in X-Serie Gateway Firmware V6_00_05 allows remote privilege escalation via /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. CVSS 9.1. Unpatched\u2014assume exposure. Isolate devices, restrict access, monitor logs now. Details: https://www.valtersit.com/", "creation_timestamp": "2026-09-07T20:40:03.722324Z"} 2026-09-07T20:40:03.722324+00:00 https://vulnerability.circl.lu/sighting/db5f2f47-5d28-426c-8b3d-da8b033ccbd3/export 2026-09-14T02:18:39.699041+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "db5f2f47-5d28-426c-8b3d-da8b033ccbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqz6ajsf52r", "content": "\ud83d\udd34 CVE-2026-75160 - Critical (9.1)\n\nAn issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75160/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T08:00:49.982206Z"} 2026-09-05T08:00:49.982206+00:00 https://vulnerability.circl.lu/sighting/817ee659-5913-493c-885b-84991759218f/export 2026-09-14T02:18:39.699141+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "817ee659-5913-493c-885b-84991759218f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupxyz4iyg2j", "content": "\ud83d\udea8 CVE-2026-75160 \u2014 CVSS 9.1 CRITICAL\n\nAn issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75160\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T22:07:20.153387Z"} 2026-09-04T22:07:20.153387+00:00