https://vulnerability.circl.lu/sightings/feed 2026-09-12T10:12:50.377730+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7946194f-b69f-4023-b55e-6e1886d4517e/export 2026-09-12T10:12:50.399173+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7946194f-b69f-4023-b55e-6e1886d4517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvchfo4vgx23", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-84869: \u26a0\ufe0f CVE-2026-84869: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-84869-a-condition-in-the-screenconnect-client", "creation_timestamp": "2026-09-12T06:30:45.903404Z"} 2026-09-12T06:30:45.903404+00:00 https://vulnerability.circl.lu/sighting/9414d082-ad0b-4dee-a7e5-0af1322948a3/export 2026-09-12T10:12:50.401811+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9414d082-ad0b-4dee-a7e5-0af1322948a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvbyoaaqym2k", "content": "\ud83d\udccc CVE-2026-84869 - A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host ... https://www.cyberhub.blog/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T02:07:07.903086Z"} 2026-09-12T02:07:07.903086+00:00 https://vulnerability.circl.lu/sighting/709329c7-309a-4b0f-88a1-72800c0346b1/export 2026-09-12T10:12:50.401907+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "709329c7-309a-4b0f-88a1-72800c0346b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvbssao6td2u", "content": "CVE-2026-84869 is trending. Hype score 7, currently #7 on cvemon.\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T00:21:59.559771Z"} 2026-09-12T00:21:59.559771+00:00 https://vulnerability.circl.lu/sighting/6f027be6-40db-49ce-8e0d-247ccfd418d9/export 2026-09-12T10:12:50.401982+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6f027be6-40db-49ce-8e0d-247ccfd418d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvbmyx4f3p2l", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-84869", "creation_timestamp": "2026-09-11T22:38:21.965002Z"} 2026-09-11T22:38:21.965002+00:00 https://vulnerability.circl.lu/sighting/08296ddb-1d18-45df-8b21-64089a761b60/export 2026-09-12T10:12:50.402053+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "08296ddb-1d18-45df-8b21-64089a761b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://gist.github.com/ichintu/8151c2994398b20c3f2c1cd0ecf05f94", "content": "This daily threat intelligence roundup consolidates critical software vulnerabilities, active exploitation campaigns, AI security threats, and infrastructure updates:\n\n**Critical Vulnerabilities & Patches:** Security advisories cover patched flaws in n8n, Progress Chef Automate, and Laci Synchroni (CVE-2026-54047), which allows critical account takeover via client-side config manipulation. An ST Engineering VSAT terminal flaw (CVE-2026-38056) exploits a factory pre-configured account, threatening critical infrastructure. \n\n**Active Exploitation:** A CVSS 10 file-read vulnerability in GitLab was rapidly probed in the wild shortly after disclosure. ConnectWise ScreenConnect (CVE-2026-84869) was actively exploited and added to CISA\u2019s KEV database before a patch was released, enabling unauthorized file transfer and execution during remote sessions.\n\n**AI Security & Community:** Anthropic reported unauthorized, industrial-scale Claude model distillation attacks by seven Chinese AI labs. This coincides with a widely viewed DEF CON talk on offensive AI hacking and a Reddit AMA on macOS offensive security.\n\n**Infrastructure Updates:** Microsoft is redirecting Teams and Copilot traffic to new cloud domains (`teams.cloud.microsoft` and `copilot.cloud.microsoft`). Organizations must immediately update firewall, proxy, and secure web gateway rules to maintain access and adjust tenant restrictions.", "creation_timestamp": "2026-09-11T20:03:10.462702Z"} 2026-09-11T20:03:10.462702+00:00 https://vulnerability.circl.lu/sighting/7a09e4fc-88c4-4efb-855f-4192f41dab48/export 2026-09-12T10:12:50.402136+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7a09e4fc-88c4-4efb-855f-4192f41dab48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f", "content": "~Cisa~\nCISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.\n-\nIOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869\n-\n#CISA #KEV #ThreatIntel", "creation_timestamp": "2026-09-11T20:02:07.052994Z"} 2026-09-11T20:02:07.052994+00:00 https://vulnerability.circl.lu/sighting/719c68bc-07b3-4070-b413-e213c911b67e/export 2026-09-12T10:12:50.402206+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "719c68bc-07b3-4070-b413-e213c911b67e", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfd55757-60bf-42b4-8579-b98e3aa79248", "content": "", "creation_timestamp": "2026-09-11T19:00:02.536386Z"} 2026-09-11T19:00:02.536386+00:00 https://vulnerability.circl.lu/sighting/423b6476-ae4b-402f-a0db-f96915f11d7c/export 2026-09-12T10:12:50.402277+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "423b6476-ae4b-402f-a0db-f96915f11d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvb7fpdrul2w", "content": "\ud83d\uded1 CVE-2026-84869\nConnectWise ScreenConnect\nCVSS 9.9 / EPSS 0% / KEV: No\nTL;DR: A condition in the ScreenConnect client may allow files to be transferred and exe\u2026\nhttps://cvesentinel.com/report/CVE-2026-84869?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-11T18:35:04.010696Z"} 2026-09-11T18:35:04.010696+00:00 https://vulnerability.circl.lu/sighting/cf6db727-442a-4bcd-8d9c-3b4ec6051274/export 2026-09-12T10:12:50.402362+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cf6db727-442a-4bcd-8d9c-3b4ec6051274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvb6ileqsr2u", "content": "CISA added ConnectWise ScreenConnect CVE-2026-84869 to KEV today, deadline 14 September. It lets files be transferred and run through an active remote session without host confirmation, CVSS 9.9. ConnectWise fixed it in 26.6.5 on 8 September. connectwise.com/company/...", "creation_timestamp": "2026-09-11T18:18:40.203853Z"} 2026-09-11T18:18:40.203853+00:00 https://vulnerability.circl.lu/sighting/9959841d-b46a-47dc-b43e-e28363fd64cb/export 2026-09-12T10:12:50.402460+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9959841d-b46a-47dc-b43e-e28363fd64cb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c0c15ad-9774-4257-a684-261787a40b66", "content": "", "creation_timestamp": "2026-09-10T08:00:31.876974Z"} 2026-09-10T08:00:31.876974+00:00