https://vulnerability.circl.lu/sightings/feed 2026-09-16T11:13:03.130766+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d76d0882-0c1a-4d85-a4ef-ded95c25b853/export 2026-09-16T11:13:03.150915+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d76d0882-0c1a-4d85-a4ef-ded95c25b853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86108", "type": "seen", "source": "https://gist.github.com/ichintu/267a83b424137af67bec5f39bcd35594", "content": "This daily threat intelligence digest highlights four critical security updates from September 2026:\n\n\u2022 **Arista EOS (CVE-2026-73447):** Critical (9.4) OS command injection in gNSI Certz/Bootz services allows authenticated users to escalate privileges and fully compromise devices.\n\u2022 **WSO2 API Manager (CVE-2026-5430):** Critical (9.8) JWT signature verification flaw enables forged admin tokens for account takeover; actively exploited in the wild.\n\u2022 **Oracle September 2026 CSPU:** Major patch release addressing 673 vulnerabilities, including several rated CVSS 10.0.\n\u2022 **VeloCloud Edge (CVE-2026-86108):** High (8.0) input validation weakness in management workflows can be abused for elevated OS command execution.\n\n**Recommendation:** Organizations should prioritize immediate patching and threat monitoring for these critical flaws to prevent privilege escalation, account compromise, and active exploitation.", "creation_timestamp": "2026-09-16T08:02:29.882244Z"} 2026-09-16T08:02:29.882244+00:00