<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T19:36:53.090022+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1880088a-b202-47d3-b4aa-f005aad27c50/export</id>
    <title>1880088a-b202-47d3-b4aa-f005aad27c50</title>
    <updated>2026-09-17T19:36:53.110150+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1880088a-b202-47d3-b4aa-f005aad27c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5buy3z2g", "content": "Daily IT Security Digest \u2014 2026-09-09\naffected devices from untrusted networks and monitor for vendor firmware updates.\n   Source: [Radar/Offseq](https://radar.offseq.com/threat/a-vulnerability-cve-2026-86296) \u00b7 [Mastodon", "creation_timestamp": "2026-09-09T05:03:44.146050Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1880088a-b202-47d3-b4aa-f005aad27c50/export"/>
    <published>2026-09-09T05:03:44.146050+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e90009cc-e1db-431f-8f88-88efd99d72fe/export</id>
    <title>e90009cc-e1db-431f-8f88-88efd99d72fe</title>
    <updated>2026-09-17T19:36:53.112920+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e90009cc-e1db-431f-8f88-88efd99d72fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzmjt3dyj2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-86296: A vulnerability was determined in D-Link DIR-822A A_101\nCVSS 10 \u00b7 EPSS 1.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-86296\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T18:08:36.246904Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e90009cc-e1db-431f-8f88-88efd99d72fe/export"/>
    <published>2026-09-08T18:08:36.246904+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18a7e5f3-d543-4a9d-bc66-6c091f5aaa77/export</id>
    <title>18a7e5f3-d543-4a9d-bc66-6c091f5aaa77</title>
    <updated>2026-09-17T19:36:53.113057+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18a7e5f3-d543-4a9d-bc66-6c091f5aaa77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz63kgxwr2n", "content": "CVE-2026-86296 - dir-822a\nThe DIR-822A router\u2019s built\u2011in DHCP client software has a coding error that lets an attacker send specially crafted network data and overflow a memory buffer. This can cause the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir822a #dlink #CVE #infosec", "creation_timestamp": "2026-09-08T13:50:05.389481Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18a7e5f3-d543-4a9d-bc66-6c091f5aaa77/export"/>
    <published>2026-09-08T13:50:05.389481+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/60e71997-602b-4b1a-b0e3-e5fa0b34e1d7/export</id>
    <title>60e71997-602b-4b1a-b0e3-e5fa0b34e1d7</title>
    <updated>2026-09-17T19:36:53.113160+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "60e71997-602b-4b1a-b0e3-e5fa0b34e1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86299", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz26eb7rz2n", "content": "CVE-2026-86299 - re7000\nThe Linksys RE7000 router (firmware version 2.0.15) lets an attacker send specially crafted ping test requests that cause the device to run unauthorized commands. This can be exploited\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#re7000 #linksys #CVE #infosec", "creation_timestamp": "2026-09-08T12:40:04.346321Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/60e71997-602b-4b1a-b0e3-e5fa0b34e1d7/export"/>
    <published>2026-09-08T12:40:04.346321+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/20caf750-809c-4dcb-8b7a-00aa01873f4a/export</id>
    <title>20caf750-809c-4dcb-8b7a-00aa01873f4a</title>
    <updated>2026-09-17T19:36:53.113260+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "20caf750-809c-4dcb-8b7a-00aa01873f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muyamdmamu2k", "content": "Daily IT Security Digest \u2014 2026-09-08\n9.4) and CVE-2026-86296 (udhcpcd buffer overflow, CVSS 10) with public exploit code. No patches are available yet; isolate devices from untrusted networks. (Source: @offseq@infosec.exchange)\n\n6. **Adobe Commerce Template Engine Flaw Enables Unauthenticated RCE", "creation_timestamp": "2026-09-08T05:02:36.367112Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/20caf750-809c-4dcb-8b7a-00aa01873f4a/export"/>
    <published>2026-09-08T05:02:36.367112+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2950d1ce-e38f-441f-b269-02b1e06c7d37/export</id>
    <title>2950d1ce-e38f-441f-b269-02b1e06c7d37</title>
    <updated>2026-09-17T19:36:53.113358+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2950d1ce-e38f-441f-b269-02b1e06c7d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muxiz35ziz24", "content": "D-Link DIR-822A A_101 faces a CRITICAL stack buffer overflow (CVE-2026-86296). Remote code execution possible \u2014 public exploit exists. Isolate devices &amp;amp; monitor now. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-822a-a101-cve-2026-86296-3125c70d27558796 #OffSeq #Vul...", "creation_timestamp": "2026-09-07T22:00:14.928644Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2950d1ce-e38f-441f-b269-02b1e06c7d37/export"/>
    <published>2026-09-07T22:00:14.928644+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6d7e6d06-07d1-442b-94bc-822a01f8ddb1/export</id>
    <title>6d7e6d06-07d1-442b-94bc-822a01f8ddb1</title>
    <updated>2026-09-17T19:36:53.113452+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6d7e6d06-07d1-442b-94bc-822a01f8ddb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117232003422428313", "content": "CVE-2026-86296 | D-Link DIR-822A A_101: Critical stack-based buffer overflow in udhcpcd (CVSS 10). Remotely exploitable, no auth needed. Exploit code is public. Isolate devices &amp;amp; check vendor updates. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-822a-a101-cve-2026-86296-3125c70d27558796 #OffSeq #Vulnerability #DLink #Security", "creation_timestamp": "2026-09-07T22:00:12.871793Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6d7e6d06-07d1-442b-94bc-822a01f8ddb1/export"/>
    <published>2026-09-07T22:00:12.871793+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5cbb2740-8d4e-420d-b39c-472919a3266c/export</id>
    <title>5cbb2740-8d4e-420d-b39c-472919a3266c</title>
    <updated>2026-09-17T19:36:53.113544+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5cbb2740-8d4e-420d-b39c-472919a3266c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86299", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mux7m32cvv23", "content": "Linksys RE7000 2.0.15\u3067OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u9060\u9694\u304b\u3089\u653b\u6483\u53ef\u80fd\u3067\u3001\u653b\u6483\u8005\u306f\u60aa\u7528\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-86299 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-09-07T19:11:53.896096Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5cbb2740-8d4e-420d-b39c-472919a3266c/export"/>
    <published>2026-09-07T19:11:53.896096+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/59a9409d-ce24-4e15-ab45-9286897f032d/export</id>
    <title>59a9409d-ce24-4e15-ab45-9286897f032d</title>
    <updated>2026-09-17T19:36:53.113641+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "59a9409d-ce24-4e15-ab45-9286897f032d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muwhul24yh2r", "content": "\ud83d\udea8 CVE-2026-86296 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86296\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-07T12:07:09.059331Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/59a9409d-ce24-4e15-ab45-9286897f032d/export"/>
    <published>2026-09-07T12:07:09.059331+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5e63981e-7d95-4ae1-8e60-c4a5eaeffe23/export</id>
    <title>5e63981e-7d95-4ae1-8e60-c4a5eaeffe23</title>
    <updated>2026-09-17T19:36:53.113737+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5e63981e-7d95-4ae1-8e60-c4a5eaeffe23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86297", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muwfsxhnxm2h", "content": "Critical off-by-one vuln in D-Link DIR-605 routers (B1v202WWB03): CVE-2026-86297. Exploit code is public, but attacks are complex. No patch yet \u2014 monitor vendor updates. https://radar.offseq.com/threat/cve-2026-86297-off-by-one-in-d-link-dir-605-32dadd3396efded0 #OffSeq #CVE202686297 #RouterSecurity", "creation_timestamp": "2026-09-07T11:30:28.225520Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5e63981e-7d95-4ae1-8e60-c4a5eaeffe23/export"/>
    <published>2026-09-07T11:30:28.225520+00:00</published>
  </entry>
</feed>
