<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-19T22:35:49.595614+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/61f14328-270e-4032-bfb6-8fa5aeb30313/export</id>
    <title>61f14328-270e-4032-bfb6-8fa5aeb30313</title>
    <updated>2026-09-19T22:35:49.617480+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "61f14328-270e-4032-bfb6-8fa5aeb30313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvuj4dejlc2e", "content": "Totolink A3002MU Hh-B20211125.1046\u306eformWlWds\u30d5\u30a1\u30a4\u30eb\u306b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u3002\nCVE-2026-93741 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-09-19T10:49:15.404753Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/61f14328-270e-4032-bfb6-8fa5aeb30313/export"/>
    <published>2026-09-19T10:49:15.404753+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ac136148-8044-4eb8-84b3-673e71270e2f/export</id>
    <title>ac136148-8044-4eb8-84b3-673e71270e2f</title>
    <updated>2026-09-19T22:35:49.620355+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ac136148-8044-4eb8-84b3-673e71270e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j366iovx76r3u", "content": "CVE-2026-93741 - Totolink A3002MU formWlWds buffer overflow\nCVE ID : CVE-2026-93741\n \n Published : Sept. 19, 2026, 6:16 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is th...", "creation_timestamp": "2026-09-19T08:07:34.445971Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ac136148-8044-4eb8-84b3-673e71270e2f/export"/>
    <published>2026-09-19T08:07:34.445971+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7193ec7d-b41b-4df4-9107-c399da01e44b/export</id>
    <title>7193ec7d-b41b-4df4-9107-c399da01e44b</title>
    <updated>2026-09-19T22:35:49.620694+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7193ec7d-b41b-4df4-9107-c399da01e44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvua2qfolh2t", "content": "\ud83d\udea8 CVE-2026-93741 \u2014 CVSS 9.3 CRITICAL\n\nA security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93741\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T08:07:18.276607Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7193ec7d-b41b-4df4-9107-c399da01e44b/export"/>
    <published>2026-09-19T08:07:18.276607+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5941f760-b05c-47d9-b7fa-3e4eed5453fb/export</id>
    <title>5941f760-b05c-47d9-b7fa-3e4eed5453fb</title>
    <updated>2026-09-19T22:35:49.620870+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5941f760-b05c-47d9-b7fa-3e4eed5453fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://gist.github.com/ichintu/3891ce0c6380cb100014a71d3f634404", "content": "This daily threat intelligence briefing highlights three critical security developments:\n\n- **Supply Chain Breach &amp;amp; Credential Theft:** CrowdSec reported that a May supply chain attack on TanStack npm packages compromised employee credentials. An unrevoked GitHub account belonging to a departed employee was exploited to copy ~170 private repositories.\n- **CISA KEV Catalog Updates:** CISA added three actively exploited Linux kernel vulnerabilities, plus flaws in Acronis Backup and Google Pixel, to its Known Exploited Vulnerabilities catalog.\n- **Critical Public Vulnerabilities:**\n  \u2022 **Totolink Routers:** CVE-2026-93741 (CVSS 10.0) is a publicly exploitable remote buffer overflow in A3002MU firmware.\n  \u2022 **Docker Desktop:** CVE-2026-77179 details a hypervisor escape vulnerability affecting macOS environments.\n  \u2022 **WordPress Gravity Forms:** CVE-2026-84434 (CVSS 9.8) allows unauthenticated attackers to bypass file validation and achieve remote code execution.\n\n**Recommendation:** Organizations should immediately patch affected software, revoke unused or departed-employee credentials, and monitor CISA alerts for active exploitation indicators.", "creation_timestamp": "2026-09-19T08:02:12.286587Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5941f760-b05c-47d9-b7fa-3e4eed5453fb/export"/>
    <published>2026-09-19T08:02:12.286587+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9bd2e989-271c-4096-972c-c363b81a1a93/export</id>
    <title>9bd2e989-271c-4096-972c-c363b81a1a93</title>
    <updated>2026-09-19T22:35:49.620993+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9bd2e989-271c-4096-972c-c363b81a1a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4izc7va2w", "content": "\ud83d\udd34 CVE-2026-93741 - Critical (10)\n\nA security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulne...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93741/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:03:43.353011Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9bd2e989-271c-4096-972c-c363b81a1a93/export"/>
    <published>2026-09-19T07:03:43.353011+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/03a24e61-e2d7-405f-8443-b9be6514304f/export</id>
    <title>03a24e61-e2d7-405f-8443-b9be6514304f</title>
    <updated>2026-09-19T22:35:49.621097+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "03a24e61-e2d7-405f-8443-b9be6514304f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvu3qntka52t", "content": "CVE-2026-93741 - a3002mu\nThe Totolink A3002MU router can be tricked into overflowing memory when a specially crafted web request is sent to its configuration page. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#a3002mu #totolink #CVE #infosec", "creation_timestamp": "2026-09-19T06:50:05.045326Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/03a24e61-e2d7-405f-8443-b9be6514304f/export"/>
    <published>2026-09-19T06:50:05.045326+00:00</published>
  </entry>
</feed>
