<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-25T13:05:33.861675+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/beaa97f7-519c-4bb1-8641-7e63d5a07bce/export</id>
    <title>beaa97f7-519c-4bb1-8641-7e63d5a07bce</title>
    <updated>2026-06-25T13:05:33.879018+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "beaa97f7-519c-4bb1-8641-7e63d5a07bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53435", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3modcvycfss2c", "content": "CVE-2026-53435: Inside the Jenkins Deserialization Chain That\u2019s Being Exploited Right\u00a0Now\n\nCVE-2026-53435 is a high-severity Jenkins deserialization flaw (CVSS 8.8) under active exploitation. Full technical breakdown: gadget\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-53435-jenkins-deserialization/", "creation_timestamp": "2026-06-15T12:46:49.034588Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/beaa97f7-519c-4bb1-8641-7e63d5a07bce/export"/>
    <published>2026-06-15T12:46:49.034588+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7689fe6a-94b6-42c5-ba9e-51f7a362ae31/export</id>
    <title>7689fe6a-94b6-42c5-ba9e-51f7a362ae31</title>
    <updated>2026-06-25T13:05:33.878938+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7689fe6a-94b6-42c5-ba9e-51f7a362ae31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53435", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3modduvaaya2u", "content": "Jenkins Under Siege: Critical CVE-2026-53435 Actively Exploited in Real-Time Attacks as Global Infrastructure Faces Silent Takeover Attempts +\u00a0Video\n\nIntroduction: A Silent Crack Appears in the Backbone of DevOps Automation A new wave of cybersecurity concern is sweeping through DevOps environments\u2026", "creation_timestamp": "2026-06-15T13:04:00.577638Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7689fe6a-94b6-42c5-ba9e-51f7a362ae31/export"/>
    <published>2026-06-15T13:04:00.577638+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ff1aa007-2879-483f-8529-c48465a80d0e/export</id>
    <title>ff1aa007-2879-483f-8529-c48465a80d0e</title>
    <updated>2026-06-25T13:05:33.878865+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ff1aa007-2879-483f-8529-c48465a80d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53435", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3moejpxt2zv2j", "content": "Jenkins\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u8106\u5f31\u6027CVE-2026-53435\u304c\u73fe\u5728\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059 \n\nJenkins RCE Vulnerability CVE-2026-53435 Now Under Active Exploitation  #DailyCyberSecurity (Jun 15)\n\nsecurityonline.info/jenkins-rce-...", "creation_timestamp": "2026-06-16T00:21:17.854761Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ff1aa007-2879-483f-8529-c48465a80d0e/export"/>
    <published>2026-06-16T00:21:17.854761+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9d4e8801-f740-485e-bcef-fdc9406e3662/export</id>
    <title>9d4e8801-f740-485e-bcef-fdc9406e3662</title>
    <updated>2026-06-25T13:05:33.878774+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9d4e8801-f740-485e-bcef-fdc9406e3662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53435", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3mofeg6jzuc2t", "content": "\ud83d\udea8 CVE-2026-53435, a high severity (CVSS 8.8) deserialization vulnerability in Jenkins is now seeing active exploitation as per \n@DefusedCyber\n.\n\nScan your infrastructure: \ngithub.com/rxerium/rxer...\n\nPatches are available per the vendor advisory: jenkins.io/security/adv...", "creation_timestamp": "2026-06-16T08:19:02.294195Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9d4e8801-f740-485e-bcef-fdc9406e3662/export"/>
    <published>2026-06-16T08:19:02.294195+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ba84af3a-a2d5-4540-91b8-f7a1e67aaa38/export</id>
    <title>ba84af3a-a2d5-4540-91b8-f7a1e67aaa38</title>
    <updated>2026-06-25T13:05:33.877925+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "ba84af3a-a2d5-4540-91b8-f7a1e67aaa38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53435", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities_20260617", "content": "", "creation_timestamp": "2026-06-16T18:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ba84af3a-a2d5-4540-91b8-f7a1e67aaa38/export"/>
    <published>2026-06-16T18:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/030af1fe-f780-4978-9f46-3ebe2173d6ba/export</id>
    <title>030af1fe-f780-4978-9f46-3ebe2173d6ba</title>
    <updated>2026-06-25T13:05:33.877843+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "030af1fe-f780-4978-9f46-3ebe2173d6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53435", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mogzi6qmbk2q", "content": "Jenkins\u306e\u8106\u5f31\u6027(CVE-2026-53435)\u304c\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3078\u60aa\u7528-PoC\u3082\u516c\u958b\u4e2d\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack", "creation_timestamp": "2026-06-17T00:08:40.371315Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/030af1fe-f780-4978-9f46-3ebe2173d6ba/export"/>
    <published>2026-06-17T00:08:40.371315+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7ccb43d7-5fd8-429a-9c12-2848a2130bc7/export</id>
    <title>7ccb43d7-5fd8-429a-9c12-2848a2130bc7</title>
    <updated>2026-06-25T13:05:33.877770+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7ccb43d7-5fd8-429a-9c12-2848a2130bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53435", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mojx72mocc27", "content": "The latest update for #Foresiet includes \"Inside CVE-2026-53435: Authenticated Deserialization to Full Controller Takeover in Jenkins via config.xml\" and \"The Month the AI Supply Chain Broke: Six #Cybersecurity Incidents That Shook May 2026\".\n \n#infosec https://opsmtrs.com/3J3CMGz", "creation_timestamp": "2026-06-18T04:05:46.416878Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7ccb43d7-5fd8-429a-9c12-2848a2130bc7/export"/>
    <published>2026-06-18T04:05:46.416878+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/26f03cba-0dc8-4059-81e6-9a67c761d267/export</id>
    <title>26f03cba-0dc8-4059-81e6-9a67c761d267</title>
    <updated>2026-06-25T13:05:33.877696+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "26f03cba-0dc8-4059-81e6-9a67c761d267", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53435", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a0d591ce-8b4a-43ca-a36f-8b2c7052e973", "content": "", "creation_timestamp": "2026-06-19T12:45:05.708001Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/26f03cba-0dc8-4059-81e6-9a67c761d267/export"/>
    <published>2026-06-19T12:45:05.708001+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aee04e34-eefc-420d-ada5-76669d53ca8c/export</id>
    <title>aee04e34-eefc-420d-ada5-76669d53ca8c</title>
    <updated>2026-06-25T13:05:33.877588+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aee04e34-eefc-420d-ada5-76669d53ca8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "Cve-2026-53435", "type": "seen", "source": "https://bsky.app/profile/mineabot.xyz/post/3morblcrzr72o", "content": "Cve-2026-53435 pairs a Jenkins deserialization chain with a public PoC and a patch. With working exploit code in the open, the window to patch has effectively closed. Treat CI controllers as priority infrastructure and update now.\n\n#devops #kubernetes #platform", "creation_timestamp": "2026-06-21T02:00:07.709360Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aee04e34-eefc-420d-ada5-76669d53ca8c/export"/>
    <published>2026-06-21T02:00:07.709360+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2ab964e4-03bc-4430-b490-914cc00f394f/export</id>
    <title>2ab964e4-03bc-4430-b490-914cc00f394f</title>
    <updated>2026-06-25T13:05:33.875366+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2ab964e4-03bc-4430-b490-914cc00f394f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53435", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7c04c96c-3f75-4977-9e20-76ebc2722fa6", "content": "", "creation_timestamp": "2026-06-23T14:02:57.490713Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2ab964e4-03bc-4430-b490-914cc00f394f/export"/>
    <published>2026-06-23T14:02:57.490713+00:00</published>
  </entry>
</feed>
