<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T15:09:25.683233+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0cfac377-58e1-4605-9a75-f4145f2489c2/export</id>
    <title>0cfac377-58e1-4605-9a75-f4145f2489c2</title>
    <updated>2026-09-14T15:09:25.710303+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0cfac377-58e1-4605-9a75-f4145f2489c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhahybpxq2j", "content": "3/ FIREWALLS + PATCH: FortiGate CVE-2025-25249 exploited (PivotC2 RAT, 178 devices). PAN-OS CVE-2026-0310 (CVSS 9.2) root RCE. Sept Patch Tuesday: 973 vulns, 2 zero-days. Audit SSO, rotate creds, patch edge. #ThreatIntel", "creation_timestamp": "2026-09-14T04:10:06.280948Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0cfac377-58e1-4605-9a75-f4145f2489c2/export"/>
    <published>2026-09-14T04:10:06.280948+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2898daea-a6aa-44a4-a92b-ede21fc88f0c/export</id>
    <title>2898daea-a6aa-44a4-a92b-ede21fc88f0c</title>
    <updated>2026-09-14T15:09:25.713261+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2898daea-a6aa-44a4-a92b-ede21fc88f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhaflnz2v2l", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:08:46.237478Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2898daea-a6aa-44a4-a92b-ede21fc88f0c/export"/>
    <published>2026-09-14T04:08:46.237478+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3ab3198-8792-4e79-a5d3-54f0bfe2e27d/export</id>
    <title>f3ab3198-8792-4e79-a5d3-54f0bfe2e27d</title>
    <updated>2026-09-14T15:09:25.713357+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3ab3198-8792-4e79-a5d3-54f0bfe2e27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhacnfvtx2e", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:07:06.975224Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3ab3198-8792-4e79-a5d3-54f0bfe2e27d/export"/>
    <published>2026-09-14T04:07:06.975224+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a9163203-3870-4624-ba3c-193e00dac434/export</id>
    <title>a9163203-3870-4624-ba3c-193e00dac434</title>
    <updated>2026-09-14T15:09:25.713424+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a9163203-3870-4624-ba3c-193e00dac434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvhabwj2xn2k", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email BO CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #PotatoSecurity", "creation_timestamp": "2026-09-14T04:06:43.107050Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a9163203-3870-4624-ba3c-193e00dac434/export"/>
    <published>2026-09-14T04:06:43.107050+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/674b4c6b-a0d4-43c8-8843-98f9429826eb/export</id>
    <title>674b4c6b-a0d4-43c8-8843-98f9429826eb</title>
    <updated>2026-09-14T15:09:25.713490+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "674b4c6b-a0d4-43c8-8843-98f9429826eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhabw3evq2i", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:06:42.489143Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/674b4c6b-a0d4-43c8-8843-98f9429826eb/export"/>
    <published>2026-09-14T04:06:42.489143+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/02f8633d-bf4e-4fe9-bc42-10aef20632e9/export</id>
    <title>02f8633d-bf4e-4fe9-bc42-10aef20632e9</title>
    <updated>2026-09-14T15:09:25.713559+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "02f8633d-bf4e-4fe9-bc42-10aef20632e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117254839964813673", "content": "Palo-Alto are calling resellers and asking them to call customers to tell them to update their Palo-Alto PA and VM firewalls to cover CVE-2026-0310 - an unauthenticated XML parsing vulneraility which causes a buffer overflow leading to code execution, on the PA (physical) firewalls via the dataplane. https://security.paloaltonetworks.com/CVE-2026-0310 \nHT @databeestje", "creation_timestamp": "2026-09-11T22:48:00.184060Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/02f8633d-bf4e-4fe9-bc42-10aef20632e9/export"/>
    <published>2026-09-11T22:48:00.184060+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7ba7f49d-3b97-40c9-8a16-ee6af2792f0e/export</id>
    <title>7ba7f49d-3b97-40c9-8a16-ee6af2792f0e</title>
    <updated>2026-09-14T15:09:25.713629+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7ba7f49d-3b97-40c9-8a16-ee6af2792f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvb3qfszxd2g", "content": "CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA\n\n", "creation_timestamp": "2026-09-11T17:29:22.123182Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7ba7f49d-3b97-40c9-8a16-ee6af2792f0e/export"/>
    <published>2026-09-11T17:29:22.123182+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ea60df4c-a43b-43b4-9891-c989236e9d31/export</id>
    <title>ea60df4c-a43b-43b4-9891-c989236e9d31</title>
    <updated>2026-09-14T15:09:25.713692+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ea60df4c-a43b-43b4-9891-c989236e9d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117251707289777319", "content": "It is possible to see elevated activities targeting Palo Alto Networks Cloud NGFW and other products (CVE-2026-0310) https://vuldb.com/vuln/401947/cti", "creation_timestamp": "2026-09-11T09:31:09.163009Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ea60df4c-a43b-43b4-9891-c989236e9d31/export"/>
    <published>2026-09-11T09:31:09.163009+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/236ad53f-4ff6-44a1-b126-1d28589929b7/export</id>
    <title>236ad53f-4ff6-44a1-b126-1d28589929b7</title>
    <updated>2026-09-14T15:09:25.713757+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "236ad53f-4ff6-44a1-b126-1d28589929b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mv6skask6n2k", "content": "CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls", "creation_timestamp": "2026-09-10T19:39:32.284539Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/236ad53f-4ff6-44a1-b126-1d28589929b7/export"/>
    <published>2026-09-10T19:39:32.284539+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/58a7daaf-2679-4acc-a54b-fa3e89fe6fcf/export</id>
    <title>58a7daaf-2679-4acc-a54b-fa3e89fe6fcf</title>
    <updated>2026-09-14T15:09:25.713814+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "58a7daaf-2679-4acc-a54b-fa3e89fe6fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0310", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117248199755374607", "content": "CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls#CVE_2026_0310 https://socprime.com/blog/cve-2026-0310-analysis/", "creation_timestamp": "2026-09-10T18:39:08.508205Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/58a7daaf-2679-4acc-a54b-fa3e89fe6fcf/export"/>
    <published>2026-09-10T18:39:08.508205+00:00</published>
  </entry>
</feed>
