<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-18T22:26:05.404158+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a731d45-0fc3-4140-af9d-fcbf630a4841/export</id>
    <title>9a731d45-0fc3-4140-af9d-fcbf630a4841</title>
    <updated>2026-06-18T22:26:05.411769+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a731d45-0fc3-4140-af9d-fcbf630a4841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mohcmgize22h", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation\n\nCisco warned that CVE-2026-20262, a Catalyst SD-WAN Manager vulnerability allowing arbitrary file writes, is being actively exploited. Cisco confirmed active exploitation of CVE-2026-20262, an arbitrary\u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T02:52:02.310997Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a731d45-0fc3-4140-af9d-fcbf630a4841/export"/>
    <published>2026-06-17T02:52:02.310997+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/af80ddd5-9e82-422c-a9c8-2d303b9ac096/export</id>
    <title>af80ddd5-9e82-422c-a9c8-2d303b9ac096</title>
    <updated>2026-06-18T22:26:05.411689+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "af80ddd5-9e82-422c-a9c8-2d303b9ac096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mohjwzesmp2e", "content": "\ud83d\udea8 Cisco SD-WAN zero-day CVE-2026-20262 exploited in the wild. Write access \u2192 root escal via crafted HTTP. Patch now! https://radar.offseq.com/threat/cisco-p", "creation_timestamp": "2026-06-17T05:03:12.999013Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/af80ddd5-9e82-422c-a9c8-2d303b9ac096/export"/>
    <published>2026-06-17T05:03:12.999013+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ac83c6a8-324f-44f9-bcc5-a49a67269877/export</id>
    <title>ac83c6a8-324f-44f9-bcc5-a49a67269877</title>
    <updated>2026-06-18T22:26:05.411612+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ac83c6a8-324f-44f9-bcc5-a49a67269877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mohljjzyh22f", "content": "# Daily IT Security Digest \u2014 2026-06-17\n\n## 1. \ud83d\udea8 Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild (CVE-2026-20262)\nA critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager is being actively exploited. Attackers with write access can escalate privileges to root via crafted HTTP", "creation_timestamp": "2026-06-17T05:31:28.611838Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ac83c6a8-324f-44f9-bcc5-a49a67269877/export"/>
    <published>2026-06-17T05:31:28.611838+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/411e7d3f-ef67-4cf6-b5b0-a1e9647e1696/export</id>
    <title>411e7d3f-ef67-4cf6-b5b0-a1e9647e1696</title>
    <updated>2026-06-18T22:26:05.411526+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "411e7d3f-ef67-4cf6-b5b0-a1e9647e1696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mohqqieofs23", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN\u306e\u8106\u5f31\u6027\u304c\u6a19\u7684\u578b\u653b\u6483\u306e\u5bfe\u8c61\u3068\u306a\u3063\u3066\u3044\u308b \n\nCVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation  #SecurityAffairs (Jun 16)\n\nsecurityaffairs.com/193693/secur...", "creation_timestamp": "2026-06-17T07:04:49.918129Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/411e7d3f-ef67-4cf6-b5b0-a1e9647e1696/export"/>
    <published>2026-06-17T07:04:49.918129+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d1852f46-1b25-4053-9aaa-b0520becc4fc/export</id>
    <title>d1852f46-1b25-4053-9aaa-b0520becc4fc</title>
    <updated>2026-06-18T22:26:05.411442+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d1852f46-1b25-4053-9aaa-b0520becc4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/groovysecurity.bsky.social/post/3moin4ect6l27", "content": "CVE-2026-20262 shipped as a CVSS 6.5. Authenticated file write in Cisco SD-WAN Manager \u2014 the kind of \"medium\" that sits in a backlog for a quarter.\n\nExcept it chains to root on the box running your entire WAN fabric. CISA gave it two weeks.\n\nThe score ranked the bug, not the blast radius.", "creation_timestamp": "2026-06-17T15:32:33.080184Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d1852f46-1b25-4053-9aaa-b0520becc4fc/export"/>
    <published>2026-06-17T15:32:33.080184+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/686e2f95-e19b-468f-9f17-b10a21011762/export</id>
    <title>686e2f95-e19b-468f-9f17-b10a21011762</title>
    <updated>2026-06-18T22:26:05.411360+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "686e2f95-e19b-468f-9f17-b10a21011762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moinuxyh3m2g", "content": "\u26a0\ufe0f Cisco Catalyst SD-WAN Manager flaw CVE-2026-20262 is actively exploited! The bug allows root privilege escalation. CISA has added it to the KEV catalog, mandating a patch by June 29. Update now! #Cisco #CVE #CyberSecurity #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-17T15:46:18.911077Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/686e2f95-e19b-468f-9f17-b10a21011762/export"/>
    <published>2026-06-17T15:46:18.911077+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a5a46b8d-4cdc-4796-8ff9-28535a6c59e9/export</id>
    <title>a5a46b8d-4cdc-4796-8ff9-28535a6c59e9</title>
    <updated>2026-06-18T22:26:05.411257+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a5a46b8d-4cdc-4796-8ff9-28535a6c59e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mok2hg6tdw2b", "content": "\ud83d\udea8 Daily IT Security Digest \u2014 2026-06-18\n\n#1 Cisco Catalyst SD-WAN: Zero-day (CVE-2026-20262, CVSS 9.2) actively exploited. Attackers with write access escalate to root via crafted HTTP requests. Patch now.", "creation_timestamp": "2026-06-18T05:04:35.524036Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a5a46b8d-4cdc-4796-8ff9-28535a6c59e9/export"/>
    <published>2026-06-18T05:04:35.524036+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d8a75695-0360-4d77-9a30-44bce37181a0/export</id>
    <title>d8a75695-0360-4d77-9a30-44bce37181a0</title>
    <updated>2026-06-18T22:26:05.411171+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d8a75695-0360-4d77-9a30-44bce37181a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mok45d45gt2q", "content": "closely.\n[Source: @offseq@infosec.exchange](https://infosec.exchange/@offseq/116768874653611252)\n\n## 2. \ud83d\udea8 CRITICAL: CVE-2026-20262 \u2014 Cisco Catalyst SD-WAN Manager Zero-Day in the Wild\nAttackers with write access can escalate to root via crafted HTTP requests. This zero-day is actively exploited in", "creation_timestamp": "2026-06-18T05:34:12.212120Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d8a75695-0360-4d77-9a30-44bce37181a0/export"/>
    <published>2026-06-18T05:34:12.212120+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/94d45582-e3db-4ff7-b3d9-70c2407302d9/export</id>
    <title>94d45582-e3db-4ff7-b3d9-70c2407302d9</title>
    <updated>2026-06-18T22:26:05.411060+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "94d45582-e3db-4ff7-b3d9-70c2407302d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mokf2cnugg2o", "content": "Cisco rated CVE-2026-20262 a 6.5. CISA put it on the must-patch list anyway: a low-privilege login on SD-WAN Manager writes files as root and owns your whole WAN fabric. Patch by June 29. #CISAKEV", "creation_timestamp": "2026-06-18T08:13:34.050893Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/94d45582-e3db-4ff7-b3d9-70c2407302d9/export"/>
    <published>2026-06-18T08:13:34.050893+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2267f717-b48d-4947-92e8-26d0c72db667/export</id>
    <title>2267f717-b48d-4947-92e8-26d0c72db667</title>
    <updated>2026-06-18T22:26:05.409765+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2267f717-b48d-4947-92e8-26d0c72db667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mokymgjj5b2j", "content": "vendor updates closely.\n[Source: @offseq@infosec.exchange](https://infosec.exchange/@offseq/116768874653611252)\n\n## 2. \ud83d\udea8 CRITICAL: CVE-2026-20262 \u2014 Cisco Catalyst SD-WAN Manager Zero-Day in the Wild\nAttackers with write access can escalate to root via crafted HTTP requests. This", "creation_timestamp": "2026-06-18T14:03:42.815579Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2267f717-b48d-4947-92e8-26d0c72db667/export"/>
    <published>2026-06-18T14:03:42.815579+00:00</published>
  </entry>
</feed>
