<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-25T01:43:32.955237+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/550a719d-c5ab-4092-9feb-02a3316767b8/export</id>
    <title>550a719d-c5ab-4092-9feb-02a3316767b8</title>
    <updated>2026-06-25T01:43:32.977951+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "550a719d-c5ab-4092-9feb-02a3316767b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mnukwrns6n2d", "content": "CISA flags actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318) in KEV catalog\u2014organizations using Serv-U should prioritize patching.\n\nhttps://thehackernews.com/2026/06/cisa-adds-actively-exploited-solarwinds.html\n\n#cybersecurity #infosec", "creation_timestamp": "2026-06-09T16:00:23.473947Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/550a719d-c5ab-4092-9feb-02a3316767b8/export"/>
    <published>2026-06-09T16:00:23.473947+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5d936959-d315-400c-be02-24e721e2631b/export</id>
    <title>5d936959-d315-400c-be02-24e721e2631b</title>
    <updated>2026-06-25T01:43:32.977882+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5d936959-d315-400c-be02-24e721e2631b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnwalz446726", "content": "\ud83d\udea8 ACTIVE THREAT: CVE-2026-28318 (CVSS 9.1)\n\nPrivilege escalation in Microsoft Entra ID. Tenant-wide impact.\n\nAffects: Microsoft Entra, Azure AD\n\nIf you're running Microsoft Entra, check your patch status today.\n\n\ud83d\udee1\ufe0f Don't wait for the breach. Get your free vulnerability scan \u2192 securitycyber.uk\n\n#Cybe", "creation_timestamp": "2026-06-10T08:00:44.111732Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5d936959-d315-400c-be02-24e721e2631b/export"/>
    <published>2026-06-10T08:00:44.111732+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d43329fe-32b1-4984-843e-6d4fba924a2a/export</id>
    <title>d43329fe-32b1-4984-843e-6d4fba924a2a</title>
    <updated>2026-06-25T01:43:32.977814+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d43329fe-32b1-4984-843e-6d4fba924a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnwplnodfc2x", "content": "Correction on our earlier CVE-2026-28318 alert.\n\nThe affected product was listed as \"SolarWinds Serv-U DoS\" \u2014 that's the vulnerability type, not the product name.\n\nCorrect: SolarWinds Serv-U. The flaw is an uncontrolled resource consumption issue causing denial of service. CVSS 7.5, CISA K", "creation_timestamp": "2026-06-10T12:28:58.250024Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d43329fe-32b1-4984-843e-6d4fba924a2a/export"/>
    <published>2026-06-10T12:28:58.250024+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/19adf7e7-dc78-4530-9b98-2ad5447f3215/export</id>
    <title>19adf7e7-dc78-4530-9b98-2ad5447f3215</title>
    <updated>2026-06-25T01:43:32.977739+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "19adf7e7-dc78-4530-9b98-2ad5447f3215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnwqmq6uco2i", "content": "Quick correction on our earlier post: CVE-2026-28318 affects SolarWinds Serv-U, not Microsoft Entra ID as we stated. The NVD listing confirms it is a crafted POST request crash in Serv-U (CVSS 7.5, HIGH).\n\nWe got the product name wrong. That is on us. In this business, precision matters \u2014 if we cann", "creation_timestamp": "2026-06-10T12:47:28.167128Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/19adf7e7-dc78-4530-9b98-2ad5447f3215/export"/>
    <published>2026-06-10T12:47:28.167128+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2e4b8177-93e1-4509-90b0-23c82adf596b/export</id>
    <title>2e4b8177-93e1-4509-90b0-23c82adf596b</title>
    <updated>2026-06-25T01:43:32.977670+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2e4b8177-93e1-4509-90b0-23c82adf596b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "published-proof-of-concept", "source": "Telegram/UP0bHdwN2udFarZFpAo4dW_5awpjME5BMssCjsrIyWufG1U", "content": "", "creation_timestamp": "2026-06-10T15:00:07.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2e4b8177-93e1-4509-90b0-23c82adf596b/export"/>
    <published>2026-06-10T15:00:07+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4e357787-5bcd-465b-ba23-d7b4a717526f/export</id>
    <title>4e357787-5bcd-465b-ba23-d7b4a717526f</title>
    <updated>2026-06-25T01:43:32.977586+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4e357787-5bcd-465b-ba23-d7b4a717526f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mnyy5f6k3z26", "content": "\ud83d\udea8 SolarWinds Serv-U: Luka DoS aktywnie wykorzystywana. Alert CVE-2026-28318\n\nLuka CVE-2026-28318 w SolarWinds Serv-U pozwala na zdalne wywo\u0142anie awarii us\u0142ugi. CISA potwierdza aktywne ataki i\n\nhttps://cyberowi.pl/solarwinds-serv-u-luka-dos-aktywnie-wykorzystywana-alert/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-06-11T10:07:22.718165Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4e357787-5bcd-465b-ba23-d7b4a717526f/export"/>
    <published>2026-06-11T10:07:22.718165+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5fc6b964-8154-4b0e-8d45-23dd01915e16/export</id>
    <title>5fc6b964-8154-4b0e-8d45-23dd01915e16</title>
    <updated>2026-06-25T01:43:32.977495+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5fc6b964-8154-4b0e-8d45-23dd01915e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "published-proof-of-concept", "source": "Telegram/cFwSQ27uOrqZ96YGVM-ku7YiP0UftFdUhE6IZpDdkcLlq7k", "content": "", "creation_timestamp": "2026-06-13T03:00:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5fc6b964-8154-4b0e-8d45-23dd01915e16/export"/>
    <published>2026-06-13T03:00:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/58df2029-1c7a-4674-a616-9f67b9e117c0/export</id>
    <title>58df2029-1c7a-4674-a616-9f67b9e117c0</title>
    <updated>2026-06-25T01:43:32.977404+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "58df2029-1c7a-4674-a616-9f67b9e117c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mokq2q4cik2a", "content": "A Crash, Not a Shell: SolarWinds Serv-U CVE-2026-28318\nbishopfox.com/blog/a-crash...", "creation_timestamp": "2026-06-18T11:30:48.805969Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/58df2029-1c7a-4674-a616-9f67b9e117c0/export"/>
    <published>2026-06-18T11:30:48.805969+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7c7c0047-0440-4a6f-b813-824b1b8000e5/export</id>
    <title>7c7c0047-0440-4a6f-b813-824b1b8000e5</title>
    <updated>2026-06-25T01:43:32.977296+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7c7c0047-0440-4a6f-b813-824b1b8000e5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/201a6287-73ac-44f1-ad01-3e8f8deb3798", "content": "", "creation_timestamp": "2026-06-19T12:45:09.782720Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7c7c0047-0440-4a6f-b813-824b1b8000e5/export"/>
    <published>2026-06-19T12:45:09.782720+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fd218950-c0da-46ce-8ba5-0d002d0b0323/export</id>
    <title>fd218950-c0da-46ce-8ba5-0d002d0b0323</title>
    <updated>2026-06-25T01:43:32.973039+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fd218950-c0da-46ce-8ba5-0d002d0b0323", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28318", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ab957d4-f6b3-43d3-a77c-8866fbe67fcb", "content": "", "creation_timestamp": "2026-06-23T14:03:01.617503Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fd218950-c0da-46ce-8ba5-0d002d0b0323/export"/>
    <published>2026-06-23T14:03:01.617503+00:00</published>
  </entry>
</feed>
