<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-23T13:10:13.554495+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/20e72e36-1614-4a98-938a-95363ff38c25/export</id>
    <title>20e72e36-1614-4a98-938a-95363ff38c25</title>
    <updated>2026-06-23T13:10:13.572299+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "20e72e36-1614-4a98-938a-95363ff38c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspu322d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:43.917180Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/20e72e36-1614-4a98-938a-95363ff38c25/export"/>
    <published>2026-06-11T15:33:43.917180+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/deb40adb-2501-4d46-aa7b-5b3e9d40e12d/export</id>
    <title>deb40adb-2501-4d46-aa7b-5b3e9d40e12d</title>
    <updated>2026-06-23T13:10:13.572022+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "deb40adb-2501-4d46-aa7b-5b3e9d40e12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspv2c2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:45.815011Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/deb40adb-2501-4d46-aa7b-5b3e9d40e12d/export"/>
    <published>2026-06-11T15:33:45.815011+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/77316839-7a02-48ae-bff8-9590e555118b/export</id>
    <title>77316839-7a02-48ae-bff8-9590e555118b</title>
    <updated>2026-06-23T13:10:13.571944+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "77316839-7a02-48ae-bff8-9590e555118b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspvzk2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:47.409904Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/77316839-7a02-48ae-bff8-9590e555118b/export"/>
    <published>2026-06-11T15:33:47.409904+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/98a09ef5-208b-4930-b478-dbde039f63a1/export</id>
    <title>98a09ef5-208b-4930-b478-dbde039f63a1</title>
    <updated>2026-06-23T13:10:13.571723+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "98a09ef5-208b-4930-b478-dbde039f63a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspwys2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:49.163106Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/98a09ef5-208b-4930-b478-dbde039f63a1/export"/>
    <published>2026-06-11T15:33:49.163106+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c382400a-75c7-42e0-a0dc-4c1f084e0101/export</id>
    <title>c382400a-75c7-42e0-a0dc-4c1f084e0101</title>
    <updated>2026-06-23T13:10:13.571270+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c382400a-75c7-42e0-a0dc-4c1f084e0101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspxy22d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:51.865520Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c382400a-75c7-42e0-a0dc-4c1f084e0101/export"/>
    <published>2026-06-11T15:33:51.865520+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/188ca199-0540-44cc-9cdd-d413a6dd4837/export</id>
    <title>188ca199-0540-44cc-9cdd-d413a6dd4837</title>
    <updated>2026-06-23T13:10:13.571146+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "188ca199-0540-44cc-9cdd-d413a6dd4837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47289", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo4lsdi3tz2m", "content": "\ud83d\udccc CVE-2026-47289 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47289", "creation_timestamp": "2026-06-12T20:37:06.245181Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/188ca199-0540-44cc-9cdd-d413a6dd4837/export"/>
    <published>2026-06-12T20:37:06.245181+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3405358-7400-48bc-9ec8-c62622861096/export</id>
    <title>f3405358-7400-48bc-9ec8-c62622861096</title>
    <updated>2026-06-23T13:10:13.570959+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3405358-7400-48bc-9ec8-c62622861096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modkr2rzhx2s", "content": "\ud83d\udccc CVE-2026-47281 - Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47281", "creation_timestamp": "2026-06-15T15:07:07.738030Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3405358-7400-48bc-9ec8-c62622861096/export"/>
    <published>2026-06-15T15:07:07.738030+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9a98b58-a3dd-4b27-9a90-55d8a78c9e54/export</id>
    <title>d9a98b58-a3dd-4b27-9a90-55d8a78c9e54</title>
    <updated>2026-06-23T13:10:13.570766+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9a98b58-a3dd-4b27-9a90-55d8a78c9e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7lms3he24", "content": "\ud83d\udea8 HIGH: CVE-2026-47280\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nImproper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Resource Manager\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: unknown vector\nImpact: varies\n\n\u2705 WHAT TO DO:", "creation_timestamp": "2026-06-17T21:03:12.409342Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9a98b58-a3dd-4b27-9a90-55d8a78c9e54/export"/>
    <published>2026-06-17T21:03:12.409342+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5d36ee7c-859e-4378-8506-25b1da9c7c86/export</id>
    <title>5d36ee7c-859e-4378-8506-25b1da9c7c86</title>
    <updated>2026-06-23T13:10:13.570605+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5d36ee7c-859e-4378-8506-25b1da9c7c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mosuldjvcd2m", "content": "Microsoft Defender $MSFT can be turned against the PC it guards. RoguePlanet (CVE-2026-47281) lets a local attacker seize full SYSTEM control on Windows 10 and 11, even fully patched ones. Microsoft left it unpatched in June, and BleepingComputer reports a working exploit is public.", "creation_timestamp": "2026-06-21T17:13:06.767433Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5d36ee7c-859e-4378-8506-25b1da9c7c86/export"/>
    <published>2026-06-21T17:13:06.767433+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/841062d6-0e36-4c63-a997-c540356a06df/export</id>
    <title>841062d6-0e36-4c63-a997-c540356a06df</title>
    <updated>2026-06-23T13:10:13.568513+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "841062d6-0e36-4c63-a997-c540356a06df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motndgqnas2n", "content": "\ud83d\udea8  ALERT: CVE-2026-47280\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nImproper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Resource Manager\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on conf", "creation_timestamp": "2026-06-22T00:35:47.447095Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/841062d6-0e36-4c63-a997-c540356a06df/export"/>
    <published>2026-06-22T00:35:47.447095+00:00</published>
  </entry>
</feed>
