https://vulnerability.circl.lu/sightings/feed 2026-09-25T13:49:06.839455+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2bb1b3fc-a2a9-457e-9923-d703e67442c5/export 2026-09-25T13:49:06.862244+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2bb1b3fc-a2a9-457e-9923-d703e67442c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq6l7lyof2j", "content": "CVE-2026-51990\nThe Sogou Input Method software (versions before 16.3.0.3498) contains a flaw in its biz_helper.exe component that could let a remote attacker run any program on a user\u2019s computer. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-17T17:30:04.636491Z"} 2026-09-17T17:30:04.636491+00:00 https://vulnerability.circl.lu/sighting/69c24774-c721-4f33-ab2e-806c2d2ba6da/export 2026-09-25T13:49:06.863700+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "69c24774-c721-4f33-ab2e-806c2d2ba6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvmwi6ftxf2x", "content": "Original text: \"Gray Rabbits and the Tale of a One-Click Backdoor\" \u2014 Alexandru-Cristian Barda\u0219, Gen Digital / Gen Threat Labs (10 September 2026; 26-minute read). Figures, the command table, IOCs and published URLs be\nhttps://core-jmp.org/2026/09/gray-rabbits-one-click-backdoor-sogou-cve-2026-51990/", "creation_timestamp": "2026-09-16T10:27:15.304560Z"} 2026-09-16T10:27:15.304560+00:00 https://vulnerability.circl.lu/sighting/282650a1-dda9-4338-bb8b-1c4ed658d2df/export 2026-09-25T13:49:06.863835+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "282650a1-dda9-4338-bb8b-1c4ed658d2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvl4puma3w2l", "content": "A critical flaw (CVE-2026-51990) in Tencent's popular Sogou Input Method is being exploited by Chinese hackers for 1-click RCE. The attack chains a custom protocol handler flaw with an old browser engine. #CyberSecurity #Vulnerability #Tencent\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-15T17:13:35.172708Z"} 2026-09-15T17:13:35.172708+00:00 https://vulnerability.circl.lu/sighting/9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c/export 2026-09-25T13:49:06.863944+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/56d705b6-7c8b-4c3b-87dd-67b77e9b4a9a", "content": "", "creation_timestamp": "2026-09-15T14:00:40.145937Z"} 2026-09-15T14:00:40.145937+00:00 https://vulnerability.circl.lu/sighting/df6926d4-424b-4b3d-837d-838a0278a4fe/export 2026-09-25T13:49:06.864049+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "df6926d4-424b-4b3d-837d-838a0278a4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mvkl7uotq72g", "content": "China-aligned hackers exploiting critical Tencent flaw to drop GrayRabbit backdoor. CVE-2026-51990 poses immediate risk to Windows users\u2014SOC\u2026\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-09-15T12:00:24.468935Z"} 2026-09-15T12:00:24.468935+00:00 https://vulnerability.circl.lu/sighting/60c17918-7d5d-42c6-84be-62dc3e7dfd21/export 2026-09-25T13:49:06.864155+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "60c17918-7d5d-42c6-84be-62dc3e7dfd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvk6n5uc7cym", "content": "\u4e2d\u56fd\u7cfb\u30a2\u30af\u30bf\u30fc\u304cTencent\u88fd\u30bd\u30d5\u30c8\u306e\u91cd\u5927\u306a\u6b20\u9665\u3092\u60aa\u7528\u3057\u3001\u30d0\u30c3\u30af\u30c9\u30a2\u300cGrayRabbit\u300d\u3092\u5c55\u958b\uff08CVE-2026-51990\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47725/", "creation_timestamp": "2026-09-15T08:15:12.790640Z"} 2026-09-15T08:15:12.790640+00:00 https://vulnerability.circl.lu/sighting/7876d3d6-e890-4aa9-afa0-d10d82bd51b1/export 2026-09-25T13:49:06.864256+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7876d3d6-e890-4aa9-afa0-d10d82bd51b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/jarkafterdark.com/post/3mvk37wpdgo2m", "content": "the flaw, cve-2026-51990, opened the path to remote code execution through sogou's embedded browser. in the attack gen observed, UNC3569 chained it with an old chromium v8 flaw. one crafted link, one click, and the attacker could essentially do anything the currently logged-in user could do.", "creation_timestamp": "2026-09-15T07:14:06.573695Z"} 2026-09-15T07:14:06.573695+00:00 https://vulnerability.circl.lu/sighting/08bfa8f7-4380-473f-a9d8-0473a7168a22/export 2026-09-25T13:49:06.864359+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "08bfa8f7-4380-473f-a9d8-0473a7168a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvjz7klh3o2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-20079: 22 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-85706: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 5 interactions\nCVE-2026-76461: 5 interactions\nCVE-2026-85706: 5 interactions\n", "creation_timestamp": "2026-09-15T06:38:06.953080Z"} 2026-09-15T06:38:06.953080+00:00 https://vulnerability.circl.lu/sighting/4e593253-2223-4222-ae1c-67a95384c97a/export 2026-09-25T13:49:06.864457+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4e593253-2223-4222-ae1c-67a95384c97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "published-proof-of-concept", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.229728Z"} 2026-09-15T00:00:21.229728+00:00 https://vulnerability.circl.lu/sighting/6fecef12-a462-4053-8789-2704a517e439/export 2026-09-25T13:49:06.864557+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6fecef12-a462-4053-8789-2704a517e439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/BleepingComputer/25549", "content": "\u200aHackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-15T00:00:10.129471Z"} 2026-09-15T00:00:10.129471+00:00