<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-26T20:56:38.886905+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9fcb72f8-8f3e-44ae-9f5f-5a4ddea51fce/export</id>
    <title>9fcb72f8-8f3e-44ae-9f5f-5a4ddea51fce</title>
    <updated>2026-07-26T20:56:38.911835+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9fcb72f8-8f3e-44ae-9f5f-5a4ddea51fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57106", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrhdvb42hl2x", "content": "Microsoft Purview Data Governance hit by CRITICAL SSRF (CVE-2026-57106, CVSS 10). Remote privilege escalation possible. Apply Microsoft\u2019s fix immediately: https://radar.offseq.com/threat/cve-2026-57106-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-purview-data-governance-0983080...", "creation_timestamp": "2026-07-25T07:30:26.748523Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9fcb72f8-8f3e-44ae-9f5f-5a4ddea51fce/export"/>
    <published>2026-07-25T07:30:26.748523+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a070f24c-b5df-4790-bd0a-716112864d8b/export</id>
    <title>a070f24c-b5df-4790-bd0a-716112864d8b</title>
    <updated>2026-07-26T20:56:38.915536+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a070f24c-b5df-4790-bd0a-716112864d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57106", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116979441614612449", "content": "Microsoft Purview Data Governance is impacted by CVE-2026-57106 (SSRF, CVSS 10, CRITICAL). Remote attackers can escalate privileges \u2014 patch ASAP using the official fix: https://radar.offseq.com/threat/cve-2026-57106-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-purview-data-governance-0983080847f54f67 #OffSeq #Vuln #SSRF #Microsoft #CyberSec", "creation_timestamp": "2026-07-25T07:30:25.023145Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a070f24c-b5df-4790-bd0a-716112864d8b/export"/>
    <published>2026-07-25T07:30:25.023145+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6e006dd4-0b3b-435d-9b23-772b83505db3/export</id>
    <title>6e006dd4-0b3b-435d-9b23-772b83505db3</title>
    <updated>2026-07-26T20:56:38.915683+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6e006dd4-0b3b-435d-9b23-772b83505db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57106", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116979142933860162", "content": "Our CTI team identified a lot of activities targeting Microsoft Purview Data Governance (CVE-2026-57106) https://vuldb.com/vuln/382935/cti", "creation_timestamp": "2026-07-25T06:14:27.238794Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6e006dd4-0b3b-435d-9b23-772b83505db3/export"/>
    <published>2026-07-25T06:14:27.238794+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/93ebb345-90f1-4cdb-85eb-8bb9a0c86237/export</id>
    <title>93ebb345-90f1-4cdb-85eb-8bb9a0c86237</title>
    <updated>2026-07-26T20:56:38.915788+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "93ebb345-90f1-4cdb-85eb-8bb9a0c86237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57106", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftcvc72z2j", "content": "\ud83d\udd34 CVE-2026-57106 - Critical (10)\n\nServer-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate pri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-57106/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T17:01:10.961647Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/93ebb345-90f1-4cdb-85eb-8bb9a0c86237/export"/>
    <published>2026-07-24T17:01:10.961647+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6a165008-e190-48ff-9f49-68bee3f7cfe9/export</id>
    <title>6a165008-e190-48ff-9f49-68bee3f7cfe9</title>
    <updated>2026-07-26T20:56:38.915888+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6a165008-e190-48ff-9f49-68bee3f7cfe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57106", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrfpdryc7w2y", "content": "CVE-2026-57106\nAn attacker can use Data Quality to access and manipulate network resources without permission. This allows them to potentially gain unauthorized access to sensitive data or disrupt network operations. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T15:50:05.215404Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6a165008-e190-48ff-9f49-68bee3f7cfe9/export"/>
    <published>2026-07-24T15:50:05.215404+00:00</published>
  </entry>
</feed>
