https://vulnerability.circl.lu/sightings/feed 2026-10-03T05:54:29.256194+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/061af895-ef64-4ab6-9f33-f1fc466c8eae/export 2026-10-03T05:54:29.282640+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "061af895-ef64-4ab6-9f33-f1fc466c8eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mww6tgmr3a2u", "content": "\ud83d\udce1 Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-76504): One Encoded Letter Away From Admin", "creation_timestamp": "2026-10-02T20:15:50.666513Z"} 2026-10-02T20:15:50.666513+00:00 https://vulnerability.circl.lu/sighting/09ceae34-ddd4-45c0-843e-967a0dc1b760/export 2026-10-03T05:54:29.283885+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "09ceae34-ddd4-45c0-843e-967a0dc1b760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mwvvrhpve32n", "content": "Revenge of the SD-WAN: Exploring and Exploiting yet Another Critical Cisco SD-WAN Vulnerability (CVE-2026-76504) https://packetstorm.news/news/view/44586 #news", "creation_timestamp": "2026-10-02T17:33:40.777742Z"} 2026-10-02T17:33:40.777742+00:00 https://vulnerability.circl.lu/sighting/8fd242a8-cb14-4c29-be6f-c11a9df3cae2/export 2026-10-03T05:54:29.284003+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8fd242a8-cb14-4c29-be6f-c11a9df3cae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwvkssf53g2s", "content": "Cisco patches critical auth bypass zero-day (CVE-2026-76504) in Catalyst SD-WAN Manager. CVSS 9.8 flaw actively exploited. Unauthenticated attackers can gain admin access. CISA added to KEV. Patch immediately! #Cisco #ZeroDay #SDWAN #CVE202676504\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-02T14:17:34.465589Z"} 2026-10-02T14:17:34.465589+00:00 https://vulnerability.circl.lu/sighting/24a3af72-f016-486c-9c63-205481f9bfe7/export 2026-10-03T05:54:29.284083+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "24a3af72-f016-486c-9c63-205481f9bfe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cybereyeq.bsky.social/post/3mwvcy2ewyl2q", "content": "Critical Cisco Catalyst SD-WAN Manager auth-bypass (CVE-2026-76504, CVSS 9.8) hit CISA's KEV catalog on 30 Sep. Federal fix due 3 Oct under BOD 26-04. https://www.cybereyeq.com/?utm_source=bluesky&utm_medium=social&utm_campaign=cisco_sdwan_kev", "creation_timestamp": "2026-10-02T11:57:20.769879Z"} 2026-10-02T11:57:20.769879+00:00 https://vulnerability.circl.lu/sighting/14cb9edf-d6b7-44e7-a8d2-a69e0d35206c/export 2026-10-03T05:54:29.284156+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "14cb9edf-d6b7-44e7-a8d2-a69e0d35206c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwuryfv25s2f", "content": "\ud83d\udd34 Cisco SD-WAN CVE-2026-76504 \u2014 zero-day under active attack\nCritical CVSS 9.8 auth bypass lets remote attackers access Catalyst SD-WAN Manager APIs with admin privileges \u2014 no password required.\nstemshop.top/blog/cisco-s...\n#CVE #CVE202676504 #Cisco #SDWAN #ZeroDay #CyberSecurity", "creation_timestamp": "2026-10-02T06:53:24.026612Z"} 2026-10-02T06:53:24.026612+00:00 https://vulnerability.circl.lu/sighting/85f8e9f8-0383-4c38-bdbb-56396c99f551/export 2026-10-03T05:54:29.284227+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "85f8e9f8-0383-4c38-bdbb-56396c99f551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mwuquqzsjm2p", "content": "Here we go again with Cisco Catalyst SD-WAN Manager users discovering that basic hex encoding was apparently too difficult to parse properly. Thanks to CVE-2026-76504, remote opportunists have been casually awarding themselves administrative API access in the wild without needing...\n\nRead full story", "creation_timestamp": "2026-10-02T06:33:22.872101Z"} 2026-10-02T06:33:22.872101+00:00 https://vulnerability.circl.lu/sighting/92db04af-4e05-47c1-8e62-7f2fd50f4492/export 2026-10-03T05:54:29.284297+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "92db04af-4e05-47c1-8e62-7f2fd50f4492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mwuqqu5xr32h", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-76504: \u26a0\ufe0f CVE-2026-76504: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 1.1%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-76504-a-vulnerability-in-the-api-session-based", "creation_timestamp": "2026-10-02T06:31:11.744898Z"} 2026-10-02T06:31:11.744898+00:00 https://vulnerability.circl.lu/sighting/ca10d040-206e-4f39-8385-ffb229118b74/export 2026-10-03T05:54:29.284366+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ca10d040-206e-4f39-8385-ffb229118b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mwuorkgfv62s", "content": "\ud83d\udee1\ufe0f Revue cyber du 2 octobre :\n\n\u2022 CERT-FR : faille Cisco SD-WAN (CVE-2026-76504) exploit\u00e9e activement.\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1246/\n\n\u2022 Fortinet : critique FortiMail exploit\u00e9e en 0-day.", "creation_timestamp": "2026-10-02T05:55:48.601547Z"} 2026-10-02T05:55:48.601547+00:00 https://vulnerability.circl.lu/sighting/030debcd-7951-4579-9d65-4b6c382c2485/export 2026-10-03T05:54:29.284435+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "030debcd-7951-4579-9d65-4b6c382c2485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mwulgfxez62d", "content": "Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability (CVE-2026-76504) #patchmanagement", "creation_timestamp": "2026-10-02T04:55:52.695233Z"} 2026-10-02T04:55:52.695233+00:00 https://vulnerability.circl.lu/sighting/98e10632-6137-4988-b488-a96688652873/export 2026-10-03T05:54:29.284505+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "98e10632-6137-4988-b488-a96688652873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mwtzkrwwmk2x", "content": "So wait, Cisco's SD-WAN admin login dies if you hex-encode the letter j? *burp* CVE-2026-76504 is CVSS 9.8 and already on CISA's KEV fridge. Your whole WAN is one URI typo from freeloaders, schmeckles refunded. day275.008", "creation_timestamp": "2026-10-01T23:36:15.243754Z"} 2026-10-01T23:36:15.243754+00:00