https://vulnerability.circl.lu/sightings/feed 2026-09-24T11:38:58.991090+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a2674509-1f43-45f3-8884-e4237cb562d4/export 2026-09-24T11:38:59.016391+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a2674509-1f43-45f3-8884-e4237cb562d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6suhh44n23", "content": "\ud83d\udd17 CVE : CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-76711, CVE-2026-76712, CVE-2026-76713, CVE-2026-76714, CVE-2026-76715, CVE-2026-76716, CVE-2026-76717", "creation_timestamp": "2026-09-23T13:10:25.868074Z"} 2026-09-23T13:10:25.868074+00:00 https://vulnerability.circl.lu/sighting/371ec4d0-0621-4ca1-a0dc-8d42d7846abe/export 2026-09-24T11:38:59.018022+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "371ec4d0-0621-4ca1-a0dc-8d42d7846abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5alauy6j2y", "content": "\ud83d\udea8 CVE-2026-76708 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying oper...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76708\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:29.869802Z"} 2026-09-22T22:10:29.869802+00:00 https://vulnerability.circl.lu/sighting/0cffe36a-2ade-47ef-bb38-effc54ae1d16/export 2026-09-24T11:38:59.018159+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0cffe36a-2ade-47ef-bb38-effc54ae1d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw56uvqjng2f", "content": "CVE-2026-76708\nThe Analytics and Location Engine uses built-in usernames and passwords that are the same for every installation. Because these credentials are known, anyone on the internet can try to log in and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T21:40:06.343358Z"} 2026-09-22T21:40:06.343358+00:00 https://vulnerability.circl.lu/sighting/515efeab-0376-4b4c-86ee-50ad7418ce37/export 2026-09-24T11:38:59.018271+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "515efeab-0376-4b4c-86ee-50ad7418ce37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://gist.github.com/ichintu/36aaaecfd03b65cd834e3e2ec1b2ba36", "content": "This daily cyber threat intelligence digest highlights critical vulnerabilities, active exploits, and emerging security guidance. Key advisories include default credential exposure in HPE ALE (CVE-2026-76708, CVSS 9.8), an actively exploited heap overflow in F5 BIG-IP APM (CVE-2026-94127), and a DoS flaw in Vector/Logstash (CVE-2026-77620). Additional affected platforms include Erlang OTP and MikroTik RouterOS, with patches and hotfixes available. On the threat actor front, a malicious npm package disguised as a Twilio tool is harvesting credentials, while a new zero-day PoC (BigDiskBuster) disrupts Microsoft Defender updates by exhausting disk space. The digest also features technical analysis of MikroTik disclosures, an open-source architecture for offline clinic ID verification, and a practical guide on avoiding false-positive RCE reports by validating delays with control requests and computed outputs rather than relying on time-based checks. Organizations are urged to apply vendor updates, monitor for credential exfiltration, and strengthen vulnerability validation practices.", "creation_timestamp": "2026-09-22T20:01:40.668723Z"} 2026-09-22T20:01:40.668723+00:00