https://vulnerability.circl.lu/sightings/feed 2026-09-24T10:18:06.013082+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5566d468-e667-4f6f-86fc-01c85d774862/export 2026-09-24T10:18:06.033058+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5566d468-e667-4f6f-86fc-01c85d774862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwaocrxpjs2d", "content": "Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances\n\nCheck Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026. The compan\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T06:54:18.369268Z"} 2026-09-24T06:54:18.369268+00:00 https://vulnerability.circl.lu/sighting/14e07827-a42c-4181-93aa-63e55ef42067/export 2026-09-24T10:18:06.035862+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "14e07827-a42c-4181-93aa-63e55ef42067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mwao4nez5t2t", "content": "\u26a0\ufe0f #CheckPoint alerte sur une faille zero-day (CVE-2026-93616) exploit\u00e9e le 23/07. Elle permet l\u2019ex\u00e9cution de scripts sans authentification sur son serveur de gestion. Correctif publi\u00e9 le 22/09. #CyberSecurity #Automatisation ", "creation_timestamp": "2026-09-24T06:50:51.441078Z"} 2026-09-24T06:50:51.441078+00:00 https://vulnerability.circl.lu/sighting/aefe4d3e-c0b1-473f-8ecf-bb0b510731c6/export 2026-09-24T10:18:06.035966+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aefe4d3e-c0b1-473f-8ecf-bb0b510731c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2tnmab23", "content": "Daily IT Security Digest \u2014 2026-09-24\nsignificant vulnerabilities emerged: VMware vCenter has CVE-2026-59309 and CVE-2026-59310 affecting management infrastructure, while Check Point Management (CVE-2026-93616) exposes a critical RCE allowing arbitrary script execution on management servers. Both", "creation_timestamp": "2026-09-24T05:02:28.386361Z"} 2026-09-24T05:02:28.386361+00:00 https://vulnerability.circl.lu/sighting/9ce82420-8d90-4fea-923f-171c5d5a71d5/export 2026-09-24T10:18:06.036044+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9ce82420-8d90-4fea-923f-171c5d5a71d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "exploited", "source": "https://t.me/CyberSecurityIL/9518", "content": "\ud83d\ude00 \u26d4 \u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea (\u05d7\u05d3\u05e9\u05d4) \u05d1-Check Point \u05e9\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\"\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd. \n\n\u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d9\u05d5\u05dd \u05ea\u05d9\u05e7\u05d5\u05df \u05dc-CVE-2026-93616, \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea (CVSS 9.8), \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\u05d1\u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8 \u05de\u05d0\u05e9\u05e8\u05d9\u05dd \u05db\u05d9 \u05d4\u05dd \u05d6\u05d9\u05d4\u05d5 \u05e0\u05d9\u05e6\u05d5\u05dc \u05e9\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05db\u05de\u05d4 \u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd. \n\n\u05d0\u05d2\u05d1, \u05d6\u05d5 \u05db\u05d1\u05e8 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d4\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d4\u05e8\u05d1\u05d9\u05e2\u05d9\u05ea \u05e9\u05d4\u05d7\u05d1\u05e8\u05d4 \u05de\u05ea\u05e7\u05e0\u05ea \u05d1\u05e9\u05d1\u05d5\u05e2\u05d9\u05d9\u05dd~ \u05d4\u05d0\u05d7\u05e8\u05d5\u05e0\u05d9\u05dd.\n\nhttps://t.me/CyberSecurityIL/9518", "creation_timestamp": "2026-09-24T05:00:05.129466Z"} 2026-09-24T05:00:05.129466+00:00 https://vulnerability.circl.lu/sighting/79fb8963-d19c-40eb-b3b3-a86f6180eb4c/export 2026-09-24T10:18:06.036120+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "79fb8963-d19c-40eb-b3b3-a86f6180eb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mwaepow7fm2n", "content": "CVE-2026-93616: Check Point Management Server Zero\n\n", "creation_timestamp": "2026-09-24T04:02:33.529234Z"} 2026-09-24T04:02:33.529234+00:00 https://vulnerability.circl.lu/sighting/24d5001a-7adc-4893-838f-cc8588de9d96/export 2026-09-24T10:18:06.036194+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "24d5001a-7adc-4893-838f-cc8588de9d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://gist.github.com/ichintu/2e9991c851b75a7aa99639fafeaa0cae", "content": "This threat intelligence briefing highlights four critical security developments from late September 2026:\n\n\u2022 **Brocade SANnav (CVE-2026-82370, 8.6):** An unauthenticated remote command injection flaw in versions <3.0.1a allows attackers to execute administrative CLI and container commands, risking Fibre Channel fabric manipulation.\n\u2022 **Check Point Zero-Days (CVE-2026-85102 & CVE-2026-93616, both 9.8):** Two actively exploited, pre-authentication vulnerabilities compromise the Spark firewall and management service. With functional exploits reverse-engineered in ~3 days, immediate patching, management console isolation, and proactive threat hunting are strongly advised.\n\u2022 **EthPress WordPress Plugin (CVE-2026-19125, 8.1):** A missing `return` statement in versions \u22642.3.5 causes an unauthenticated authentication bypass, allowing attackers to impersonate any wallet-linked user and achieve full site takeover.\n\u2022 **Loopjacking:** A newly documented attack vector (arXiv) that hijacks human-in-the-loop approval mechanisms, introducing novel risks to manual security workflows.\n\n**Overall:** The current landscape emphasizes urgent remediation of high-severity, unauthenticated flaws in critical infrastructure and web plugins, alongside emerging threats targeting procedural and human-centric security controls.", "creation_timestamp": "2026-09-24T04:01:56.901342Z"} 2026-09-24T04:01:56.901342+00:00 https://vulnerability.circl.lu/sighting/d68c0e3c-8284-4c5f-871f-5491a1a0e566/export 2026-09-24T10:18:06.036269+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d68c0e3c-8284-4c5f-871f-5491a1a0e566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwa6bbhjts23", "content": "\ud83d\udccc CVE-2026-93616 - A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Manageme... https://www.cyberhub.blog/cves/CVE-2026-93616", "creation_timestamp": "2026-09-24T02:07:07.509034Z"} 2026-09-24T02:07:07.509034+00:00 https://vulnerability.circl.lu/sighting/c17e345f-d466-4cae-8034-ffc57cb682fa/export 2026-09-24T10:18:06.036339+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c17e345f-d466-4cae-8034-ffc57cb682fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw7vj52bsn22", "content": "Check Point confirms active exploitation of CVE-2026-85102 and CVE-2026-93616 against Security Gateway and Management web services. Attackers used VPNs and proxies to hide origin. #CheckPoint #CISA #NCSC", "creation_timestamp": "2026-09-23T23:30:26.893000Z"} 2026-09-23T23:30:26.893000+00:00 https://vulnerability.circl.lu/sighting/58b4ad65-13ea-4bca-99b3-ad24f76b9577/export 2026-09-24T10:18:06.036408+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "58b4ad65-13ea-4bca-99b3-ad24f76b9577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mw7r7komqc2p", "content": "Check Point \u7ba1\u7406\u30b5\u30fc\u30d0\u30fc\u306b\u30bc\u30ed\u30c7\u30a4 \u8106\u5f31\u6027 CVE-2026-93616\u30017\u6708\u304b\u3089\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306b\u60aa\u7528 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9 #\u8106\u5f31\u6027", "creation_timestamp": "2026-09-23T22:13:33.132204Z"} 2026-09-23T22:13:33.132204+00:00 https://vulnerability.circl.lu/sighting/12d38869-b273-455b-9aab-4d9e5063a8db/export 2026-09-24T10:18:06.036483+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "12d38869-b273-455b-9aab-4d9e5063a8db", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4030e6b-7019-4980-998d-543cd2de712d", "content": "", "creation_timestamp": "2026-09-23T20:00:02.552184Z"} 2026-09-23T20:00:02.552184+00:00