https://vulnerability.circl.lu/sightings/feed 2026-09-23T15:31:20.959902+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/697762a1-c573-444a-8f87-df55250cfbb4/export 2026-09-23T15:31:20.984814+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "697762a1-c573-444a-8f87-df55250cfbb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "Telegram/Avf0-ty-gzK-W0O3r2X0f219zY1oYI4raSYWAE6OavIWB6s", "content": "", "creation_timestamp": "2026-09-23T00:00:23.682720Z"} 2026-09-23T00:00:23.682720+00:00 https://vulnerability.circl.lu/sighting/0a9b71b5-80b8-47d7-991c-1ab3df2cd4f5/export 2026-09-23T15:31:20.986654+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0a9b71b5-80b8-47d7-991c-1ab3df2cd4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "Telegram/k5pttJYw8vdu79lqPVZW8OCnYgrfEU1O-B46GOmL7xwq_uA", "content": "", "creation_timestamp": "2026-09-23T00:00:23.462468Z"} 2026-09-23T00:00:23.462468+00:00 https://vulnerability.circl.lu/sighting/53a2be49-5938-4a1b-9bd5-1bd6bbe5ba44/export 2026-09-23T15:31:20.986783+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "53a2be49-5938-4a1b-9bd5-1bd6bbe5ba44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3mw4daoa7pc2n", "content": "D-Link warns of two major bugs with public POCs\n\nCVE-2026-86296: supportannouncement.us.dlink.com/security/pub...\n\nPOC: tzh00203.notion.site/D-Link-DIR-8...\n\nCVE-2026-93958: supportannouncement.us.dlink.com/security/pub...\n\nPOC: github.com/FoundTL/D-Li...", "creation_timestamp": "2026-09-22T13:25:36.137427Z"} 2026-09-22T13:25:36.137427+00:00 https://vulnerability.circl.lu/sighting/e4d0b7a5-950f-4ed7-81a6-9940ad82dd8b/export 2026-09-23T15:31:20.986890+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e4d0b7a5-950f-4ed7-81a6-9940ad82dd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "Telegram/k5pttJYw8vdu79lqPVZW8OCnYgrfEU1O-B46GOmL7xwq_uA", "content": "", "creation_timestamp": "2026-09-22T07:00:07.370460Z"} 2026-09-22T07:00:07.370460+00:00 https://vulnerability.circl.lu/sighting/58e8e1ba-4477-4c14-aed4-029757261fd0/export 2026-09-23T15:31:20.986992+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "58e8e1ba-4477-4c14-aed4-029757261fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "Telegram/Avf0-ty-gzK-W0O3r2X0f219zY1oYI4raSYWAE6OavIWB6s", "content": "", "creation_timestamp": "2026-09-22T07:00:07.093460Z"} 2026-09-22T07:00:07.093460+00:00 https://vulnerability.circl.lu/sighting/c87bffb2-d253-46e9-aac3-c55915204433/export 2026-09-23T15:31:20.987086+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c87bffb2-d253-46e9-aac3-c55915204433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102865", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-93958\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 13:16:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nD-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-21T00:00:04.662644Z"} 2026-09-21T00:00:04.662644+00:00 https://vulnerability.circl.lu/sighting/9b4678e7-469d-4706-adc4-9c3f0d1acb37/export 2026-09-23T15:31:20.987192+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9b4678e7-469d-4706-adc4-9c3f0d1acb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102865", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-93958\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 13:16:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nD-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T15:00:03.371628Z"} 2026-09-20T15:00:03.371628+00:00 https://vulnerability.circl.lu/sighting/e341a53d-3dd2-4fdd-8a9a-894b823bc401/export 2026-09-23T15:31:20.987289+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e341a53d-3dd2-4fdd-8a9a-894b823bc401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93958", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117301839393461308", "content": "CVE-2026-93958 (CRITICAL, CVSS 9.4): D-Link R95 BE9500_1.00.16 routers have an OS command injection flaw via the NTPServer argument in DHMAPI (/bin/ssi). Exploit is public, no patch yet \u2014 restrict access and monitor activity. https://radar.offseq.com/threat/cve-2026-93958-os-command-injection-in-d-link-r95-a15aa6eceda20938 #OffSeq #CVE202693958 #Vuln", "creation_timestamp": "2026-09-20T06:00:30.570894Z"} 2026-09-20T06:00:30.570894+00:00 https://vulnerability.circl.lu/sighting/9f670eaa-3314-4728-b6ec-fbb123d488fd/export 2026-09-23T15:31:20.987384+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9f670eaa-3314-4728-b6ec-fbb123d488fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93958", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvwjgsdhy32x", "content": "D-Link R95 routers (BE9500_1.00.16) face a CRITICAL OS command injection (CVE-2026-93958, CVSS 9.4). No patch \u2014 public exploit exists. Restrict device exposure & monitor for abuse. https://radar.offseq.com/threat/cve-2026-93958-os-command-injection-in-d-link-r95-a15aa6eceda20938 #OffSeq #CVE20269...", "creation_timestamp": "2026-09-20T06:00:27.964863Z"} 2026-09-20T06:00:27.964863+00:00 https://vulnerability.circl.lu/sighting/68a9b181-7496-400d-98f8-ebf72d58a84f/export 2026-09-23T15:31:20.987477+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "68a9b181-7496-400d-98f8-ebf72d58a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "https://gist.github.com/ichintu/cdeedf6435a1cfc4f0c1b67ededf1aba", "content": "This daily threat intelligence update highlights two critical vulnerabilities disclosed in September 2026:\n\u2022 **CVE-2026-93958 (Critical, 9.1):** A remote OS command injection flaw in D-Link R95 routers, exploitable via the DHMAPI component's `NTPServer` argument.\n\u2022 **CVE-2026-93991 (High, 8.3):** An authorization bypass in Argo Workflows (v4.1.0\u20134.1.3) that allows attackers to bypass namespace restrictions and expose sensitive archived workflow data using negated field selectors.\n\nBoth vulnerabilities feature publicly disclosed, functional exploits, necessitating immediate patching or mitigation.", "creation_timestamp": "2026-09-20T04:01:15.895579Z"} 2026-09-20T04:01:15.895579+00:00