<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T14:53:11.292743+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3199152b-aa0e-470e-a8a0-35732df30395/export</id>
    <title>3199152b-aa0e-470e-a8a0-35732df30395</title>
    <updated>2026-10-10T14:53:11.317804+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3199152b-aa0e-470e-a8a0-35732df30395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94510", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.272322Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3199152b-aa0e-470e-a8a0-35732df30395/export"/>
    <published>2026-10-09T14:47:00.272322+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4d3035d3-0769-47b9-836a-ac7d3a2388c6/export</id>
    <title>4d3035d3-0769-47b9-836a-ac7d3a2388c6</title>
    <updated>2026-10-10T14:53:11.320546+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4d3035d3-0769-47b9-836a-ac7d3a2388c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94510", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxft7ks5oz2m", "content": "Critical auth bypass (CVE-2026-94510) impacts Microsoft Bookings. Attackers can escalate privileges remotely \u2014 apply the official fix now: https://radar.offseq.com/threat/cve-2026-94510-cwe-639-authorization-bypass-through-user-controlled-key-in-microsoft-microsoft-bookings-0e362c50ebe161b6 #OffS...", "creation_timestamp": "2026-10-09T01:30:29.196300Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4d3035d3-0769-47b9-836a-ac7d3a2388c6/export"/>
    <published>2026-10-09T01:30:29.196300+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/99b724f8-9de1-45c6-90d2-a121fc51f188/export</id>
    <title>99b724f8-9de1-45c6-90d2-a121fc51f188</title>
    <updated>2026-10-10T14:53:11.320703+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "99b724f8-9de1-45c6-90d2-a121fc51f188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94510", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117408361757042134", "content": "CVE-2026-94510 (CRITICAL, CVSS 9.9) in Microsoft Bookings enables remote privilege escalation via authorization bypass (CWE-639). Apply the official Microsoft patch now: https://radar.offseq.com/threat/cve-2026-94510-cwe-639-authorization-bypass-through-user-controlled-key-in-microsoft-microsoft-bookings-0e362c50ebe161b6 #OffSeq #Microsoft #Vuln #CVE #Infosec", "creation_timestamp": "2026-10-09T01:30:27.052958Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/99b724f8-9de1-45c6-90d2-a121fc51f188/export"/>
    <published>2026-10-09T01:30:27.052958+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/849e0eaf-8fb3-42f2-a6c0-19f3fa68ef4f/export</id>
    <title>849e0eaf-8fb3-42f2-a6c0-19f3fa68ef4f</title>
    <updated>2026-10-10T14:53:11.320810+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "849e0eaf-8fb3-42f2-a6c0-19f3fa68ef4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94510", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfopdgkpc2z", "content": "\ud83d\udea8 CVE-2026-94510 \u2014 CVSS 9.9 CRITICAL\n\nAuthorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to e...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94510\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:48.753593Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/849e0eaf-8fb3-42f2-a6c0-19f3fa68ef4f/export"/>
    <published>2026-10-09T00:09:48.753593+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9830fae8-5ebc-4ba6-ba1a-4f93c1bf9fac/export</id>
    <title>9830fae8-5ebc-4ba6-ba1a-4f93c1bf9fac</title>
    <updated>2026-10-10T14:53:11.320909+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9830fae8-5ebc-4ba6-ba1a-4f93c1bf9fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94510", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxflwfed4d2n", "content": "CVE-2026-94510 - microsoft bookings\nMicrosoft Bookings contains a flaw that lets a user who should not have permission trick the system into thinking they are authorized. This can allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftbookings #microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:20:05.533173Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9830fae8-5ebc-4ba6-ba1a-4f93c1bf9fac/export"/>
    <published>2026-10-08T23:20:05.533173+00:00</published>
  </entry>
</feed>
