https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 21 Sep 2026 05:14:12 +0000 https://vulnerability.circl.lu/sighting/9133edeb-a01c-4ec2-9359-80db7e403393/export {"uuid": "9133edeb-a01c-4ec2-9359-80db7e403393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102771", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32996\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a suce0155\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 14:58:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T00:00:07.273347Z"} {"uuid": "9133edeb-a01c-4ec2-9359-80db7e403393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102771", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32996\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a suce0155\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 14:58:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T00:00:07.273347Z"} https://vulnerability.circl.lu/sighting/9133edeb-a01c-4ec2-9359-80db7e403393/export Sun, 20 Sep 2026 00:00:07 +0000 https://vulnerability.circl.lu/sighting/53724773-4948-40d6-ba9a-826ed7792a0f/export {"uuid": "53724773-4948-40d6-ba9a-826ed7792a0f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fbe0bf49-cd97-455c-89f8-8cc99b2ea6b7", "content": "", "creation_timestamp": "2026-09-19T21:00:33.764456Z"} {"uuid": "53724773-4948-40d6-ba9a-826ed7792a0f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fbe0bf49-cd97-455c-89f8-8cc99b2ea6b7", "content": "", "creation_timestamp": "2026-09-19T21:00:33.764456Z"} https://vulnerability.circl.lu/sighting/53724773-4948-40d6-ba9a-826ed7792a0f/export Sat, 19 Sep 2026 21:00:33 +0000 https://vulnerability.circl.lu/sighting/ee61cf7a-815c-4f10-a00a-dcba35a3d12d/export {"uuid": "ee61cf7a-815c-4f10-a00a-dcba35a3d12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102771", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32996\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a suce0155\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 14:58:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T17:00:04.803045Z"} {"uuid": "ee61cf7a-815c-4f10-a00a-dcba35a3d12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102771", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32996\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a suce0155\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C#\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 14:58:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T17:00:04.803045Z"} https://vulnerability.circl.lu/sighting/ee61cf7a-815c-4f10-a00a-dcba35a3d12d/export Sat, 19 Sep 2026 17:00:04 +0000 https://vulnerability.circl.lu/sighting/38df7ee8-1cf6-4516-a952-9597be92f7c0/export {"uuid": "38df7ee8-1cf6-4516-a952-9597be92f7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "seen", "source": "https://gist.github.com/ichintu/5841827a4cd9286d1b1bda016e23c9f0", "content": "This daily cyber threat intelligence digest highlights four key developments: (1) identity visibility remains foundational to modern security, despite increasing complexities in cloud and multicloud environments; (2) significant technical and operational hurdles continue to complicate out-of-band patching of compromised Operational Technology (OT) devices; (3) researchers leveraged Anthropic\u2019s Claude Opus 5 to chain vulnerabilities and breach OpenAI employee accounts (CVE-2026-32882, Sept 19, 2026); and (4) a critical RCE vulnerability (CVE-2026-93985, Sept 19, 2026) in OpenPanel\u2019s JavaScript runtime enables sandbox escapes for arbitrary code execution. Together, these updates underscore emerging threats in identity management, OT security, AI-assisted exploitation, and critical software flaws.", "creation_timestamp": "2026-09-19T16:01:30.134203Z"} {"uuid": "38df7ee8-1cf6-4516-a952-9597be92f7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32882", "type": "seen", "source": "https://gist.github.com/ichintu/5841827a4cd9286d1b1bda016e23c9f0", "content": "This daily cyber threat intelligence digest highlights four key developments: (1) identity visibility remains foundational to modern security, despite increasing complexities in cloud and multicloud environments; (2) significant technical and operational hurdles continue to complicate out-of-band patching of compromised Operational Technology (OT) devices; (3) researchers leveraged Anthropic\u2019s Claude Opus 5 to chain vulnerabilities and breach OpenAI employee accounts (CVE-2026-32882, Sept 19, 2026); and (4) a critical RCE vulnerability (CVE-2026-93985, Sept 19, 2026) in OpenPanel\u2019s JavaScript runtime enables sandbox escapes for arbitrary code execution. Together, these updates underscore emerging threats in identity management, OT security, AI-assisted exploitation, and critical software flaws.", "creation_timestamp": "2026-09-19T16:01:30.134203Z"} https://vulnerability.circl.lu/sighting/38df7ee8-1cf6-4516-a952-9597be92f7c0/export Sat, 19 Sep 2026 16:01:30 +0000 https://vulnerability.circl.lu/sighting/038fb766-9962-4c85-a667-d2d665855e0a/export {"uuid": "038fb766-9962-4c85-a667-d2d665855e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32194", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/43646", "content": "Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers\n\nA crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet.\n\nXBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and\nhttps://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html", "creation_timestamp": "2026-09-19T00:00:43.392804Z"} {"uuid": "038fb766-9962-4c85-a667-d2d665855e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32194", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/43646", "content": "Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers\n\nA crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet.\n\nXBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and\nhttps://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html", "creation_timestamp": "2026-09-19T00:00:43.392804Z"} https://vulnerability.circl.lu/sighting/038fb766-9962-4c85-a667-d2d665855e0a/export Sat, 19 Sep 2026 00:00:43 +0000 https://vulnerability.circl.lu/sighting/a9f3ec90-1489-4451-9007-a85362eb6de5/export {"uuid": "a9f3ec90-1489-4451-9007-a85362eb6de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44341", "content": "Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites\n\nTracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions.\nThe post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek.\nhttps://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/", "creation_timestamp": "2026-09-19T00:00:37.104860Z"} {"uuid": "a9f3ec90-1489-4451-9007-a85362eb6de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44341", "content": "Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites\n\nTracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions.\nThe post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek.\nhttps://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/", "creation_timestamp": "2026-09-19T00:00:37.104860Z"} https://vulnerability.circl.lu/sighting/a9f3ec90-1489-4451-9007-a85362eb6de5/export Sat, 19 Sep 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/4f413462-49a8-4cba-afdf-089a0efe6554/export {"uuid": "4f413462-49a8-4cba-afdf-089a0efe6554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44305", "content": "Critical Elementor Pro flaw exploited to take over WordPress sites\n\nA recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-elementor-pro-flaw-exploited-to-take-over-wordpress-sites/", "creation_timestamp": "2026-09-19T00:00:36.290866Z"} {"uuid": "4f413462-49a8-4cba-afdf-089a0efe6554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44305", "content": "Critical Elementor Pro flaw exploited to take over WordPress sites\n\nA recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-elementor-pro-flaw-exploited-to-take-over-wordpress-sites/", "creation_timestamp": "2026-09-19T00:00:36.290866Z"} https://vulnerability.circl.lu/sighting/4f413462-49a8-4cba-afdf-089a0efe6554/export Sat, 19 Sep 2026 00:00:36 +0000 https://vulnerability.circl.lu/sighting/bfceb75c-f5ff-403f-8c2e-ce30b165640f/export {"uuid": "bfceb75c-f5ff-403f-8c2e-ce30b165640f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32604", "type": "published-proof-of-concept", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-19T00:00:26.352028Z"} {"uuid": "bfceb75c-f5ff-403f-8c2e-ce30b165640f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32604", "type": "published-proof-of-concept", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-19T00:00:26.352028Z"} https://vulnerability.circl.lu/sighting/bfceb75c-f5ff-403f-8c2e-ce30b165640f/export Sat, 19 Sep 2026 00:00:26 +0000 https://vulnerability.circl.lu/sighting/83beb65b-9a36-4089-bba7-7b945941cad1/export {"uuid": "83beb65b-9a36-4089-bba7-7b945941cad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-19T00:00:14.252914Z"} {"uuid": "83beb65b-9a36-4089-bba7-7b945941cad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32996", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-19T00:00:14.252914Z"} https://vulnerability.circl.lu/sighting/83beb65b-9a36-4089-bba7-7b945941cad1/export Sat, 19 Sep 2026 00:00:14 +0000 https://vulnerability.circl.lu/sighting/d33f4336-a9cb-4120-b24f-eda155bbc181/export {"uuid": "d33f4336-a9cb-4120-b24f-eda155bbc181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32604", "type": "seen", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-18T12:00:08.076406Z"} {"uuid": "d33f4336-a9cb-4120-b24f-eda155bbc181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32604", "type": "seen", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-18T12:00:08.076406Z"} https://vulnerability.circl.lu/sighting/d33f4336-a9cb-4120-b24f-eda155bbc181/export Fri, 18 Sep 2026 12:00:08 +0000