https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 20 Sep 2026 20:53:41 +0000 https://vulnerability.circl.lu/sighting/8f1dce12-e10b-4c23-acf7-91f5f1b46ff4/export {"uuid": "8f1dce12-e10b-4c23-acf7-91f5f1b46ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-18)", "content": "", "creation_timestamp": "2026-09-19T10:00:08.307697Z"} {"uuid": "8f1dce12-e10b-4c23-acf7-91f5f1b46ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-18)", "content": "", "creation_timestamp": "2026-09-19T10:00:08.307697Z"} https://vulnerability.circl.lu/sighting/8f1dce12-e10b-4c23-acf7-91f5f1b46ff4/export Sat, 19 Sep 2026 10:00:08 +0000 https://vulnerability.circl.lu/sighting/6bcd53d8-03ed-4820-bed4-cd66e7b30b44/export {"uuid": "6bcd53d8-03ed-4820-bed4-cd66e7b30b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42950", "content": "Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks\n\nOracle has released mitigations for CVE-2026-35273, but it has not said whether it\u2019s a zero-day exploited in ShinyHunters attacks.\nThe post Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/oracle-addresses-peoplesoft-vulnerability-amid-reports-of-zero-day-attacks/", "creation_timestamp": "2026-09-19T00:00:48.664935Z"} {"uuid": "6bcd53d8-03ed-4820-bed4-cd66e7b30b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42950", "content": "Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks\n\nOracle has released mitigations for CVE-2026-35273, but it has not said whether it\u2019s a zero-day exploited in ShinyHunters attacks.\nThe post Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/oracle-addresses-peoplesoft-vulnerability-amid-reports-of-zero-day-attacks/", "creation_timestamp": "2026-09-19T00:00:48.664935Z"} https://vulnerability.circl.lu/sighting/6bcd53d8-03ed-4820-bed4-cd66e7b30b44/export Sat, 19 Sep 2026 00:00:48 +0000 https://vulnerability.circl.lu/sighting/0d311c34-097c-4fdf-80fe-90f0a6e12c7a/export {"uuid": "0d311c34-097c-4fdf-80fe-90f0a6e12c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://t.me/VulnerabilityNews/42977", "content": "Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters\n\nOracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability\u2019s in-the-wild exploitation.\nThe post Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters appeared first on SecurityWeek.\nhttps://www.securityweek.com/google-confirms-exploitation-of-oracle-peoplesoft-zero-day-by-shinyhunters/", "creation_timestamp": "2026-09-19T00:00:48.559059Z"} {"uuid": "0d311c34-097c-4fdf-80fe-90f0a6e12c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://t.me/VulnerabilityNews/42977", "content": "Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters\n\nOracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability\u2019s in-the-wild exploitation.\nThe post Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters appeared first on SecurityWeek.\nhttps://www.securityweek.com/google-confirms-exploitation-of-oracle-peoplesoft-zero-day-by-shinyhunters/", "creation_timestamp": "2026-09-19T00:00:48.559059Z"} https://vulnerability.circl.lu/sighting/0d311c34-097c-4fdf-80fe-90f0a6e12c7a/export Sat, 19 Sep 2026 00:00:48 +0000 https://vulnerability.circl.lu/sighting/d249c760-c4d2-4dd6-8db3-86a1aad2255c/export {"uuid": "d249c760-c4d2-4dd6-8db3-86a1aad2255c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42978", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, updating BOD 22-01. BOD 26-04 reinforces the importance of the KEV catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s Known Exploited Vulnerabilities (KEV) catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV catalog? Submit for potential addition: KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/06/12/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:48.500292Z"} {"uuid": "d249c760-c4d2-4dd6-8db3-86a1aad2255c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42978", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, updating BOD 22-01. BOD 26-04 reinforces the importance of the KEV catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s Known Exploited Vulnerabilities (KEV) catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV catalog? Submit for potential addition: KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/06/12/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:48.500292Z"} https://vulnerability.circl.lu/sighting/d249c760-c4d2-4dd6-8db3-86a1aad2255c/export Sat, 19 Sep 2026 00:00:48 +0000 https://vulnerability.circl.lu/sighting/f1436a1a-4623-4f38-99f4-870a9f12b5d0/export {"uuid": "f1436a1a-4623-4f38-99f4-870a9f12b5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42942", "content": "Oracle mitigates PeopleSoft zero-day exploited in data theft attacks\n\nOracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as\u00a0CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. [...]\nhttps://www.bleepingcomputer.com/news/security/oracle-mitigates-peoplesoft-zero-day-exploited-in-data-theft-attacks/", "creation_timestamp": "2026-09-19T00:00:47.173324Z"} {"uuid": "f1436a1a-4623-4f38-99f4-870a9f12b5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42942", "content": "Oracle mitigates PeopleSoft zero-day exploited in data theft attacks\n\nOracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as\u00a0CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. [...]\nhttps://www.bleepingcomputer.com/news/security/oracle-mitigates-peoplesoft-zero-day-exploited-in-data-theft-attacks/", "creation_timestamp": "2026-09-19T00:00:47.173324Z"} https://vulnerability.circl.lu/sighting/f1436a1a-4623-4f38-99f4-870a9f12b5d0/export Sat, 19 Sep 2026 00:00:47 +0000 https://vulnerability.circl.lu/sighting/23fba183-347e-4fb7-97af-9ae6400e4465/export {"uuid": "23fba183-347e-4fb7-97af-9ae6400e4465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42711", "content": "Hackers exploit FortiClient EMS flaw to push infostealer malware\n\nHackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-forticlient-ems-flaw-to-push-infostealer-malware/", "creation_timestamp": "2026-09-19T00:00:46.874640Z"} {"uuid": "23fba183-347e-4fb7-97af-9ae6400e4465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42711", "content": "Hackers exploit FortiClient EMS flaw to push infostealer malware\n\nHackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-forticlient-ems-flaw-to-push-infostealer-malware/", "creation_timestamp": "2026-09-19T00:00:46.874640Z"} https://vulnerability.circl.lu/sighting/23fba183-347e-4fb7-97af-9ae6400e4465/export Sat, 19 Sep 2026 00:00:46 +0000 https://vulnerability.circl.lu/sighting/0d57c758-97b7-4bd2-93c4-a01b43843968/export {"uuid": "0d57c758-97b7-4bd2-93c4-a01b43843968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35196", "type": "published-proof-of-concept", "source": "Telegram/YI-zyM6R2SXtebw0qilHuE_bC29iP0vy8Cn8zxh5ugjaAgA", "content": "", "creation_timestamp": "2026-09-19T00:00:24.372687Z"} {"uuid": "0d57c758-97b7-4bd2-93c4-a01b43843968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35196", "type": "published-proof-of-concept", "source": "Telegram/YI-zyM6R2SXtebw0qilHuE_bC29iP0vy8Cn8zxh5ugjaAgA", "content": "", "creation_timestamp": "2026-09-19T00:00:24.372687Z"} https://vulnerability.circl.lu/sighting/0d57c758-97b7-4bd2-93c4-a01b43843968/export Sat, 19 Sep 2026 00:00:24 +0000 https://vulnerability.circl.lu/sighting/ddc36f22-463b-45a6-947a-11173894ced7/export {"uuid": "ddc36f22-463b-45a6-947a-11173894ced7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://t.me/VulnerabilityNews/42711", "content": "Hackers exploit FortiClient EMS flaw to push infostealer malware\n\nHackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-forticlient-ems-flaw-to-push-infostealer-malware/", "creation_timestamp": "2026-09-18T05:00:05.927562Z"} {"uuid": "ddc36f22-463b-45a6-947a-11173894ced7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35616", "type": "seen", "source": "https://t.me/VulnerabilityNews/42711", "content": "Hackers exploit FortiClient EMS flaw to push infostealer malware\n\nHackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-forticlient-ems-flaw-to-push-infostealer-malware/", "creation_timestamp": "2026-09-18T05:00:05.927562Z"} https://vulnerability.circl.lu/sighting/ddc36f22-463b-45a6-947a-11173894ced7/export Fri, 18 Sep 2026 05:00:05 +0000 https://vulnerability.circl.lu/sighting/c3bc01d0-6555-488c-87e1-6ef18b6ee61e/export {"uuid": "c3bc01d0-6555-488c-87e1-6ef18b6ee61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://t.me/VulnerabilityNews/42942", "content": "Oracle mitigates PeopleSoft zero-day exploited in data theft attacks\n\nOracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as\u00a0CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. [...]\nhttps://www.bleepingcomputer.com/news/security/oracle-mitigates-peoplesoft-zero-day-exploited-in-data-theft-attacks/", "creation_timestamp": "2026-09-18T05:00:05.684506Z"} {"uuid": "c3bc01d0-6555-488c-87e1-6ef18b6ee61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "seen", "source": "https://t.me/VulnerabilityNews/42942", "content": "Oracle mitigates PeopleSoft zero-day exploited in data theft attacks\n\nOracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as\u00a0CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. [...]\nhttps://www.bleepingcomputer.com/news/security/oracle-mitigates-peoplesoft-zero-day-exploited-in-data-theft-attacks/", "creation_timestamp": "2026-09-18T05:00:05.684506Z"} https://vulnerability.circl.lu/sighting/c3bc01d0-6555-488c-87e1-6ef18b6ee61e/export Fri, 18 Sep 2026 05:00:05 +0000 https://vulnerability.circl.lu/sighting/c97283d0-c756-4621-99e2-ebe4b480486a/export {"uuid": "c97283d0-c756-4621-99e2-ebe4b480486a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42950", "content": "Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks\n\nOracle has released mitigations for CVE-2026-35273, but it has not said whether it\u2019s a zero-day exploited in ShinyHunters attacks.\nThe post Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/oracle-addresses-peoplesoft-vulnerability-amid-reports-of-zero-day-attacks/", "creation_timestamp": "2026-09-18T05:00:04.752304Z"} {"uuid": "c97283d0-c756-4621-99e2-ebe4b480486a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42950", "content": "Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks\n\nOracle has released mitigations for CVE-2026-35273, but it has not said whether it\u2019s a zero-day exploited in ShinyHunters attacks.\nThe post Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/oracle-addresses-peoplesoft-vulnerability-amid-reports-of-zero-day-attacks/", "creation_timestamp": "2026-09-18T05:00:04.752304Z"} https://vulnerability.circl.lu/sighting/c97283d0-c756-4621-99e2-ebe4b480486a/export Fri, 18 Sep 2026 05:00:04 +0000