<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 20:09:37 +0000</lastBuildDate>
    <item>
      <title>f3ffa993-8f24-4b63-b4ca-892205decfe1</title>
      <link>https://vulnerability.circl.lu/sighting/f3ffa993-8f24-4b63-b4ca-892205decfe1/export</link>
      <description>{"uuid": "f3ffa993-8f24-4b63-b4ca-892205decfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/3051", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nCISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw\n\n\u2014\n\nSummary:\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new Oracle vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that attackers are already exploiting it in real-world attacks. The bug, tracked as CVE-2025-61757, affects Oracle Identity Manager, part of Oracle Fusion Middleware. The flaw is rated as a \u201cmissing authentication for critical [\u2026]\nThe post CISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw appeared first on...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-22 12:50 | Author: Divya\n\n#cisa #vulnerabilities__exploits #issues\n\nhttps://gbhackers.com/cisa-issues-warning-as-hackers-target-oracle-identity-manager-rce-flaw/", "creation_timestamp": "2026-09-10T00:00:46.767606Z"}</description>
      <content:encoded>{"uuid": "f3ffa993-8f24-4b63-b4ca-892205decfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/3051", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nCISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw\n\n\u2014\n\nSummary:\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new Oracle vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that attackers are already exploiting it in real-world attacks. The bug, tracked as CVE-2025-61757, affects Oracle Identity Manager, part of Oracle Fusion Middleware. The flaw is rated as a \u201cmissing authentication for critical [\u2026]\nThe post CISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw appeared first on...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-22 12:50 | Author: Divya\n\n#cisa #vulnerabilities__exploits #issues\n\nhttps://gbhackers.com/cisa-issues-warning-as-hackers-target-oracle-identity-manager-rce-flaw/", "creation_timestamp": "2026-09-10T00:00:46.767606Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f3ffa993-8f24-4b63-b4ca-892205decfe1/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:46 +0000</pubDate>
    </item>
    <item>
      <title>37961a24-ba2f-437c-b371-8602e3488b3e</title>
      <link>https://vulnerability.circl.lu/sighting/37961a24-ba2f-437c-b371-8602e3488b3e/export</link>
      <description>{"uuid": "37961a24-ba2f-437c-b371-8602e3488b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2850", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nOracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)\n\n\u2014\n\nSummary:\nSearchlight Cyber today released a blog detailing CVE-2025-61757, a vulnerability they reported to Oracle. Oracle released a patch for the vulnerability as part of its October Critical Patch Update, which was released on October 21st.\n\n\u2014\n\nSource: SANS Internet Storm Center, InfoCON: green\nPublished: 2025-11-20 16:51\n\n#vulnerabilities__exploits #identity #oracle\n\nhttps://isc.sans.edu/diary/rss/32506", "creation_timestamp": "2026-09-10T00:00:46.247315Z"}</description>
      <content:encoded>{"uuid": "37961a24-ba2f-437c-b371-8602e3488b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2850", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nOracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)\n\n\u2014\n\nSummary:\nSearchlight Cyber today released a blog detailing CVE-2025-61757, a vulnerability they reported to Oracle. Oracle released a patch for the vulnerability as part of its October Critical Patch Update, which was released on October 21st.\n\n\u2014\n\nSource: SANS Internet Storm Center, InfoCON: green\nPublished: 2025-11-20 16:51\n\n#vulnerabilities__exploits #identity #oracle\n\nhttps://isc.sans.edu/diary/rss/32506", "creation_timestamp": "2026-09-10T00:00:46.247315Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/37961a24-ba2f-437c-b371-8602e3488b3e/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:46 +0000</pubDate>
    </item>
    <item>
      <title>2b4ea27e-53cb-47c5-91ad-9fd0e2315207</title>
      <link>https://vulnerability.circl.lu/sighting/2b4ea27e-53cb-47c5-91ad-9fd0e2315207/export</link>
      <description>{"uuid": "2b4ea27e-53cb-47c5-91ad-9fd0e2315207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2850", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nOracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)\n\n\u2014\n\nSummary:\nSearchlight Cyber today released a blog detailing CVE-2025-61757, a vulnerability they reported to Oracle. Oracle released a patch for the vulnerability as part of its October Critical Patch Update, which was released on October 21st.\n\n\u2014\n\nSource: SANS Internet Storm Center, InfoCON: green\nPublished: 2025-11-20 16:51\n\n#vulnerabilities__exploits #identity #oracle\n\nhttps://isc.sans.edu/diary/rss/32506", "creation_timestamp": "2026-09-09T05:00:09.125780Z"}</description>
      <content:encoded>{"uuid": "2b4ea27e-53cb-47c5-91ad-9fd0e2315207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2850", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nOracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)\n\n\u2014\n\nSummary:\nSearchlight Cyber today released a blog detailing CVE-2025-61757, a vulnerability they reported to Oracle. Oracle released a patch for the vulnerability as part of its October Critical Patch Update, which was released on October 21st.\n\n\u2014\n\nSource: SANS Internet Storm Center, InfoCON: green\nPublished: 2025-11-20 16:51\n\n#vulnerabilities__exploits #identity #oracle\n\nhttps://isc.sans.edu/diary/rss/32506", "creation_timestamp": "2026-09-09T05:00:09.125780Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2b4ea27e-53cb-47c5-91ad-9fd0e2315207/export</guid>
      <pubDate>Wed, 09 Sep 2026 05:00:09 +0000</pubDate>
    </item>
    <item>
      <title>131c9f36-432d-4103-8ebf-24720fff2d4e</title>
      <link>https://vulnerability.circl.lu/sighting/131c9f36-432d-4103-8ebf-24720fff2d4e/export</link>
      <description>{"uuid": "131c9f36-432d-4103-8ebf-24720fff2d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/3051", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nCISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw\n\n\u2014\n\nSummary:\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new Oracle vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that attackers are already exploiting it in real-world attacks. The bug, tracked as CVE-2025-61757, affects Oracle Identity Manager, part of Oracle Fusion Middleware. The flaw is rated as a \u201cmissing authentication for critical [\u2026]\nThe post CISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw appeared first on...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-22 12:50 | Author: Divya\n\n#cisa #vulnerabilities__exploits #issues\n\nhttps://gbhackers.com/cisa-issues-warning-as-hackers-target-oracle-identity-manager-rce-flaw/", "creation_timestamp": "2026-09-09T05:00:08.703098Z"}</description>
      <content:encoded>{"uuid": "131c9f36-432d-4103-8ebf-24720fff2d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/3051", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nCISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw\n\n\u2014\n\nSummary:\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new Oracle vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that attackers are already exploiting it in real-world attacks. The bug, tracked as CVE-2025-61757, affects Oracle Identity Manager, part of Oracle Fusion Middleware. The flaw is rated as a \u201cmissing authentication for critical [\u2026]\nThe post CISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw appeared first on...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-22 12:50 | Author: Divya\n\n#cisa #vulnerabilities__exploits #issues\n\nhttps://gbhackers.com/cisa-issues-warning-as-hackers-target-oracle-identity-manager-rce-flaw/", "creation_timestamp": "2026-09-09T05:00:08.703098Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/131c9f36-432d-4103-8ebf-24720fff2d4e/export</guid>
      <pubDate>Wed, 09 Sep 2026 05:00:08 +0000</pubDate>
    </item>
    <item>
      <title>e903701e-700c-4a3d-836c-120f5ee2225d</title>
      <link>https://vulnerability.circl.lu/sighting/e903701e-700c-4a3d-836c-120f5ee2225d/export</link>
      <description>{"uuid": "e903701e-700c-4a3d-836c-120f5ee2225d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "published-proof-of-concept", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-31T00:00:40.022560Z"}</description>
      <content:encoded>{"uuid": "e903701e-700c-4a3d-836c-120f5ee2225d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "published-proof-of-concept", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-31T00:00:40.022560Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e903701e-700c-4a3d-836c-120f5ee2225d/export</guid>
      <pubDate>Mon, 31 Aug 2026 00:00:40 +0000</pubDate>
    </item>
    <item>
      <title>7de07a3e-cff0-41dd-9e29-1aca823c81aa</title>
      <link>https://vulnerability.circl.lu/sighting/7de07a3e-cff0-41dd-9e29-1aca823c81aa/export</link>
      <description>{"uuid": "7de07a3e-cff0-41dd-9e29-1aca823c81aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-30T00:00:27.466389Z"}</description>
      <content:encoded>{"uuid": "7de07a3e-cff0-41dd-9e29-1aca823c81aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-30T00:00:27.466389Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7de07a3e-cff0-41dd-9e29-1aca823c81aa/export</guid>
      <pubDate>Sun, 30 Aug 2026 00:00:27 +0000</pubDate>
    </item>
    <item>
      <title>09f7c91a-b47d-4b36-9882-eeb6be2413c6</title>
      <link>https://vulnerability.circl.lu/sighting/09f7c91a-b47d-4b36-9882-eeb6be2413c6/export</link>
      <description>{"uuid": "09f7c91a-b47d-4b36-9882-eeb6be2413c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-29T23:00:19.129132Z"}</description>
      <content:encoded>{"uuid": "09f7c91a-b47d-4b36-9882-eeb6be2413c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-29T23:00:19.129132Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/09f7c91a-b47d-4b36-9882-eeb6be2413c6/export</guid>
      <pubDate>Sat, 29 Aug 2026 23:00:19 +0000</pubDate>
    </item>
    <item>
      <title>34302d40-efb5-4d58-8cf2-9bd642443ada</title>
      <link>https://vulnerability.circl.lu/sighting/34302d40-efb5-4d58-8cf2-9bd642443ada/export</link>
      <description>{"uuid": "34302d40-efb5-4d58-8cf2-9bd642443ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/CyberDispatch/18", "content": "CVE-2025-61757 is a pre-authentication RCE vulnerability in Oracle Identity Manager, discovered and disclosed by Searchlight Cyber analysts Adam Kues and Shubham Shahflaw.", "creation_timestamp": "2026-08-21T00:00:19.996670Z"}</description>
      <content:encoded>{"uuid": "34302d40-efb5-4d58-8cf2-9bd642443ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/CyberDispatch/18", "content": "CVE-2025-61757 is a pre-authentication RCE vulnerability in Oracle Identity Manager, discovered and disclosed by Searchlight Cyber analysts Adam Kues and Shubham Shahflaw.", "creation_timestamp": "2026-08-21T00:00:19.996670Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/34302d40-efb5-4d58-8cf2-9bd642443ada/export</guid>
      <pubDate>Fri, 21 Aug 2026 00:00:19 +0000</pubDate>
    </item>
    <item>
      <title>88dd9bbf-8f1b-4df9-899e-128347244f80</title>
      <link>https://vulnerability.circl.lu/sighting/88dd9bbf-8f1b-4df9-899e-128347244f80/export</link>
      <description>{"uuid": "88dd9bbf-8f1b-4df9-899e-128347244f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "exploited", "source": "https://t.me/CyberDispatch/8", "content": "CISA warns Oracle Identity Manager flaw (CVE-2025-61757) is under active attack.\n\nHackers can run code without login by adding ?WSDL or ;.wadl to URLs \u2014 a tiny trick that opens locked systems.\n\nExploited since August. Patch by Dec 12.", "creation_timestamp": "2026-08-21T00:00:19.957229Z"}</description>
      <content:encoded>{"uuid": "88dd9bbf-8f1b-4df9-899e-128347244f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "exploited", "source": "https://t.me/CyberDispatch/8", "content": "CISA warns Oracle Identity Manager flaw (CVE-2025-61757) is under active attack.\n\nHackers can run code without login by adding ?WSDL or ;.wadl to URLs \u2014 a tiny trick that opens locked systems.\n\nExploited since August. Patch by Dec 12.", "creation_timestamp": "2026-08-21T00:00:19.957229Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/88dd9bbf-8f1b-4df9-899e-128347244f80/export</guid>
      <pubDate>Fri, 21 Aug 2026 00:00:19 +0000</pubDate>
    </item>
    <item>
      <title>965f7afb-374b-4487-a3c7-cff5e6c1c49f</title>
      <link>https://vulnerability.circl.lu/sighting/965f7afb-374b-4487-a3c7-cff5e6c1c49f/export</link>
      <description>{"uuid": "965f7afb-374b-4487-a3c7-cff5e6c1c49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/CyberDispatch/8", "content": "CISA warns Oracle Identity Manager flaw (CVE-2025-61757) is under active attack.\n\nHackers can run code without login by adding ?WSDL or ;.wadl to URLs \u2014 a tiny trick that opens locked systems.\n\nExploited since August. Patch by Dec 12.", "creation_timestamp": "2026-08-20T00:00:27.805362Z"}</description>
      <content:encoded>{"uuid": "965f7afb-374b-4487-a3c7-cff5e6c1c49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/CyberDispatch/8", "content": "CISA warns Oracle Identity Manager flaw (CVE-2025-61757) is under active attack.\n\nHackers can run code without login by adding ?WSDL or ;.wadl to URLs \u2014 a tiny trick that opens locked systems.\n\nExploited since August. Patch by Dec 12.", "creation_timestamp": "2026-08-20T00:00:27.805362Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/965f7afb-374b-4487-a3c7-cff5e6c1c49f/export</guid>
      <pubDate>Thu, 20 Aug 2026 00:00:27 +0000</pubDate>
    </item>
  </channel>
</rss>
