<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 00:00:21 +0000</lastBuildDate>
    <item>
      <title>f8104a4e-630b-4fd8-99f6-4bc47fb67f9b</title>
      <link>https://vulnerability.circl.lu/sighting/f8104a4e-630b-4fd8-99f6-4bc47fb67f9b/export</link>
      <description>{"uuid": "f8104a4e-630b-4fd8-99f6-4bc47fb67f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://gist.github.com/ichintu/e77ad87ce7c2605a3295aca992dad2d4", "content": "CVE-2026-100896 is a critical (CVSS 9.9) OS command injection vulnerability affecting the TOTOLINK N150RT router (firmware 3.4.0-B20201030). It targets the web management interface via the `wlanif` parameter, enabling remote command execution. A public exploit has already been released.", "creation_timestamp": "2026-09-28T04:00:27.000000Z"}</description>
      <content:encoded>{"uuid": "f8104a4e-630b-4fd8-99f6-4bc47fb67f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://gist.github.com/ichintu/e77ad87ce7c2605a3295aca992dad2d4", "content": "CVE-2026-100896 is a critical (CVSS 9.9) OS command injection vulnerability affecting the TOTOLINK N150RT router (firmware 3.4.0-B20201030). It targets the web management interface via the `wlanif` parameter, enabling remote command execution. A public exploit has already been released.", "creation_timestamp": "2026-09-28T04:00:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f8104a4e-630b-4fd8-99f6-4bc47fb67f9b/export</guid>
      <pubDate>Mon, 28 Sep 2026 04:00:27 +0000</pubDate>
    </item>
    <item>
      <title>3d68eca7-9b24-4da2-bd1c-076ff331cfc6</title>
      <link>https://vulnerability.circl.lu/sighting/3d68eca7-9b24-4da2-bd1c-076ff331cfc6/export</link>
      <description>{"uuid": "3d68eca7-9b24-4da2-bd1c-076ff331cfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwkd4ek2bt22", "content": "TOTOLINK N150RT v3.4.0-B20201030 faces CRITICAL OS command injection (CVE-2026-100896, CVSS 9.4) \u26a0\ufe0f. Public exploit exists \u2014 restrict mgmt interface &amp;amp; check for updates. No patch yet. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq ...", "creation_timestamp": "2026-09-28T03:00:29.092995Z"}</description>
      <content:encoded>{"uuid": "3d68eca7-9b24-4da2-bd1c-076ff331cfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwkd4ek2bt22", "content": "TOTOLINK N150RT v3.4.0-B20201030 faces CRITICAL OS command injection (CVE-2026-100896, CVSS 9.4) \u26a0\ufe0f. Public exploit exists \u2014 restrict mgmt interface &amp;amp; check for updates. No patch yet. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq ...", "creation_timestamp": "2026-09-28T03:00:29.092995Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3d68eca7-9b24-4da2-bd1c-076ff331cfc6/export</guid>
      <pubDate>Mon, 28 Sep 2026 03:00:29 +0000</pubDate>
    </item>
    <item>
      <title>cb4817db-a90d-4f29-b08b-9a95c9175617</title>
      <link>https://vulnerability.circl.lu/sighting/cb4817db-a90d-4f29-b08b-9a95c9175617/export</link>
      <description>{"uuid": "cb4817db-a90d-4f29-b08b-9a95c9175617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117346430231490086", "content": "TOTOLINK N150RT v3.4.0-B20201030 is vulnerable (CVE-2026-100896, CVSS 9.4): CRITICAL OS command injection in Web UI. Public exploit out, no patch yet. Restrict mgmt access &amp;amp; monitor vendor updates. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq #CVE2026100896 #infosec #router", "creation_timestamp": "2026-09-28T03:00:26.896488Z"}</description>
      <content:encoded>{"uuid": "cb4817db-a90d-4f29-b08b-9a95c9175617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117346430231490086", "content": "TOTOLINK N150RT v3.4.0-B20201030 is vulnerable (CVE-2026-100896, CVSS 9.4): CRITICAL OS command injection in Web UI. Public exploit out, no patch yet. Restrict mgmt access &amp;amp; monitor vendor updates. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq #CVE2026100896 #infosec #router", "creation_timestamp": "2026-09-28T03:00:26.896488Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cb4817db-a90d-4f29-b08b-9a95c9175617/export</guid>
      <pubDate>Mon, 28 Sep 2026 03:00:26 +0000</pubDate>
    </item>
    <item>
      <title>98c61de7-3fd0-409d-bcbe-0b05827959f7</title>
      <link>https://vulnerability.circl.lu/sighting/98c61de7-3fd0-409d-bcbe-0b05827959f7/export</link>
      <description>{"uuid": "98c61de7-3fd0-409d-bcbe-0b05827959f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkbh6shlk27", "content": "\ud83d\udd34 CVE-2026-100896 - Critical (9.9)\n\nA weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the fu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100896/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T02:30:47.217858Z"}</description>
      <content:encoded>{"uuid": "98c61de7-3fd0-409d-bcbe-0b05827959f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkbh6shlk27", "content": "\ud83d\udd34 CVE-2026-100896 - Critical (9.9)\n\nA weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the fu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100896/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T02:30:47.217858Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/98c61de7-3fd0-409d-bcbe-0b05827959f7/export</guid>
      <pubDate>Mon, 28 Sep 2026 02:30:47 +0000</pubDate>
    </item>
    <item>
      <title>ed767aad-b933-4939-80f5-34727123e851</title>
      <link>https://vulnerability.circl.lu/sighting/ed767aad-b933-4939-80f5-34727123e851/export</link>
      <description>{"uuid": "ed767aad-b933-4939-80f5-34727123e851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkau5upbx26", "content": "CVE-2026-100896 - n150rt\nThe web admin page on TOTOLINK N150RT routers can be tricked into running system commands. An attacker who accesses the router\u2019s management interface could execute unwanted actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#n150rt #totolink #CVE #infosec", "creation_timestamp": "2026-09-28T02:20:05.543370Z"}</description>
      <content:encoded>{"uuid": "ed767aad-b933-4939-80f5-34727123e851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkau5upbx26", "content": "CVE-2026-100896 - n150rt\nThe web admin page on TOTOLINK N150RT routers can be tricked into running system commands. An attacker who accesses the router\u2019s management interface could execute unwanted actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#n150rt #totolink #CVE #infosec", "creation_timestamp": "2026-09-28T02:20:05.543370Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ed767aad-b933-4939-80f5-34727123e851/export</guid>
      <pubDate>Mon, 28 Sep 2026 02:20:05 +0000</pubDate>
    </item>
    <item>
      <title>5bd038d5-426d-4734-ba9c-1f57ae29b6ec</title>
      <link>https://vulnerability.circl.lu/sighting/5bd038d5-426d-4734-ba9c-1f57ae29b6ec/export</link>
      <description>{"uuid": "5bd038d5-426d-4734-ba9c-1f57ae29b6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117342124693395134", "content": "There is a new vulnerability with elevated criticality in TOTOLINK N150RT (CVE-2026-100896) https://vuldb.com/vuln/410846", "creation_timestamp": "2026-09-27T08:45:29.305177Z"}</description>
      <content:encoded>{"uuid": "5bd038d5-426d-4734-ba9c-1f57ae29b6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117342124693395134", "content": "There is a new vulnerability with elevated criticality in TOTOLINK N150RT (CVE-2026-100896) https://vuldb.com/vuln/410846", "creation_timestamp": "2026-09-27T08:45:29.305177Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5bd038d5-426d-4734-ba9c-1f57ae29b6ec/export</guid>
      <pubDate>Sun, 27 Sep 2026 08:45:29 +0000</pubDate>
    </item>
  </channel>
</rss>
