https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 26 Sep 2026 03:19:43 +0000 https://vulnerability.circl.lu/sighting/6fef19b2-614a-4bb7-8cbe-82afbd7381f6/export {"uuid": "6fef19b2-614a-4bb7-8cbe-82afbd7381f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14913", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mw77fo4apb2e", "content": "Zoho ManageEngine OpManager/Firewall Analyzer 12.8.669\u4ee5\u524d\u306f\u3001\u30eb\u30fc\u30eb\u7ba1\u7406\u691c\u7d22\u30ec\u30dd\u30fc\u30c8\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u6a5f\u5bc6\u60c5\u5831\u3078\u306e\u30a2\u2026\nCVE-2026-14913 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-23T16:54:48.179980Z"} {"uuid": "6fef19b2-614a-4bb7-8cbe-82afbd7381f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14913", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mw77fo4apb2e", "content": "Zoho ManageEngine OpManager/Firewall Analyzer 12.8.669\u4ee5\u524d\u306f\u3001\u30eb\u30fc\u30eb\u7ba1\u7406\u691c\u7d22\u30ec\u30dd\u30fc\u30c8\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u6a5f\u5bc6\u60c5\u5831\u3078\u306e\u30a2\u2026\nCVE-2026-14913 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-23T16:54:48.179980Z"} https://vulnerability.circl.lu/sighting/6fef19b2-614a-4bb7-8cbe-82afbd7381f6/export Wed, 23 Sep 2026 16:54:48 +0000 https://vulnerability.circl.lu/sighting/dd6bf2f9-3bd6-4687-9bfd-baa2cf9e508b/export {"uuid": "dd6bf2f9-3bd6-4687-9bfd-baa2cf9e508b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14913", "type": "seen", "source": "https://gist.github.com/ichintu/2e6f8ce728dea0dd9cf4a6348df184a8", "content": "**September 22\u201323, 2026 Cyber Threat Intelligence Summary**\n\n**\ud83d\udd34 Critical Vulnerabilities & Patches**\nUrgent updates required for **WordPress** (AV26-952) and **SolarWinds** (AV26-950) due to actively exploited, unauthenticated RCEs. **HPE** (AV26-951) patches DoS and multiple flaws in ALE and Telco Orchestrator. Other notable advisories include a cPanel root-escalation bug, ManageEngine SQLi (CVE-2026-14913), Tauri v2 CSP bypass (CVE-2026-95626), Chrome 154 (108 patches, 11 critical), and an unpatched Ubuntu kernel flaw (CVE-2026-80521) enabling container escape to host root.\n\n**\ud83e\udda0 Emerging Threats & Malware**\n- **CLOSEDQUORUM:** Windows malware using AI model voting for C2 to steal credentials and crypto wallets.\n- **MemTensor Compromise:** Legitimate npm/PyPI packages hijacked to distribute the cross-platform `sckit` credential stealer.\n- **Android MDM Spyware:** Targeting logistics companies via corporate mobile device management systems.\n\n**\ud83d\udd17 Supply Chain & Operational Risks**\n- **GitHub App Keys:** Private keys never expire, creating persistent takeover risks. GitGuardian identified 474 active leaked keys, many with admin/write privileges.\n- **MSP Relationships:** Heavily trust-based MSP contracts are flagged as a major supply chain vector. Experts recommend enforcing dedicated admin accounts, phishing-resistant MFA, full audit logging, and strict offboarding/breach protocols.\n\n**\ud83d\udcf1 Platform Updates**\n- **Android 17:** Enables Certificate Transparency, which will break trust in custom/internal CAs and require PKI adjustments.\n\n**\u2705 Key Actions:** Immediately patch affected software, revoke unused GitHub App keys, audit MSP security controls, and prepare for Android 17 CA changes.", "creation_timestamp": "2026-09-23T16:01:57.007519Z"} {"uuid": "dd6bf2f9-3bd6-4687-9bfd-baa2cf9e508b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14913", "type": "seen", "source": "https://gist.github.com/ichintu/2e6f8ce728dea0dd9cf4a6348df184a8", "content": "**September 22\u201323, 2026 Cyber Threat Intelligence Summary**\n\n**\ud83d\udd34 Critical Vulnerabilities & Patches**\nUrgent updates required for **WordPress** (AV26-952) and **SolarWinds** (AV26-950) due to actively exploited, unauthenticated RCEs. **HPE** (AV26-951) patches DoS and multiple flaws in ALE and Telco Orchestrator. Other notable advisories include a cPanel root-escalation bug, ManageEngine SQLi (CVE-2026-14913), Tauri v2 CSP bypass (CVE-2026-95626), Chrome 154 (108 patches, 11 critical), and an unpatched Ubuntu kernel flaw (CVE-2026-80521) enabling container escape to host root.\n\n**\ud83e\udda0 Emerging Threats & Malware**\n- **CLOSEDQUORUM:** Windows malware using AI model voting for C2 to steal credentials and crypto wallets.\n- **MemTensor Compromise:** Legitimate npm/PyPI packages hijacked to distribute the cross-platform `sckit` credential stealer.\n- **Android MDM Spyware:** Targeting logistics companies via corporate mobile device management systems.\n\n**\ud83d\udd17 Supply Chain & Operational Risks**\n- **GitHub App Keys:** Private keys never expire, creating persistent takeover risks. GitGuardian identified 474 active leaked keys, many with admin/write privileges.\n- **MSP Relationships:** Heavily trust-based MSP contracts are flagged as a major supply chain vector. Experts recommend enforcing dedicated admin accounts, phishing-resistant MFA, full audit logging, and strict offboarding/breach protocols.\n\n**\ud83d\udcf1 Platform Updates**\n- **Android 17:** Enables Certificate Transparency, which will break trust in custom/internal CAs and require PKI adjustments.\n\n**\u2705 Key Actions:** Immediately patch affected software, revoke unused GitHub App keys, audit MSP security controls, and prepare for Android 17 CA changes.", "creation_timestamp": "2026-09-23T16:01:57.007519Z"} https://vulnerability.circl.lu/sighting/dd6bf2f9-3bd6-4687-9bfd-baa2cf9e508b/export Wed, 23 Sep 2026 16:01:57 +0000