<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 02:18:39 +0000</lastBuildDate>
    <item>
      <title>6279865b-f7e6-4408-867d-597a0e05fe5b</title>
      <link>https://vulnerability.circl.lu/sighting/6279865b-f7e6-4408-867d-597a0e05fe5b/export</link>
      <description>{"uuid": "6279865b-f7e6-4408-867d-597a0e05fe5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75166", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117261455745586059", "content": "CVE-2026-75166: Insecure permission in MBS-Solutions X-Serie Gateway (V6_00_05) lets low-priv user run tcpdump as root, leading to RCE via -z flag. CVSS: N/A. Patch unknown\u2014assume vulnerable. Restrict access &amp;amp; monitor now. https://www.valtersit.com/cve/CVE-2026-75166/ #CVE #infos", "creation_timestamp": "2026-09-13T02:50:20.632138Z"}</description>
      <content:encoded>{"uuid": "6279865b-f7e6-4408-867d-597a0e05fe5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75166", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117261455745586059", "content": "CVE-2026-75166: Insecure permission in MBS-Solutions X-Serie Gateway (V6_00_05) lets low-priv user run tcpdump as root, leading to RCE via -z flag. CVSS: N/A. Patch unknown\u2014assume vulnerable. Restrict access &amp;amp; monitor now. https://www.valtersit.com/cve/CVE-2026-75166/ #CVE #infos", "creation_timestamp": "2026-09-13T02:50:20.632138Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6279865b-f7e6-4408-867d-597a0e05fe5b/export</guid>
      <pubDate>Sun, 13 Sep 2026 02:50:20 +0000</pubDate>
    </item>
    <item>
      <title>ff53ceff-7615-4225-8ab0-78ac8cd414df</title>
      <link>https://vulnerability.circl.lu/sighting/ff53ceff-7615-4225-8ab0-78ac8cd414df/export</link>
      <description>{"uuid": "ff53ceff-7615-4225-8ab0-78ac8cd414df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75166", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvelkffegq2t", "content": "CVE-2026-75166: Insecure permission in MBS-Solutions X-Serie Gateway (V6_00_05) lets low-priv user run tcpdump as root, leading to RCE via -z flag. CVSS: N/A. Patch unknown\u2014assume vulnerable. Restrict access &amp;amp; monitor now. https://www.valtersit.com/cve/CVE-2026-75166/ #CVE #infos", "creation_timestamp": "2026-09-13T02:50:19.370818Z"}</description>
      <content:encoded>{"uuid": "ff53ceff-7615-4225-8ab0-78ac8cd414df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75166", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvelkffegq2t", "content": "CVE-2026-75166: Insecure permission in MBS-Solutions X-Serie Gateway (V6_00_05) lets low-priv user run tcpdump as root, leading to RCE via -z flag. CVSS: N/A. Patch unknown\u2014assume vulnerable. Restrict access &amp;amp; monitor now. https://www.valtersit.com/cve/CVE-2026-75166/ #CVE #infos", "creation_timestamp": "2026-09-13T02:50:19.370818Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ff53ceff-7615-4225-8ab0-78ac8cd414df/export</guid>
      <pubDate>Sun, 13 Sep 2026 02:50:19 +0000</pubDate>
    </item>
    <item>
      <title>6b752724-4c7f-4812-93f3-94dfb55ab041</title>
      <link>https://vulnerability.circl.lu/sighting/6b752724-4c7f-4812-93f3-94dfb55ab041/export</link>
      <description>{"uuid": "6b752724-4c7f-4812-93f3-94dfb55ab041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75162", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117254612752271368", "content": "CVE-2026-75162: Info disclosure in MBS-Solutions X-Serie Gateway. Any low-priv user can grab OPC-UA creds in cleartext via /cgi-bin/wwwugw.cgi. CVSS N/A, patch unknown. Assume exposed\u2014restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75162/ #CVE #infosec #OTsec", "creation_timestamp": "2026-09-11T21:50:04.024070Z"}</description>
      <content:encoded>{"uuid": "6b752724-4c7f-4812-93f3-94dfb55ab041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75162", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117254612752271368", "content": "CVE-2026-75162: Info disclosure in MBS-Solutions X-Serie Gateway. Any low-priv user can grab OPC-UA creds in cleartext via /cgi-bin/wwwugw.cgi. CVSS N/A, patch unknown. Assume exposed\u2014restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75162/ #CVE #infosec #OTsec", "creation_timestamp": "2026-09-11T21:50:04.024070Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6b752724-4c7f-4812-93f3-94dfb55ab041/export</guid>
      <pubDate>Fri, 11 Sep 2026 21:50:04 +0000</pubDate>
    </item>
    <item>
      <title>b80d9ad1-47d3-435b-8e77-1edad5205a40</title>
      <link>https://vulnerability.circl.lu/sighting/b80d9ad1-47d3-435b-8e77-1edad5205a40/export</link>
      <description>{"uuid": "b80d9ad1-47d3-435b-8e77-1edad5205a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75162", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvbkcjpdpc2o", "content": "CVE-2026-75162: Info disclosure in MBS-Solutions X-Serie Gateway. Any low-priv user can grab OPC-UA creds in cleartext via /cgi-bin/wwwugw.cgi. CVSS N/A, patch unknown. Assume exposed\u2014restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75162/ #CVE #infosec #OTsec", "creation_timestamp": "2026-09-11T21:50:04.019960Z"}</description>
      <content:encoded>{"uuid": "b80d9ad1-47d3-435b-8e77-1edad5205a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75162", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvbkcjpdpc2o", "content": "CVE-2026-75162: Info disclosure in MBS-Solutions X-Serie Gateway. Any low-priv user can grab OPC-UA creds in cleartext via /cgi-bin/wwwugw.cgi. CVSS N/A, patch unknown. Assume exposed\u2014restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75162/ #CVE #infosec #OTsec", "creation_timestamp": "2026-09-11T21:50:04.019960Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b80d9ad1-47d3-435b-8e77-1edad5205a40/export</guid>
      <pubDate>Fri, 11 Sep 2026 21:50:04 +0000</pubDate>
    </item>
    <item>
      <title>d89ef979-95d3-4763-b7a6-edefcf04dd9a</title>
      <link>https://vulnerability.circl.lu/sighting/d89ef979-95d3-4763-b7a6-edefcf04dd9a/export</link>
      <description>{"uuid": "d89ef979-95d3-4763-b7a6-edefcf04dd9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75165", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv7mbpjtzc2g", "content": "CVE-2026-75165: Authenticated RCE risk via hidden diagnostics in MBS-Solutions X-Serie Gateway (V6_00_05). Low-privileged users can trigger ugw-ping/traceroute to leak sensitive data. CVSS: N/A, unpatched. Restrict access &amp;amp; monitor logs now. Details: https://www.valtersit.com/cve", "creation_timestamp": "2026-09-11T03:20:02.908197Z"}</description>
      <content:encoded>{"uuid": "d89ef979-95d3-4763-b7a6-edefcf04dd9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75165", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv7mbpjtzc2g", "content": "CVE-2026-75165: Authenticated RCE risk via hidden diagnostics in MBS-Solutions X-Serie Gateway (V6_00_05). Low-privileged users can trigger ugw-ping/traceroute to leak sensitive data. CVSS: N/A, unpatched. Restrict access &amp;amp; monitor logs now. Details: https://www.valtersit.com/cve", "creation_timestamp": "2026-09-11T03:20:02.908197Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d89ef979-95d3-4763-b7a6-edefcf04dd9a/export</guid>
      <pubDate>Fri, 11 Sep 2026 03:20:02 +0000</pubDate>
    </item>
    <item>
      <title>f5936403-00b4-4acf-82bf-08bcdfa6f3b7</title>
      <link>https://vulnerability.circl.lu/sighting/f5936403-00b4-4acf-82bf-08bcdfa6f3b7/export</link>
      <description>{"uuid": "f5936403-00b4-4acf-82bf-08bcdfa6f3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75165", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117250209706950186", "content": "CVE-2026-75165: Authenticated RCE risk via hidden diagnostics in MBS-Solutions X-Serie Gateway (V6_00_05). Low-privileged users can trigger ugw-ping/traceroute to leak sensitive data. CVSS: N/A, unpatched. Restrict access &amp;amp; monitor logs now. Details: https://www.valtersit.com/cve", "creation_timestamp": "2026-09-11T03:10:49.433023Z"}</description>
      <content:encoded>{"uuid": "f5936403-00b4-4acf-82bf-08bcdfa6f3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75165", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117250209706950186", "content": "CVE-2026-75165: Authenticated RCE risk via hidden diagnostics in MBS-Solutions X-Serie Gateway (V6_00_05). Low-privileged users can trigger ugw-ping/traceroute to leak sensitive data. CVSS: N/A, unpatched. Restrict access &amp;amp; monitor logs now. Details: https://www.valtersit.com/cve", "creation_timestamp": "2026-09-11T03:10:49.433023Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f5936403-00b4-4acf-82bf-08bcdfa6f3b7/export</guid>
      <pubDate>Fri, 11 Sep 2026 03:10:49 +0000</pubDate>
    </item>
    <item>
      <title>d1788446-f064-4454-9a0e-6e08c7fb2271</title>
      <link>https://vulnerability.circl.lu/sighting/d1788446-f064-4454-9a0e-6e08c7fb2271/export</link>
      <description>{"uuid": "d1788446-f064-4454-9a0e-6e08c7fb2271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxejp2lmt2v", "content": "CVE-2026-75160: Critical flaw in X-Serie Gateway Firmware V6_00_05 allows remote privilege escalation via /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. CVSS 9.1. Unpatched\u2014assume exposure. Isolate devices, restrict access, monitor logs now. Details: https://www.valtersit.com/", "creation_timestamp": "2026-09-07T20:40:04.291042Z"}</description>
      <content:encoded>{"uuid": "d1788446-f064-4454-9a0e-6e08c7fb2271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxejp2lmt2v", "content": "CVE-2026-75160: Critical flaw in X-Serie Gateway Firmware V6_00_05 allows remote privilege escalation via /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. CVSS 9.1. Unpatched\u2014assume exposure. Isolate devices, restrict access, monitor logs now. Details: https://www.valtersit.com/", "creation_timestamp": "2026-09-07T20:40:04.291042Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d1788446-f064-4454-9a0e-6e08c7fb2271/export</guid>
      <pubDate>Mon, 07 Sep 2026 20:40:04 +0000</pubDate>
    </item>
    <item>
      <title>5b8c0aa3-290d-4781-a6c1-6195f522f2c9</title>
      <link>https://vulnerability.circl.lu/sighting/5b8c0aa3-290d-4781-a6c1-6195f522f2c9/export</link>
      <description>{"uuid": "5b8c0aa3-290d-4781-a6c1-6195f522f2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117231688279141803", "content": "CVE-2026-75160: Critical flaw in X-Serie Gateway Firmware V6_00_05 allows remote privilege escalation via /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. CVSS 9.1. Unpatched\u2014assume exposure. Isolate devices, restrict access, monitor logs now. Details: https://www.valtersit.com/", "creation_timestamp": "2026-09-07T20:40:03.722324Z"}</description>
      <content:encoded>{"uuid": "5b8c0aa3-290d-4781-a6c1-6195f522f2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117231688279141803", "content": "CVE-2026-75160: Critical flaw in X-Serie Gateway Firmware V6_00_05 allows remote privilege escalation via /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. CVSS 9.1. Unpatched\u2014assume exposure. Isolate devices, restrict access, monitor logs now. Details: https://www.valtersit.com/", "creation_timestamp": "2026-09-07T20:40:03.722324Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5b8c0aa3-290d-4781-a6c1-6195f522f2c9/export</guid>
      <pubDate>Mon, 07 Sep 2026 20:40:03 +0000</pubDate>
    </item>
    <item>
      <title>db5f2f47-5d28-426c-8b3d-da8b033ccbd3</title>
      <link>https://vulnerability.circl.lu/sighting/db5f2f47-5d28-426c-8b3d-da8b033ccbd3/export</link>
      <description>{"uuid": "db5f2f47-5d28-426c-8b3d-da8b033ccbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqz6ajsf52r", "content": "\ud83d\udd34 CVE-2026-75160 - Critical (9.1)\n\nAn issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75160/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T08:00:49.982206Z"}</description>
      <content:encoded>{"uuid": "db5f2f47-5d28-426c-8b3d-da8b033ccbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqz6ajsf52r", "content": "\ud83d\udd34 CVE-2026-75160 - Critical (9.1)\n\nAn issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75160/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T08:00:49.982206Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/db5f2f47-5d28-426c-8b3d-da8b033ccbd3/export</guid>
      <pubDate>Sat, 05 Sep 2026 08:00:49 +0000</pubDate>
    </item>
    <item>
      <title>817ee659-5913-493c-885b-84991759218f</title>
      <link>https://vulnerability.circl.lu/sighting/817ee659-5913-493c-885b-84991759218f/export</link>
      <description>{"uuid": "817ee659-5913-493c-885b-84991759218f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupxyz4iyg2j", "content": "\ud83d\udea8 CVE-2026-75160 \u2014 CVSS 9.1 CRITICAL\n\nAn issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75160\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T22:07:20.153387Z"}</description>
      <content:encoded>{"uuid": "817ee659-5913-493c-885b-84991759218f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75160", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupxyz4iyg2j", "content": "\ud83d\udea8 CVE-2026-75160 \u2014 CVSS 9.1 CRITICAL\n\nAn issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75160\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T22:07:20.153387Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/817ee659-5913-493c-885b-84991759218f/export</guid>
      <pubDate>Fri, 04 Sep 2026 22:07:20 +0000</pubDate>
    </item>
  </channel>
</rss>
