<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 04:00:01 +0000</lastBuildDate>
    <item>
      <title>a7a1a182-83b1-443f-921e-e00241e63f5d</title>
      <link>https://vulnerability.circl.lu/sighting/a7a1a182-83b1-443f-921e-e00241e63f5d/export</link>
      <description>{"uuid": "a7a1a182-83b1-443f-921e-e00241e63f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mweo2wpcpn2f", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "creation_timestamp": "2026-09-25T21:00:33.188534Z"}</description>
      <content:encoded>{"uuid": "a7a1a182-83b1-443f-921e-e00241e63f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mweo2wpcpn2f", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "creation_timestamp": "2026-09-25T21:00:33.188534Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a7a1a182-83b1-443f-921e-e00241e63f5d/export</guid>
      <pubDate>Fri, 25 Sep 2026 21:00:33 +0000</pubDate>
    </item>
    <item>
      <title>b4b51997-5f9f-4a00-86d6-198bf91a5baa</title>
      <link>https://vulnerability.circl.lu/sighting/b4b51997-5f9f-4a00-86d6-198bf91a5baa/export</link>
      <description>{"uuid": "b4b51997-5f9f-4a00-86d6-198bf91a5baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwedz2vgsk2n", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "creation_timestamp": "2026-09-25T18:00:33.177090Z"}</description>
      <content:encoded>{"uuid": "b4b51997-5f9f-4a00-86d6-198bf91a5baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwedz2vgsk2n", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "creation_timestamp": "2026-09-25T18:00:33.177090Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b4b51997-5f9f-4a00-86d6-198bf91a5baa/export</guid>
      <pubDate>Fri, 25 Sep 2026 18:00:33 +0000</pubDate>
    </item>
    <item>
      <title>73dc4fb4-9a52-4ab1-ae97-5bffb55a889c</title>
      <link>https://vulnerability.circl.lu/sighting/73dc4fb4-9a52-4ab1-ae97-5bffb55a889c/export</link>
      <description>{"uuid": "73dc4fb4-9a52-4ab1-ae97-5bffb55a889c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwdwlvqyha2z", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "creation_timestamp": "2026-09-25T14:00:32.556869Z"}</description>
      <content:encoded>{"uuid": "73dc4fb4-9a52-4ab1-ae97-5bffb55a889c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwdwlvqyha2z", "content": "SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted (CVE-2026-28324 CVSS 9.8, CVE-2026-28325 CVSS 8.8). Fixed in 2026.2.3. Source: SecurityWeek. #CyberSecurity", "creation_timestamp": "2026-09-25T14:00:32.556869Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/73dc4fb4-9a52-4ab1-ae97-5bffb55a889c/export</guid>
      <pubDate>Fri, 25 Sep 2026 14:00:32 +0000</pubDate>
    </item>
    <item>
      <title>b0de029c-ee76-4a28-915e-f6be32e83f68</title>
      <link>https://vulnerability.circl.lu/sighting/b0de029c-ee76-4a28-915e-f6be32e83f68/export</link>
      <description>{"uuid": "b0de029c-ee76-4a28-915e-f6be32e83f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwckyplk4g2h", "content": "SolarWinds patches two unauth RCE flaws in Observability Self-Hosted: CVE-2026-28324 (CVSS 9.8) and CVE-2026-28325\u2026 https://0daynews.com/articles/2026-09-24-solarwinds-observability-cve-2026-28324-28325-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-3489", "creation_timestamp": "2026-09-25T01:00:21.202070Z"}</description>
      <content:encoded>{"uuid": "b0de029c-ee76-4a28-915e-f6be32e83f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwckyplk4g2h", "content": "SolarWinds patches two unauth RCE flaws in Observability Self-Hosted: CVE-2026-28324 (CVSS 9.8) and CVE-2026-28325\u2026 https://0daynews.com/articles/2026-09-24-solarwinds-observability-cve-2026-28324-28325-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-3489", "creation_timestamp": "2026-09-25T01:00:21.202070Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b0de029c-ee76-4a28-915e-f6be32e83f68/export</guid>
      <pubDate>Fri, 25 Sep 2026 01:00:21 +0000</pubDate>
    </item>
    <item>
      <title>3b01656a-faea-40c9-9412-629dc2644d0a</title>
      <link>https://vulnerability.circl.lu/sighting/3b01656a-faea-40c9-9412-629dc2644d0a/export</link>
      <description>{"uuid": "3b01656a-faea-40c9-9412-629dc2644d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://t.me/VulnerabilityNews/44588", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "creation_timestamp": "2026-09-24T23:00:53.000000Z"}</description>
      <content:encoded>{"uuid": "3b01656a-faea-40c9-9412-629dc2644d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://t.me/VulnerabilityNews/44588", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "creation_timestamp": "2026-09-24T23:00:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3b01656a-faea-40c9-9412-629dc2644d0a/export</guid>
      <pubDate>Thu, 24 Sep 2026 23:00:53 +0000</pubDate>
    </item>
    <item>
      <title>0ecf6140-05d3-418a-b99b-2762c0891bb6</title>
      <link>https://vulnerability.circl.lu/sighting/0ecf6140-05d3-418a-b99b-2762c0891bb6/export</link>
      <description>{"uuid": "0ecf6140-05d3-418a-b99b-2762c0891bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://t.me/information_security_channel/55973", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted (https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-24T21:05:08.000000Z"}</description>
      <content:encoded>{"uuid": "0ecf6140-05d3-418a-b99b-2762c0891bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://t.me/information_security_channel/55973", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted (https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-24T21:05:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0ecf6140-05d3-418a-b99b-2762c0891bb6/export</guid>
      <pubDate>Thu, 24 Sep 2026 21:05:08 +0000</pubDate>
    </item>
    <item>
      <title>76024b27-0ee7-4d79-9388-2e28c7a0e259</title>
      <link>https://vulnerability.circl.lu/sighting/76024b27-0ee7-4d79-9388-2e28c7a0e259/export</link>
      <description>{"uuid": "76024b27-0ee7-4d79-9388-2e28c7a0e259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwbcrgsix62r", "content": "SolarWinds patched two critical RCE flaws in Observability Self-Hosted, including CVE-2026-28324 and CVE-2026-28325. No exploitation in the wild has been reported. #SolarWinds #RCE #CVE202628324", "creation_timestamp": "2026-09-24T13:00:24.178190Z"}</description>
      <content:encoded>{"uuid": "76024b27-0ee7-4d79-9388-2e28c7a0e259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwbcrgsix62r", "content": "SolarWinds patched two critical RCE flaws in Observability Self-Hosted, including CVE-2026-28324 and CVE-2026-28325. No exploitation in the wild has been reported. #SolarWinds #RCE #CVE202628324", "creation_timestamp": "2026-09-24T13:00:24.178190Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/76024b27-0ee7-4d79-9388-2e28c7a0e259/export</guid>
      <pubDate>Thu, 24 Sep 2026 13:00:24 +0000</pubDate>
    </item>
    <item>
      <title>01eaea7d-44b2-4a39-a08d-31c55db60eb1</title>
      <link>https://vulnerability.circl.lu/sighting/01eaea7d-44b2-4a39-a08d-31c55db60eb1/export</link>
      <description>{"uuid": "01eaea7d-44b2-4a39-a08d-31c55db60eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "content": "The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\n\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.", "creation_timestamp": "2026-09-24T08:40:40.000000Z"}</description>
      <content:encoded>{"uuid": "01eaea7d-44b2-4a39-a08d-31c55db60eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "content": "The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\n\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.", "creation_timestamp": "2026-09-24T08:40:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/01eaea7d-44b2-4a39-a08d-31c55db60eb1/export</guid>
      <pubDate>Thu, 24 Sep 2026 08:40:40 +0000</pubDate>
    </item>
    <item>
      <title>477478f3-0954-4a99-9665-29c59c2b7460</title>
      <link>https://vulnerability.circl.lu/sighting/477478f3-0954-4a99-9665-29c59c2b7460/export</link>
      <description>{"uuid": "477478f3-0954-4a99-9665-29c59c2b7460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-950", "content": "", "creation_timestamp": "2026-09-23T16:15:30.407106Z"}</description>
      <content:encoded>{"uuid": "477478f3-0954-4a99-9665-29c59c2b7460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-950", "content": "", "creation_timestamp": "2026-09-23T16:15:30.407106Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/477478f3-0954-4a99-9665-29c59c2b7460/export</guid>
      <pubDate>Wed, 23 Sep 2026 16:15:30 +0000</pubDate>
    </item>
    <item>
      <title>dec37d34-7956-43c4-bfd3-86776cf9071f</title>
      <link>https://vulnerability.circl.lu/sighting/dec37d34-7956-43c4-bfd3-86776cf9071f/export</link>
      <description>{"uuid": "dec37d34-7956-43c4-bfd3-86776cf9071f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23", "content": "~Cybergcca~\nWordPress CVE-2026-87902 is exploited in the wild; SolarWinds and HPE also require updates.\n-\nIOCs: CVE-2026-87902, CVE-2026-28325, CVE-2026-28324\n-\n#CVE202687902 #ThreatIntel #WordPress", "creation_timestamp": "2026-09-23T16:04:46.243638Z"}</description>
      <content:encoded>{"uuid": "dec37d34-7956-43c4-bfd3-86776cf9071f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28325", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23", "content": "~Cybergcca~\nWordPress CVE-2026-87902 is exploited in the wild; SolarWinds and HPE also require updates.\n-\nIOCs: CVE-2026-87902, CVE-2026-28325, CVE-2026-28324\n-\n#CVE202687902 #ThreatIntel #WordPress", "creation_timestamp": "2026-09-23T16:04:46.243638Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dec37d34-7956-43c4-bfd3-86776cf9071f/export</guid>
      <pubDate>Wed, 23 Sep 2026 16:04:46 +0000</pubDate>
    </item>
  </channel>
</rss>
