<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 24 Sep 2026 11:18:20 +0000</lastBuildDate>
    <item>
      <title>dade843f-057c-4fa7-9828-fa848a340242</title>
      <link>https://vulnerability.circl.lu/sighting/dade843f-057c-4fa7-9828-fa848a340242/export</link>
      <description>{"uuid": "dade843f-057c-4fa7-9828-fa848a340242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw47lkmd6e2i", "content": "\ud83d\udd17 CVE : CVE-2026-28326", "creation_timestamp": "2026-09-22T12:20:07.464383Z"}</description>
      <content:encoded>{"uuid": "dade843f-057c-4fa7-9828-fa848a340242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw47lkmd6e2i", "content": "\ud83d\udd17 CVE : CVE-2026-28326", "creation_timestamp": "2026-09-22T12:20:07.464383Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dade843f-057c-4fa7-9828-fa848a340242/export</guid>
      <pubDate>Tue, 22 Sep 2026 12:20:07 +0000</pubDate>
    </item>
    <item>
      <title>d9659f66-4472-47a7-a6e5-d69081462662</title>
      <link>https://vulnerability.circl.lu/sighting/d9659f66-4472-47a7-a6e5-d69081462662/export</link>
      <description>{"uuid": "d9659f66-4472-47a7-a6e5-d69081462662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "Telegram/1-EB3sD2oC0U6c2SZrR9j-FHDJPzOjVG4szn66l4DgZ9Jg", "content": "", "creation_timestamp": "2026-09-22T07:00:04.382633Z"}</description>
      <content:encoded>{"uuid": "d9659f66-4472-47a7-a6e5-d69081462662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "Telegram/1-EB3sD2oC0U6c2SZrR9j-FHDJPzOjVG4szn66l4DgZ9Jg", "content": "", "creation_timestamp": "2026-09-22T07:00:04.382633Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d9659f66-4472-47a7-a6e5-d69081462662/export</guid>
      <pubDate>Tue, 22 Sep 2026 07:00:04 +0000</pubDate>
    </item>
    <item>
      <title>633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b</title>
      <link>https://vulnerability.circl.lu/sighting/633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b/export</link>
      <description>{"uuid": "633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/CyberDispatch/3010", "content": "A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.", "creation_timestamp": "2026-09-21T13:00:04.659633Z"}</description>
      <content:encoded>{"uuid": "633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/CyberDispatch/3010", "content": "A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\n\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.", "creation_timestamp": "2026-09-21T13:00:04.659633Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/633d15f4-0b6d-4ff0-b0c4-f65a4a2b737b/export</guid>
      <pubDate>Mon, 21 Sep 2026 13:00:04 +0000</pubDate>
    </item>
    <item>
      <title>de81faaa-bc2c-4dbb-9fa4-230e57b2abce</title>
      <link>https://vulnerability.circl.lu/sighting/de81faaa-bc2c-4dbb-9fa4-230e57b2abce/export</link>
      <description>{"uuid": "de81faaa-bc2c-4dbb-9fa4-230e57b2abce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117304453563682831", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T17:05:13.405804Z"}</description>
      <content:encoded>{"uuid": "de81faaa-bc2c-4dbb-9fa4-230e57b2abce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117304453563682831", "content": "\ud83d\udea8 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.\nCVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.\nRead: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T17:05:13.405804Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/de81faaa-bc2c-4dbb-9fa4-230e57b2abce/export</guid>
      <pubDate>Sun, 20 Sep 2026 17:05:13 +0000</pubDate>
    </item>
    <item>
      <title>f763ec09-1d0b-4de8-a9b8-f606d95aeba1</title>
      <link>https://vulnerability.circl.lu/sighting/f763ec09-1d0b-4de8-a9b8-f606d95aeba1/export</link>
      <description>{"uuid": "f763ec09-1d0b-4de8-a9b8-f606d95aeba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvxkgxpaan24", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE (CVE-2026-28326) #patchmanagement", "creation_timestamp": "2026-09-20T15:51:05.890210Z"}</description>
      <content:encoded>{"uuid": "f763ec09-1d0b-4de8-a9b8-f606d95aeba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvxkgxpaan24", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE (CVE-2026-28326) #patchmanagement", "creation_timestamp": "2026-09-20T15:51:05.890210Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f763ec09-1d0b-4de8-a9b8-f606d95aeba1/export</guid>
      <pubDate>Sun, 20 Sep 2026 15:51:05 +0000</pubDate>
    </item>
    <item>
      <title>7645ab4c-1b95-4fe2-a47b-5f2ef462928c</title>
      <link>https://vulnerability.circl.lu/sighting/7645ab4c-1b95-4fe2-a47b-5f2ef462928c/export</link>
      <description>{"uuid": "7645ab4c-1b95-4fe2-a47b-5f2ef462928c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28326", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvwze6xbxs2b", "content": "SolarWinds ARM through 2026.2: hard-coded key enables unauthenticated RCE. CVE-2026-28326, CVSS 8.8. Patch to ARM\u2026 https://0daynews.com/articles/2026-09-20-solarwinds-arm-cve-2026-28326-hardcoded-key-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2656", "creation_timestamp": "2026-09-20T10:45:19.044566Z"}</description>
      <content:encoded>{"uuid": "7645ab4c-1b95-4fe2-a47b-5f2ef462928c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28326", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvwze6xbxs2b", "content": "SolarWinds ARM through 2026.2: hard-coded key enables unauthenticated RCE. CVE-2026-28326, CVSS 8.8. Patch to ARM\u2026 https://0daynews.com/articles/2026-09-20-solarwinds-arm-cve-2026-28326-hardcoded-key-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2656", "creation_timestamp": "2026-09-20T10:45:19.044566Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7645ab4c-1b95-4fe2-a47b-5f2ef462928c/export</guid>
      <pubDate>Sun, 20 Sep 2026 10:45:19 +0000</pubDate>
    </item>
    <item>
      <title>b46fccd0-f765-4451-8ab9-128b4d5974e1</title>
      <link>https://vulnerability.circl.lu/sighting/b46fccd0-f765-4451-8ab9-128b4d5974e1/export</link>
      <description>{"uuid": "b46fccd0-f765-4451-8ab9-128b4d5974e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mvwle6x7lq25", "content": "SolarWinds Fixes Critical ARM Vulnerability Allowing Remote Code\u00a0Execution\n\nSolarWinds has released a security update for Access Rights Manager to fix CVE-2026-28326, a high-severity vulnerability that could enable unauthenticated remote code execution.", "creation_timestamp": "2026-09-20T06:34:46.455672Z"}</description>
      <content:encoded>{"uuid": "b46fccd0-f765-4451-8ab9-128b4d5974e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mvwle6x7lq25", "content": "SolarWinds Fixes Critical ARM Vulnerability Allowing Remote Code\u00a0Execution\n\nSolarWinds has released a security update for Access Rights Manager to fix CVE-2026-28326, a high-severity vulnerability that could enable unauthenticated remote code execution.", "creation_timestamp": "2026-09-20T06:34:46.455672Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b46fccd0-f765-4451-8ab9-128b4d5974e1/export</guid>
      <pubDate>Sun, 20 Sep 2026 06:34:46 +0000</pubDate>
    </item>
    <item>
      <title>73fa88c7-b75c-4b47-bc3d-51dff4b34c28</title>
      <link>https://vulnerability.circl.lu/sighting/73fa88c7-b75c-4b47-bc3d-51dff4b34c28/export</link>
      <description>{"uuid": "73fa88c7-b75c-4b47-bc3d-51dff4b34c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvw3jds2hu26", "content": "\ud83e\udd16 CVE-2026-28326 (CVSS 8.8): SolarWinds Access Rights Manager ships a hard-coded cryptographic key enabling unauthenticated RCE. Affects ARM 2026.2 and prior; patch released.\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:51:19.411662Z"}</description>
      <content:encoded>{"uuid": "73fa88c7-b75c-4b47-bc3d-51dff4b34c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvw3jds2hu26", "content": "\ud83e\udd16 CVE-2026-28326 (CVSS 8.8): SolarWinds Access Rights Manager ships a hard-coded cryptographic key enabling unauthenticated RCE. Affects ARM 2026.2 and prior; patch released.\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:51:19.411662Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/73fa88c7-b75c-4b47-bc3d-51dff4b34c28/export</guid>
      <pubDate>Sun, 20 Sep 2026 01:51:19 +0000</pubDate>
    </item>
    <item>
      <title>0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf</title>
      <link>https://vulnerability.circl.lu/sighting/0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf/export</link>
      <description>{"uuid": "0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/VulnerabilityNews/44501", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE\n\nSolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:00:04.742111Z"}</description>
      <content:encoded>{"uuid": "0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://t.me/VulnerabilityNews/44501", "content": "SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE\n\nSolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds\nhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "creation_timestamp": "2026-09-20T01:00:04.742111Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0438036e-f8e8-4ebf-a7b2-35ce9fc37eaf/export</guid>
      <pubDate>Sun, 20 Sep 2026 01:00:04 +0000</pubDate>
    </item>
    <item>
      <title>0175362c-de75-4414-9b08-d41f27e5bc56</title>
      <link>https://vulnerability.circl.lu/sighting/0175362c-de75-4414-9b08-d41f27e5bc56/export</link>
      <description>{"uuid": "0175362c-de75-4414-9b08-d41f27e5bc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "content": "SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds", "creation_timestamp": "2026-09-19T13:00:34.729603Z"}</description>
      <content:encoded>{"uuid": "0175362c-de75-4414-9b08-d41f27e5bc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28326", "type": "seen", "source": "https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html", "content": "SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.\n\nThe vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.\n\n\"SolarWinds", "creation_timestamp": "2026-09-19T13:00:34.729603Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0175362c-de75-4414-9b08-d41f27e5bc56/export</guid>
      <pubDate>Sat, 19 Sep 2026 13:00:34 +0000</pubDate>
    </item>
  </channel>
</rss>
