<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 23 Jun 2026 02:35:50 +0000</lastBuildDate>
    <item>
      <title>20e72e36-1614-4a98-938a-95363ff38c25</title>
      <link>https://vulnerability.circl.lu/sighting/20e72e36-1614-4a98-938a-95363ff38c25/export</link>
      <description>{"uuid": "20e72e36-1614-4a98-938a-95363ff38c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspu322d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:43.917180Z"}</description>
      <content:encoded>{"uuid": "20e72e36-1614-4a98-938a-95363ff38c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspu322d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:43.917180Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/20e72e36-1614-4a98-938a-95363ff38c25/export</guid>
      <pubDate>Thu, 11 Jun 2026 15:33:43 +0000</pubDate>
    </item>
    <item>
      <title>deb40adb-2501-4d46-aa7b-5b3e9d40e12d</title>
      <link>https://vulnerability.circl.lu/sighting/deb40adb-2501-4d46-aa7b-5b3e9d40e12d/export</link>
      <description>{"uuid": "deb40adb-2501-4d46-aa7b-5b3e9d40e12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspv2c2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:45.815011Z"}</description>
      <content:encoded>{"uuid": "deb40adb-2501-4d46-aa7b-5b3e9d40e12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspv2c2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:45.815011Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/deb40adb-2501-4d46-aa7b-5b3e9d40e12d/export</guid>
      <pubDate>Thu, 11 Jun 2026 15:33:45 +0000</pubDate>
    </item>
    <item>
      <title>77316839-7a02-48ae-bff8-9590e555118b</title>
      <link>https://vulnerability.circl.lu/sighting/77316839-7a02-48ae-bff8-9590e555118b/export</link>
      <description>{"uuid": "77316839-7a02-48ae-bff8-9590e555118b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspvzk2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:47.409904Z"}</description>
      <content:encoded>{"uuid": "77316839-7a02-48ae-bff8-9590e555118b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspvzk2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:47.409904Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/77316839-7a02-48ae-bff8-9590e555118b/export</guid>
      <pubDate>Thu, 11 Jun 2026 15:33:47 +0000</pubDate>
    </item>
    <item>
      <title>98a09ef5-208b-4930-b478-dbde039f63a1</title>
      <link>https://vulnerability.circl.lu/sighting/98a09ef5-208b-4930-b478-dbde039f63a1/export</link>
      <description>{"uuid": "98a09ef5-208b-4930-b478-dbde039f63a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspwys2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:49.163106Z"}</description>
      <content:encoded>{"uuid": "98a09ef5-208b-4930-b478-dbde039f63a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspwys2d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:49.163106Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/98a09ef5-208b-4930-b478-dbde039f63a1/export</guid>
      <pubDate>Thu, 11 Jun 2026 15:33:49 +0000</pubDate>
    </item>
    <item>
      <title>c382400a-75c7-42e0-a0dc-4c1f084e0101</title>
      <link>https://vulnerability.circl.lu/sighting/c382400a-75c7-42e0-a0dc-4c1f084e0101/export</link>
      <description>{"uuid": "c382400a-75c7-42e0-a0dc-4c1f084e0101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspxy22d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:51.865520Z"}</description>
      <content:encoded>{"uuid": "c382400a-75c7-42e0-a0dc-4c1f084e0101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnzkcspxy22d", "content": "2/ \ud83d\udc80 Hours after the patches, a researcher dropped \"RoguePlanet\" (CVE-2026-47281, CVSS 9.6): SYSTEM-level escalation via VS Code + Defender. Active exploitation confirmed. AI-speed offense is here.", "creation_timestamp": "2026-06-11T15:33:51.865520Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c382400a-75c7-42e0-a0dc-4c1f084e0101/export</guid>
      <pubDate>Thu, 11 Jun 2026 15:33:51 +0000</pubDate>
    </item>
    <item>
      <title>188ca199-0540-44cc-9cdd-d413a6dd4837</title>
      <link>https://vulnerability.circl.lu/sighting/188ca199-0540-44cc-9cdd-d413a6dd4837/export</link>
      <description>{"uuid": "188ca199-0540-44cc-9cdd-d413a6dd4837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47289", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo4lsdi3tz2m", "content": "\ud83d\udccc CVE-2026-47289 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47289", "creation_timestamp": "2026-06-12T20:37:06.245181Z"}</description>
      <content:encoded>{"uuid": "188ca199-0540-44cc-9cdd-d413a6dd4837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47289", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo4lsdi3tz2m", "content": "\ud83d\udccc CVE-2026-47289 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-47289", "creation_timestamp": "2026-06-12T20:37:06.245181Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/188ca199-0540-44cc-9cdd-d413a6dd4837/export</guid>
      <pubDate>Fri, 12 Jun 2026 20:37:06 +0000</pubDate>
    </item>
    <item>
      <title>f3405358-7400-48bc-9ec8-c62622861096</title>
      <link>https://vulnerability.circl.lu/sighting/f3405358-7400-48bc-9ec8-c62622861096/export</link>
      <description>{"uuid": "f3405358-7400-48bc-9ec8-c62622861096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modkr2rzhx2s", "content": "\ud83d\udccc CVE-2026-47281 - Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47281", "creation_timestamp": "2026-06-15T15:07:07.738030Z"}</description>
      <content:encoded>{"uuid": "f3405358-7400-48bc-9ec8-c62622861096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modkr2rzhx2s", "content": "\ud83d\udccc CVE-2026-47281 - Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47281", "creation_timestamp": "2026-06-15T15:07:07.738030Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f3405358-7400-48bc-9ec8-c62622861096/export</guid>
      <pubDate>Mon, 15 Jun 2026 15:07:07 +0000</pubDate>
    </item>
    <item>
      <title>d9a98b58-a3dd-4b27-9a90-55d8a78c9e54</title>
      <link>https://vulnerability.circl.lu/sighting/d9a98b58-a3dd-4b27-9a90-55d8a78c9e54/export</link>
      <description>{"uuid": "d9a98b58-a3dd-4b27-9a90-55d8a78c9e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7lms3he24", "content": "\ud83d\udea8 HIGH: CVE-2026-47280\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nImproper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Resource Manager\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: unknown vector\nImpact: varies\n\n\u2705 WHAT TO DO:", "creation_timestamp": "2026-06-17T21:03:12.409342Z"}</description>
      <content:encoded>{"uuid": "d9a98b58-a3dd-4b27-9a90-55d8a78c9e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7lms3he24", "content": "\ud83d\udea8 HIGH: CVE-2026-47280\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nImproper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Resource Manager\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: unknown vector\nImpact: varies\n\n\u2705 WHAT TO DO:", "creation_timestamp": "2026-06-17T21:03:12.409342Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d9a98b58-a3dd-4b27-9a90-55d8a78c9e54/export</guid>
      <pubDate>Wed, 17 Jun 2026 21:03:12 +0000</pubDate>
    </item>
    <item>
      <title>5d36ee7c-859e-4378-8506-25b1da9c7c86</title>
      <link>https://vulnerability.circl.lu/sighting/5d36ee7c-859e-4378-8506-25b1da9c7c86/export</link>
      <description>{"uuid": "5d36ee7c-859e-4378-8506-25b1da9c7c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mosuldjvcd2m", "content": "Microsoft Defender $MSFT can be turned against the PC it guards. RoguePlanet (CVE-2026-47281) lets a local attacker seize full SYSTEM control on Windows 10 and 11, even fully patched ones. Microsoft left it unpatched in June, and BleepingComputer reports a working exploit is public.", "creation_timestamp": "2026-06-21T17:13:06.767433Z"}</description>
      <content:encoded>{"uuid": "5d36ee7c-859e-4378-8506-25b1da9c7c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47281", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mosuldjvcd2m", "content": "Microsoft Defender $MSFT can be turned against the PC it guards. RoguePlanet (CVE-2026-47281) lets a local attacker seize full SYSTEM control on Windows 10 and 11, even fully patched ones. Microsoft left it unpatched in June, and BleepingComputer reports a working exploit is public.", "creation_timestamp": "2026-06-21T17:13:06.767433Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5d36ee7c-859e-4378-8506-25b1da9c7c86/export</guid>
      <pubDate>Sun, 21 Jun 2026 17:13:06 +0000</pubDate>
    </item>
    <item>
      <title>841062d6-0e36-4c63-a997-c540356a06df</title>
      <link>https://vulnerability.circl.lu/sighting/841062d6-0e36-4c63-a997-c540356a06df/export</link>
      <description>{"uuid": "841062d6-0e36-4c63-a997-c540356a06df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motndgqnas2n", "content": "\ud83d\udea8  ALERT: CVE-2026-47280\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nImproper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Resource Manager\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on conf", "creation_timestamp": "2026-06-22T00:35:47.447095Z"}</description>
      <content:encoded>{"uuid": "841062d6-0e36-4c63-a997-c540356a06df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47280", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motndgqnas2n", "content": "\ud83d\udea8  ALERT: CVE-2026-47280\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nImproper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Azure Resource Manager\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on conf", "creation_timestamp": "2026-06-22T00:35:47.447095Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/841062d6-0e36-4c63-a997-c540356a06df/export</guid>
      <pubDate>Mon, 22 Jun 2026 00:35:47 +0000</pubDate>
    </item>
  </channel>
</rss>
