https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 25 Sep 2026 13:49:04 +0000 https://vulnerability.circl.lu/sighting/2bb1b3fc-a2a9-457e-9923-d703e67442c5/export {"uuid": "2bb1b3fc-a2a9-457e-9923-d703e67442c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq6l7lyof2j", "content": "CVE-2026-51990\nThe Sogou Input Method software (versions before 16.3.0.3498) contains a flaw in its biz_helper.exe component that could let a remote attacker run any program on a user\u2019s computer. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-17T17:30:04.636491Z"} {"uuid": "2bb1b3fc-a2a9-457e-9923-d703e67442c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq6l7lyof2j", "content": "CVE-2026-51990\nThe Sogou Input Method software (versions before 16.3.0.3498) contains a flaw in its biz_helper.exe component that could let a remote attacker run any program on a user\u2019s computer. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-17T17:30:04.636491Z"} https://vulnerability.circl.lu/sighting/2bb1b3fc-a2a9-457e-9923-d703e67442c5/export Thu, 17 Sep 2026 17:30:04 +0000 https://vulnerability.circl.lu/sighting/69c24774-c721-4f33-ab2e-806c2d2ba6da/export {"uuid": "69c24774-c721-4f33-ab2e-806c2d2ba6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvmwi6ftxf2x", "content": "Original text: \"Gray Rabbits and the Tale of a One-Click Backdoor\" \u2014 Alexandru-Cristian Barda\u0219, Gen Digital / Gen Threat Labs (10 September 2026; 26-minute read). Figures, the command table, IOCs and published URLs be\nhttps://core-jmp.org/2026/09/gray-rabbits-one-click-backdoor-sogou-cve-2026-51990/", "creation_timestamp": "2026-09-16T10:27:15.304560Z"} {"uuid": "69c24774-c721-4f33-ab2e-806c2d2ba6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvmwi6ftxf2x", "content": "Original text: \"Gray Rabbits and the Tale of a One-Click Backdoor\" \u2014 Alexandru-Cristian Barda\u0219, Gen Digital / Gen Threat Labs (10 September 2026; 26-minute read). Figures, the command table, IOCs and published URLs be\nhttps://core-jmp.org/2026/09/gray-rabbits-one-click-backdoor-sogou-cve-2026-51990/", "creation_timestamp": "2026-09-16T10:27:15.304560Z"} https://vulnerability.circl.lu/sighting/69c24774-c721-4f33-ab2e-806c2d2ba6da/export Wed, 16 Sep 2026 10:27:15 +0000 https://vulnerability.circl.lu/sighting/282650a1-dda9-4338-bb8b-1c4ed658d2df/export {"uuid": "282650a1-dda9-4338-bb8b-1c4ed658d2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvl4puma3w2l", "content": "A critical flaw (CVE-2026-51990) in Tencent's popular Sogou Input Method is being exploited by Chinese hackers for 1-click RCE. The attack chains a custom protocol handler flaw with an old browser engine. #CyberSecurity #Vulnerability #Tencent\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-15T17:13:35.172708Z"} {"uuid": "282650a1-dda9-4338-bb8b-1c4ed658d2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvl4puma3w2l", "content": "A critical flaw (CVE-2026-51990) in Tencent's popular Sogou Input Method is being exploited by Chinese hackers for 1-click RCE. The attack chains a custom protocol handler flaw with an old browser engine. #CyberSecurity #Vulnerability #Tencent\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-15T17:13:35.172708Z"} https://vulnerability.circl.lu/sighting/282650a1-dda9-4338-bb8b-1c4ed658d2df/export Tue, 15 Sep 2026 17:13:35 +0000 https://vulnerability.circl.lu/sighting/9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c/export {"uuid": "9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/56d705b6-7c8b-4c3b-87dd-67b77e9b4a9a", "content": "", "creation_timestamp": "2026-09-15T14:00:40.145937Z"} {"uuid": "9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/56d705b6-7c8b-4c3b-87dd-67b77e9b4a9a", "content": "", "creation_timestamp": "2026-09-15T14:00:40.145937Z"} https://vulnerability.circl.lu/sighting/9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c/export Tue, 15 Sep 2026 14:00:40 +0000 https://vulnerability.circl.lu/sighting/df6926d4-424b-4b3d-837d-838a0278a4fe/export {"uuid": "df6926d4-424b-4b3d-837d-838a0278a4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mvkl7uotq72g", "content": "China-aligned hackers exploiting critical Tencent flaw to drop GrayRabbit backdoor. CVE-2026-51990 poses immediate risk to Windows users\u2014SOC\u2026\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-09-15T12:00:24.468935Z"} {"uuid": "df6926d4-424b-4b3d-837d-838a0278a4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mvkl7uotq72g", "content": "China-aligned hackers exploiting critical Tencent flaw to drop GrayRabbit backdoor. CVE-2026-51990 poses immediate risk to Windows users\u2014SOC\u2026\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-09-15T12:00:24.468935Z"} https://vulnerability.circl.lu/sighting/df6926d4-424b-4b3d-837d-838a0278a4fe/export Tue, 15 Sep 2026 12:00:24 +0000 https://vulnerability.circl.lu/sighting/60c17918-7d5d-42c6-84be-62dc3e7dfd21/export {"uuid": "60c17918-7d5d-42c6-84be-62dc3e7dfd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvk6n5uc7cym", "content": "\u4e2d\u56fd\u7cfb\u30a2\u30af\u30bf\u30fc\u304cTencent\u88fd\u30bd\u30d5\u30c8\u306e\u91cd\u5927\u306a\u6b20\u9665\u3092\u60aa\u7528\u3057\u3001\u30d0\u30c3\u30af\u30c9\u30a2\u300cGrayRabbit\u300d\u3092\u5c55\u958b\uff08CVE-2026-51990\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47725/", "creation_timestamp": "2026-09-15T08:15:12.790640Z"} {"uuid": "60c17918-7d5d-42c6-84be-62dc3e7dfd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvk6n5uc7cym", "content": "\u4e2d\u56fd\u7cfb\u30a2\u30af\u30bf\u30fc\u304cTencent\u88fd\u30bd\u30d5\u30c8\u306e\u91cd\u5927\u306a\u6b20\u9665\u3092\u60aa\u7528\u3057\u3001\u30d0\u30c3\u30af\u30c9\u30a2\u300cGrayRabbit\u300d\u3092\u5c55\u958b\uff08CVE-2026-51990\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47725/", "creation_timestamp": "2026-09-15T08:15:12.790640Z"} https://vulnerability.circl.lu/sighting/60c17918-7d5d-42c6-84be-62dc3e7dfd21/export Tue, 15 Sep 2026 08:15:12 +0000 https://vulnerability.circl.lu/sighting/7876d3d6-e890-4aa9-afa0-d10d82bd51b1/export {"uuid": "7876d3d6-e890-4aa9-afa0-d10d82bd51b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/jarkafterdark.com/post/3mvk37wpdgo2m", "content": "the flaw, cve-2026-51990, opened the path to remote code execution through sogou's embedded browser. in the attack gen observed, UNC3569 chained it with an old chromium v8 flaw. one crafted link, one click, and the attacker could essentially do anything the currently logged-in user could do.", "creation_timestamp": "2026-09-15T07:14:06.573695Z"} {"uuid": "7876d3d6-e890-4aa9-afa0-d10d82bd51b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/jarkafterdark.com/post/3mvk37wpdgo2m", "content": "the flaw, cve-2026-51990, opened the path to remote code execution through sogou's embedded browser. in the attack gen observed, UNC3569 chained it with an old chromium v8 flaw. one crafted link, one click, and the attacker could essentially do anything the currently logged-in user could do.", "creation_timestamp": "2026-09-15T07:14:06.573695Z"} https://vulnerability.circl.lu/sighting/7876d3d6-e890-4aa9-afa0-d10d82bd51b1/export Tue, 15 Sep 2026 07:14:06 +0000 https://vulnerability.circl.lu/sighting/08bfa8f7-4380-473f-a9d8-0473a7168a22/export {"uuid": "08bfa8f7-4380-473f-a9d8-0473a7168a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvjz7klh3o2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-20079: 22 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-85706: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 5 interactions\nCVE-2026-76461: 5 interactions\nCVE-2026-85706: 5 interactions\n", "creation_timestamp": "2026-09-15T06:38:06.953080Z"} {"uuid": "08bfa8f7-4380-473f-a9d8-0473a7168a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvjz7klh3o2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-20079: 22 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-85706: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 5 interactions\nCVE-2026-76461: 5 interactions\nCVE-2026-85706: 5 interactions\n", "creation_timestamp": "2026-09-15T06:38:06.953080Z"} https://vulnerability.circl.lu/sighting/08bfa8f7-4380-473f-a9d8-0473a7168a22/export Tue, 15 Sep 2026 06:38:06 +0000 https://vulnerability.circl.lu/sighting/4e593253-2223-4222-ae1c-67a95384c97a/export {"uuid": "4e593253-2223-4222-ae1c-67a95384c97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "published-proof-of-concept", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.229728Z"} {"uuid": "4e593253-2223-4222-ae1c-67a95384c97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "published-proof-of-concept", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.229728Z"} https://vulnerability.circl.lu/sighting/4e593253-2223-4222-ae1c-67a95384c97a/export Tue, 15 Sep 2026 00:00:21 +0000 https://vulnerability.circl.lu/sighting/6fecef12-a462-4053-8789-2704a517e439/export {"uuid": "6fecef12-a462-4053-8789-2704a517e439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/BleepingComputer/25549", "content": "\u200aHackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-15T00:00:10.129471Z"} {"uuid": "6fecef12-a462-4053-8789-2704a517e439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/BleepingComputer/25549", "content": "\u200aHackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-15T00:00:10.129471Z"} https://vulnerability.circl.lu/sighting/6fecef12-a462-4053-8789-2704a517e439/export Tue, 15 Sep 2026 00:00:10 +0000