https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 24 Sep 2026 11:38:58 +0000 https://vulnerability.circl.lu/sighting/a2674509-1f43-45f3-8884-e4237cb562d4/export {"uuid": "a2674509-1f43-45f3-8884-e4237cb562d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6suhh44n23", "content": "\ud83d\udd17 CVE : CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-76711, CVE-2026-76712, CVE-2026-76713, CVE-2026-76714, CVE-2026-76715, CVE-2026-76716, CVE-2026-76717", "creation_timestamp": "2026-09-23T13:10:25.868074Z"} {"uuid": "a2674509-1f43-45f3-8884-e4237cb562d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6suhh44n23", "content": "\ud83d\udd17 CVE : CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-76711, CVE-2026-76712, CVE-2026-76713, CVE-2026-76714, CVE-2026-76715, CVE-2026-76716, CVE-2026-76717", "creation_timestamp": "2026-09-23T13:10:25.868074Z"} https://vulnerability.circl.lu/sighting/a2674509-1f43-45f3-8884-e4237cb562d4/export Wed, 23 Sep 2026 13:10:25 +0000 https://vulnerability.circl.lu/sighting/371ec4d0-0621-4ca1-a0dc-8d42d7846abe/export {"uuid": "371ec4d0-0621-4ca1-a0dc-8d42d7846abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5alauy6j2y", "content": "\ud83d\udea8 CVE-2026-76708 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying oper...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76708\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:29.869802Z"} {"uuid": "371ec4d0-0621-4ca1-a0dc-8d42d7846abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5alauy6j2y", "content": "\ud83d\udea8 CVE-2026-76708 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying oper...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76708\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:29.869802Z"} https://vulnerability.circl.lu/sighting/371ec4d0-0621-4ca1-a0dc-8d42d7846abe/export Tue, 22 Sep 2026 22:10:29 +0000 https://vulnerability.circl.lu/sighting/0cffe36a-2ade-47ef-bb38-effc54ae1d16/export {"uuid": "0cffe36a-2ade-47ef-bb38-effc54ae1d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw56uvqjng2f", "content": "CVE-2026-76708\nThe Analytics and Location Engine uses built-in usernames and passwords that are the same for every installation. Because these credentials are known, anyone on the internet can try to log in and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T21:40:06.343358Z"} {"uuid": "0cffe36a-2ade-47ef-bb38-effc54ae1d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw56uvqjng2f", "content": "CVE-2026-76708\nThe Analytics and Location Engine uses built-in usernames and passwords that are the same for every installation. Because these credentials are known, anyone on the internet can try to log in and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T21:40:06.343358Z"} https://vulnerability.circl.lu/sighting/0cffe36a-2ade-47ef-bb38-effc54ae1d16/export Tue, 22 Sep 2026 21:40:06 +0000 https://vulnerability.circl.lu/sighting/515efeab-0376-4b4c-86ee-50ad7418ce37/export {"uuid": "515efeab-0376-4b4c-86ee-50ad7418ce37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://gist.github.com/ichintu/36aaaecfd03b65cd834e3e2ec1b2ba36", "content": "This daily cyber threat intelligence digest highlights critical vulnerabilities, active exploits, and emerging security guidance. Key advisories include default credential exposure in HPE ALE (CVE-2026-76708, CVSS 9.8), an actively exploited heap overflow in F5 BIG-IP APM (CVE-2026-94127), and a DoS flaw in Vector/Logstash (CVE-2026-77620). Additional affected platforms include Erlang OTP and MikroTik RouterOS, with patches and hotfixes available. On the threat actor front, a malicious npm package disguised as a Twilio tool is harvesting credentials, while a new zero-day PoC (BigDiskBuster) disrupts Microsoft Defender updates by exhausting disk space. The digest also features technical analysis of MikroTik disclosures, an open-source architecture for offline clinic ID verification, and a practical guide on avoiding false-positive RCE reports by validating delays with control requests and computed outputs rather than relying on time-based checks. Organizations are urged to apply vendor updates, monitor for credential exfiltration, and strengthen vulnerability validation practices.", "creation_timestamp": "2026-09-22T20:01:40.668723Z"} {"uuid": "515efeab-0376-4b4c-86ee-50ad7418ce37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://gist.github.com/ichintu/36aaaecfd03b65cd834e3e2ec1b2ba36", "content": "This daily cyber threat intelligence digest highlights critical vulnerabilities, active exploits, and emerging security guidance. Key advisories include default credential exposure in HPE ALE (CVE-2026-76708, CVSS 9.8), an actively exploited heap overflow in F5 BIG-IP APM (CVE-2026-94127), and a DoS flaw in Vector/Logstash (CVE-2026-77620). Additional affected platforms include Erlang OTP and MikroTik RouterOS, with patches and hotfixes available. On the threat actor front, a malicious npm package disguised as a Twilio tool is harvesting credentials, while a new zero-day PoC (BigDiskBuster) disrupts Microsoft Defender updates by exhausting disk space. The digest also features technical analysis of MikroTik disclosures, an open-source architecture for offline clinic ID verification, and a practical guide on avoiding false-positive RCE reports by validating delays with control requests and computed outputs rather than relying on time-based checks. Organizations are urged to apply vendor updates, monitor for credential exfiltration, and strengthen vulnerability validation practices.", "creation_timestamp": "2026-09-22T20:01:40.668723Z"} https://vulnerability.circl.lu/sighting/515efeab-0376-4b4c-86ee-50ad7418ce37/export Tue, 22 Sep 2026 20:01:40 +0000