https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 14 Sep 2026 05:54:18 +0000 https://vulnerability.circl.lu/sighting/5ffe5e08-40a8-4033-9268-19c935695042/export {"uuid": "5ffe5e08-40a8-4033-9268-19c935695042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvhehk5f2s2i", "content": "\ud83d\udd34 ScreenConnect CVE-2026-84869 \u2014 CVSS 9.9\n\nCISA confirms active exploitation of the critical ScreenConnect flaw. Attackers can abuse remote sessions to transfer and execute files without Host confirmati\n\nstemshop.top/blog/screenc...\n\n#CVE #CVE202684869 #ScreenConnect #ConnectWise #RMM #CyberSecurity", "creation_timestamp": "2026-09-14T05:21:37.802639Z"} {"uuid": "5ffe5e08-40a8-4033-9268-19c935695042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvhehk5f2s2i", "content": "\ud83d\udd34 ScreenConnect CVE-2026-84869 \u2014 CVSS 9.9\n\nCISA confirms active exploitation of the critical ScreenConnect flaw. Attackers can abuse remote sessions to transfer and execute files without Host confirmati\n\nstemshop.top/blog/screenc...\n\n#CVE #CVE202684869 #ScreenConnect #ConnectWise #RMM #CyberSecurity", "creation_timestamp": "2026-09-14T05:21:37.802639Z"} https://vulnerability.circl.lu/sighting/5ffe5e08-40a8-4033-9268-19c935695042/export Mon, 14 Sep 2026 05:21:37 +0000 https://vulnerability.circl.lu/sighting/d531298a-0968-4102-9209-31d4705cb107/export {"uuid": "d531298a-0968-4102-9209-31d4705cb107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvhdej5zwj2p", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f3\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA \uff08Sep 11\uff09 \n\nCVE-2026-42016 JFrog Artifactory\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-42018 JFrog Artifactory\u306e\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-84869 ConnectWise ScreenConnect\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u6a29\u9650\u7ba1\u7406\u3068\u8a8d\u8a3c\u306e\u6b20\u843d\u306e\u8106\u5f31\u6027\n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-14T05:01:51.385024Z"} {"uuid": "d531298a-0968-4102-9209-31d4705cb107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvhdej5zwj2p", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f3\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA \uff08Sep 11\uff09 \n\nCVE-2026-42016 JFrog Artifactory\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-42018 JFrog Artifactory\u306e\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-84869 ConnectWise ScreenConnect\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u6a29\u9650\u7ba1\u7406\u3068\u8a8d\u8a3c\u306e\u6b20\u843d\u306e\u8106\u5f31\u6027\n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-14T05:01:51.385024Z"} https://vulnerability.circl.lu/sighting/d531298a-0968-4102-9209-31d4705cb107/export Mon, 14 Sep 2026 05:01:51 +0000 https://vulnerability.circl.lu/sighting/f0f6b010-6f85-46bd-84bf-11a2f206feb6/export {"uuid": "f0f6b010-6f85-46bd-84bf-11a2f206feb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvdrpesjdd2l", "content": "CISA added 5 actively exploited flaws to KEV: ScreenConnect CVE-2026-84869 (CVSS 9.9), Artifactory and RouterOS bugs up to CVSS 9.2. Patch ScreenConnect to 26.6.5+ now. https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "creation_timestamp": "2026-09-12T19:07:48.784328Z"} {"uuid": "f0f6b010-6f85-46bd-84bf-11a2f206feb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvdrpesjdd2l", "content": "CISA added 5 actively exploited flaws to KEV: ScreenConnect CVE-2026-84869 (CVSS 9.9), Artifactory and RouterOS bugs up to CVSS 9.2. Patch ScreenConnect to 26.6.5+ now. https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "creation_timestamp": "2026-09-12T19:07:48.784328Z"} https://vulnerability.circl.lu/sighting/f0f6b010-6f85-46bd-84bf-11a2f206feb6/export Sat, 12 Sep 2026 19:07:48 +0000 https://vulnerability.circl.lu/sighting/7946194f-b69f-4023-b55e-6e1886d4517e/export {"uuid": "7946194f-b69f-4023-b55e-6e1886d4517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvchfo4vgx23", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-84869: \u26a0\ufe0f CVE-2026-84869: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-84869-a-condition-in-the-screenconnect-client", "creation_timestamp": "2026-09-12T06:30:45.903404Z"} {"uuid": "7946194f-b69f-4023-b55e-6e1886d4517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvchfo4vgx23", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-84869: \u26a0\ufe0f CVE-2026-84869: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-84869-a-condition-in-the-screenconnect-client", "creation_timestamp": "2026-09-12T06:30:45.903404Z"} https://vulnerability.circl.lu/sighting/7946194f-b69f-4023-b55e-6e1886d4517e/export Sat, 12 Sep 2026 06:30:45 +0000 https://vulnerability.circl.lu/sighting/9414d082-ad0b-4dee-a7e5-0af1322948a3/export {"uuid": "9414d082-ad0b-4dee-a7e5-0af1322948a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvbyoaaqym2k", "content": "\ud83d\udccc CVE-2026-84869 - A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host ... https://www.cyberhub.blog/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T02:07:07.903086Z"} {"uuid": "9414d082-ad0b-4dee-a7e5-0af1322948a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvbyoaaqym2k", "content": "\ud83d\udccc CVE-2026-84869 - A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host ... https://www.cyberhub.blog/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T02:07:07.903086Z"} https://vulnerability.circl.lu/sighting/9414d082-ad0b-4dee-a7e5-0af1322948a3/export Sat, 12 Sep 2026 02:07:07 +0000 https://vulnerability.circl.lu/sighting/709329c7-309a-4b0f-88a1-72800c0346b1/export {"uuid": "709329c7-309a-4b0f-88a1-72800c0346b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvbssao6td2u", "content": "CVE-2026-84869 is trending. Hype score 7, currently #7 on cvemon.\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T00:21:59.559771Z"} {"uuid": "709329c7-309a-4b0f-88a1-72800c0346b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvbssao6td2u", "content": "CVE-2026-84869 is trending. Hype score 7, currently #7 on cvemon.\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84869", "creation_timestamp": "2026-09-12T00:21:59.559771Z"} https://vulnerability.circl.lu/sighting/709329c7-309a-4b0f-88a1-72800c0346b1/export Sat, 12 Sep 2026 00:21:59 +0000 https://vulnerability.circl.lu/sighting/6f027be6-40db-49ce-8e0d-247ccfd418d9/export {"uuid": "6f027be6-40db-49ce-8e0d-247ccfd418d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvbmyx4f3p2l", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-84869", "creation_timestamp": "2026-09-11T22:38:21.965002Z"} {"uuid": "6f027be6-40db-49ce-8e0d-247ccfd418d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvbmyx4f3p2l", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-84869", "creation_timestamp": "2026-09-11T22:38:21.965002Z"} https://vulnerability.circl.lu/sighting/6f027be6-40db-49ce-8e0d-247ccfd418d9/export Fri, 11 Sep 2026 22:38:21 +0000 https://vulnerability.circl.lu/sighting/08296ddb-1d18-45df-8b21-64089a761b60/export {"uuid": "08296ddb-1d18-45df-8b21-64089a761b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://gist.github.com/ichintu/8151c2994398b20c3f2c1cd0ecf05f94", "content": "This daily threat intelligence roundup consolidates critical software vulnerabilities, active exploitation campaigns, AI security threats, and infrastructure updates:\n\n**Critical Vulnerabilities & Patches:** Security advisories cover patched flaws in n8n, Progress Chef Automate, and Laci Synchroni (CVE-2026-54047), which allows critical account takeover via client-side config manipulation. An ST Engineering VSAT terminal flaw (CVE-2026-38056) exploits a factory pre-configured account, threatening critical infrastructure. \n\n**Active Exploitation:** A CVSS 10 file-read vulnerability in GitLab was rapidly probed in the wild shortly after disclosure. ConnectWise ScreenConnect (CVE-2026-84869) was actively exploited and added to CISA\u2019s KEV database before a patch was released, enabling unauthorized file transfer and execution during remote sessions.\n\n**AI Security & Community:** Anthropic reported unauthorized, industrial-scale Claude model distillation attacks by seven Chinese AI labs. This coincides with a widely viewed DEF CON talk on offensive AI hacking and a Reddit AMA on macOS offensive security.\n\n**Infrastructure Updates:** Microsoft is redirecting Teams and Copilot traffic to new cloud domains (`teams.cloud.microsoft` and `copilot.cloud.microsoft`). Organizations must immediately update firewall, proxy, and secure web gateway rules to maintain access and adjust tenant restrictions.", "creation_timestamp": "2026-09-11T20:03:10.462702Z"} {"uuid": "08296ddb-1d18-45df-8b21-64089a761b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://gist.github.com/ichintu/8151c2994398b20c3f2c1cd0ecf05f94", "content": "This daily threat intelligence roundup consolidates critical software vulnerabilities, active exploitation campaigns, AI security threats, and infrastructure updates:\n\n**Critical Vulnerabilities & Patches:** Security advisories cover patched flaws in n8n, Progress Chef Automate, and Laci Synchroni (CVE-2026-54047), which allows critical account takeover via client-side config manipulation. An ST Engineering VSAT terminal flaw (CVE-2026-38056) exploits a factory pre-configured account, threatening critical infrastructure. \n\n**Active Exploitation:** A CVSS 10 file-read vulnerability in GitLab was rapidly probed in the wild shortly after disclosure. ConnectWise ScreenConnect (CVE-2026-84869) was actively exploited and added to CISA\u2019s KEV database before a patch was released, enabling unauthorized file transfer and execution during remote sessions.\n\n**AI Security & Community:** Anthropic reported unauthorized, industrial-scale Claude model distillation attacks by seven Chinese AI labs. This coincides with a widely viewed DEF CON talk on offensive AI hacking and a Reddit AMA on macOS offensive security.\n\n**Infrastructure Updates:** Microsoft is redirecting Teams and Copilot traffic to new cloud domains (`teams.cloud.microsoft` and `copilot.cloud.microsoft`). Organizations must immediately update firewall, proxy, and secure web gateway rules to maintain access and adjust tenant restrictions.", "creation_timestamp": "2026-09-11T20:03:10.462702Z"} https://vulnerability.circl.lu/sighting/08296ddb-1d18-45df-8b21-64089a761b60/export Fri, 11 Sep 2026 20:03:10 +0000 https://vulnerability.circl.lu/sighting/7a09e4fc-88c4-4efb-855f-4192f41dab48/export {"uuid": "7a09e4fc-88c4-4efb-855f-4192f41dab48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f", "content": "~Cisa~\nCISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.\n-\nIOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869\n-\n#CISA #KEV #ThreatIntel", "creation_timestamp": "2026-09-11T20:02:07.052994Z"} {"uuid": "7a09e4fc-88c4-4efb-855f-4192f41dab48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f", "content": "~Cisa~\nCISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.\n-\nIOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869\n-\n#CISA #KEV #ThreatIntel", "creation_timestamp": "2026-09-11T20:02:07.052994Z"} https://vulnerability.circl.lu/sighting/7a09e4fc-88c4-4efb-855f-4192f41dab48/export Fri, 11 Sep 2026 20:02:07 +0000 https://vulnerability.circl.lu/sighting/719c68bc-07b3-4070-b413-e213c911b67e/export {"uuid": "719c68bc-07b3-4070-b413-e213c911b67e", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfd55757-60bf-42b4-8579-b98e3aa79248", "content": "", "creation_timestamp": "2026-09-11T19:00:02.536386Z"} {"uuid": "719c68bc-07b3-4070-b413-e213c911b67e", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfd55757-60bf-42b4-8579-b98e3aa79248", "content": "", "creation_timestamp": "2026-09-11T19:00:02.536386Z"} https://vulnerability.circl.lu/sighting/719c68bc-07b3-4070-b413-e213c911b67e/export Fri, 11 Sep 2026 19:00:02 +0000