https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 23 Sep 2026 15:31:14 +0000 https://vulnerability.circl.lu/sighting/697762a1-c573-444a-8f87-df55250cfbb4/export {"uuid": "697762a1-c573-444a-8f87-df55250cfbb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "Telegram/Avf0-ty-gzK-W0O3r2X0f219zY1oYI4raSYWAE6OavIWB6s", "content": "", "creation_timestamp": "2026-09-23T00:00:23.682720Z"} {"uuid": "697762a1-c573-444a-8f87-df55250cfbb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "Telegram/Avf0-ty-gzK-W0O3r2X0f219zY1oYI4raSYWAE6OavIWB6s", "content": "", "creation_timestamp": "2026-09-23T00:00:23.682720Z"} https://vulnerability.circl.lu/sighting/697762a1-c573-444a-8f87-df55250cfbb4/export Wed, 23 Sep 2026 00:00:23 +0000 https://vulnerability.circl.lu/sighting/0a9b71b5-80b8-47d7-991c-1ab3df2cd4f5/export {"uuid": "0a9b71b5-80b8-47d7-991c-1ab3df2cd4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "Telegram/k5pttJYw8vdu79lqPVZW8OCnYgrfEU1O-B46GOmL7xwq_uA", "content": "", "creation_timestamp": "2026-09-23T00:00:23.462468Z"} {"uuid": "0a9b71b5-80b8-47d7-991c-1ab3df2cd4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "Telegram/k5pttJYw8vdu79lqPVZW8OCnYgrfEU1O-B46GOmL7xwq_uA", "content": "", "creation_timestamp": "2026-09-23T00:00:23.462468Z"} https://vulnerability.circl.lu/sighting/0a9b71b5-80b8-47d7-991c-1ab3df2cd4f5/export Wed, 23 Sep 2026 00:00:23 +0000 https://vulnerability.circl.lu/sighting/53a2be49-5938-4a1b-9bd5-1bd6bbe5ba44/export {"uuid": "53a2be49-5938-4a1b-9bd5-1bd6bbe5ba44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3mw4daoa7pc2n", "content": "D-Link warns of two major bugs with public POCs\n\nCVE-2026-86296: supportannouncement.us.dlink.com/security/pub...\n\nPOC: tzh00203.notion.site/D-Link-DIR-8...\n\nCVE-2026-93958: supportannouncement.us.dlink.com/security/pub...\n\nPOC: github.com/FoundTL/D-Li...", "creation_timestamp": "2026-09-22T13:25:36.137427Z"} {"uuid": "53a2be49-5938-4a1b-9bd5-1bd6bbe5ba44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3mw4daoa7pc2n", "content": "D-Link warns of two major bugs with public POCs\n\nCVE-2026-86296: supportannouncement.us.dlink.com/security/pub...\n\nPOC: tzh00203.notion.site/D-Link-DIR-8...\n\nCVE-2026-93958: supportannouncement.us.dlink.com/security/pub...\n\nPOC: github.com/FoundTL/D-Li...", "creation_timestamp": "2026-09-22T13:25:36.137427Z"} https://vulnerability.circl.lu/sighting/53a2be49-5938-4a1b-9bd5-1bd6bbe5ba44/export Tue, 22 Sep 2026 13:25:36 +0000 https://vulnerability.circl.lu/sighting/e4d0b7a5-950f-4ed7-81a6-9940ad82dd8b/export {"uuid": "e4d0b7a5-950f-4ed7-81a6-9940ad82dd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "Telegram/k5pttJYw8vdu79lqPVZW8OCnYgrfEU1O-B46GOmL7xwq_uA", "content": "", "creation_timestamp": "2026-09-22T07:00:07.370460Z"} {"uuid": "e4d0b7a5-950f-4ed7-81a6-9940ad82dd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "Telegram/k5pttJYw8vdu79lqPVZW8OCnYgrfEU1O-B46GOmL7xwq_uA", "content": "", "creation_timestamp": "2026-09-22T07:00:07.370460Z"} https://vulnerability.circl.lu/sighting/e4d0b7a5-950f-4ed7-81a6-9940ad82dd8b/export Tue, 22 Sep 2026 07:00:07 +0000 https://vulnerability.circl.lu/sighting/58e8e1ba-4477-4c14-aed4-029757261fd0/export {"uuid": "58e8e1ba-4477-4c14-aed4-029757261fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "Telegram/Avf0-ty-gzK-W0O3r2X0f219zY1oYI4raSYWAE6OavIWB6s", "content": "", "creation_timestamp": "2026-09-22T07:00:07.093460Z"} {"uuid": "58e8e1ba-4477-4c14-aed4-029757261fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "Telegram/Avf0-ty-gzK-W0O3r2X0f219zY1oYI4raSYWAE6OavIWB6s", "content": "", "creation_timestamp": "2026-09-22T07:00:07.093460Z"} https://vulnerability.circl.lu/sighting/58e8e1ba-4477-4c14-aed4-029757261fd0/export Tue, 22 Sep 2026 07:00:07 +0000 https://vulnerability.circl.lu/sighting/c87bffb2-d253-46e9-aac3-c55915204433/export {"uuid": "c87bffb2-d253-46e9-aac3-c55915204433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102865", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-93958\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 13:16:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nD-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-21T00:00:04.662644Z"} {"uuid": "c87bffb2-d253-46e9-aac3-c55915204433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102865", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-93958\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 13:16:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nD-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-21T00:00:04.662644Z"} https://vulnerability.circl.lu/sighting/c87bffb2-d253-46e9-aac3-c55915204433/export Mon, 21 Sep 2026 00:00:04 +0000 https://vulnerability.circl.lu/sighting/9b4678e7-469d-4706-adc4-9c3f0d1acb37/export {"uuid": "9b4678e7-469d-4706-adc4-9c3f0d1acb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102865", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-93958\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 13:16:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nD-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T15:00:03.371628Z"} {"uuid": "9b4678e7-469d-4706-adc4-9c3f0d1acb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102865", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-93958\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 13:16:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nD-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T15:00:03.371628Z"} https://vulnerability.circl.lu/sighting/9b4678e7-469d-4706-adc4-9c3f0d1acb37/export Sun, 20 Sep 2026 15:00:03 +0000 https://vulnerability.circl.lu/sighting/e341a53d-3dd2-4fdd-8a9a-894b823bc401/export {"uuid": "e341a53d-3dd2-4fdd-8a9a-894b823bc401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93958", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117301839393461308", "content": "CVE-2026-93958 (CRITICAL, CVSS 9.4): D-Link R95 BE9500_1.00.16 routers have an OS command injection flaw via the NTPServer argument in DHMAPI (/bin/ssi). Exploit is public, no patch yet \u2014 restrict access and monitor activity. https://radar.offseq.com/threat/cve-2026-93958-os-command-injection-in-d-link-r95-a15aa6eceda20938 #OffSeq #CVE202693958 #Vuln", "creation_timestamp": "2026-09-20T06:00:30.570894Z"} {"uuid": "e341a53d-3dd2-4fdd-8a9a-894b823bc401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93958", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117301839393461308", "content": "CVE-2026-93958 (CRITICAL, CVSS 9.4): D-Link R95 BE9500_1.00.16 routers have an OS command injection flaw via the NTPServer argument in DHMAPI (/bin/ssi). Exploit is public, no patch yet \u2014 restrict access and monitor activity. https://radar.offseq.com/threat/cve-2026-93958-os-command-injection-in-d-link-r95-a15aa6eceda20938 #OffSeq #CVE202693958 #Vuln", "creation_timestamp": "2026-09-20T06:00:30.570894Z"} https://vulnerability.circl.lu/sighting/e341a53d-3dd2-4fdd-8a9a-894b823bc401/export Sun, 20 Sep 2026 06:00:30 +0000 https://vulnerability.circl.lu/sighting/9f670eaa-3314-4728-b6ec-fbb123d488fd/export {"uuid": "9f670eaa-3314-4728-b6ec-fbb123d488fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93958", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvwjgsdhy32x", "content": "D-Link R95 routers (BE9500_1.00.16) face a CRITICAL OS command injection (CVE-2026-93958, CVSS 9.4). No patch \u2014 public exploit exists. Restrict device exposure & monitor for abuse. https://radar.offseq.com/threat/cve-2026-93958-os-command-injection-in-d-link-r95-a15aa6eceda20938 #OffSeq #CVE20269...", "creation_timestamp": "2026-09-20T06:00:27.964863Z"} {"uuid": "9f670eaa-3314-4728-b6ec-fbb123d488fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93958", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvwjgsdhy32x", "content": "D-Link R95 routers (BE9500_1.00.16) face a CRITICAL OS command injection (CVE-2026-93958, CVSS 9.4). No patch \u2014 public exploit exists. Restrict device exposure & monitor for abuse. https://radar.offseq.com/threat/cve-2026-93958-os-command-injection-in-d-link-r95-a15aa6eceda20938 #OffSeq #CVE20269...", "creation_timestamp": "2026-09-20T06:00:27.964863Z"} https://vulnerability.circl.lu/sighting/9f670eaa-3314-4728-b6ec-fbb123d488fd/export Sun, 20 Sep 2026 06:00:27 +0000 https://vulnerability.circl.lu/sighting/68a9b181-7496-400d-98f8-ebf72d58a84f/export {"uuid": "68a9b181-7496-400d-98f8-ebf72d58a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "https://gist.github.com/ichintu/cdeedf6435a1cfc4f0c1b67ededf1aba", "content": "This daily threat intelligence update highlights two critical vulnerabilities disclosed in September 2026:\n\u2022 **CVE-2026-93958 (Critical, 9.1):** A remote OS command injection flaw in D-Link R95 routers, exploitable via the DHMAPI component's `NTPServer` argument.\n\u2022 **CVE-2026-93991 (High, 8.3):** An authorization bypass in Argo Workflows (v4.1.0\u20134.1.3) that allows attackers to bypass namespace restrictions and expose sensitive archived workflow data using negated field selectors.\n\nBoth vulnerabilities feature publicly disclosed, functional exploits, necessitating immediate patching or mitigation.", "creation_timestamp": "2026-09-20T04:01:15.895579Z"} {"uuid": "68a9b181-7496-400d-98f8-ebf72d58a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93958", "type": "seen", "source": "https://gist.github.com/ichintu/cdeedf6435a1cfc4f0c1b67ededf1aba", "content": "This daily threat intelligence update highlights two critical vulnerabilities disclosed in September 2026:\n\u2022 **CVE-2026-93958 (Critical, 9.1):** A remote OS command injection flaw in D-Link R95 routers, exploitable via the DHMAPI component's `NTPServer` argument.\n\u2022 **CVE-2026-93991 (High, 8.3):** An authorization bypass in Argo Workflows (v4.1.0\u20134.1.3) that allows attackers to bypass namespace restrictions and expose sensitive archived workflow data using negated field selectors.\n\nBoth vulnerabilities feature publicly disclosed, functional exploits, necessitating immediate patching or mitigation.", "creation_timestamp": "2026-09-20T04:01:15.895579Z"} https://vulnerability.circl.lu/sighting/68a9b181-7496-400d-98f8-ebf72d58a84f/export Sun, 20 Sep 2026 04:01:15 +0000