https://vulnerability.circl.lu/sightings/feed 2026-09-17T09:59:06.649703+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/22dd9987-5761-4f6f-a05c-dbcbe6ef6a06/export 2026-09-17T09:59:06.663064+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "22dd9987-5761-4f6f-a05c-dbcbe6ef6a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all\\n models in the VVX series (VVX 150, VVX 250, VVX 350, and VVX 450), as well as three models from the Trio IP\\n Conference series (Trio 8800, Trio 8500, and Trio 8300). A remote attacker can leverage CVE-2026-0826 to achieve\\n unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability is present\\n in the device's parsing of Session Description Protocol (SDP) attributes for Interactive Connectivity Establishment\\n (ICE). The ICE feature, which is not enabled by default, must be enabled for the device to be exploitable by a\\n remote attacker.\", \"disclosure_date\": \"2026-06-01\", \"fullname\": \"exploit/linux/misc/poly_unauth_rce_cve_2026_0826\", \"is_install_path\": true, \"mod_time\": \"2026-06-05 11:39:49 +0000\", \"name\": \"HP Poly Voice Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/misc/poly_unauth_rce_cve_2026_0826\", \"references\": [\"CVE-2026-0826\", \"URL-https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/\"], \"rport\": 5060, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.714885Z"} 2026-09-08T06:49:18.714885+00:00 https://vulnerability.circl.lu/sighting/02133b65-e5e8-4fe8-b1ab-cd2ea0073968/export 2026-09-17T09:59:06.666867+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "02133b65-e5e8-4fe8-b1ab-cd2ea0073968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:06.306459Z"} 2026-09-04T00:01:06.306459+00:00 https://vulnerability.circl.lu/sighting/3b5f7bbd-6a38-4ecd-bae5-219c86a6d0ec/export 2026-09-17T09:59:06.667057+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3b5f7bbd-6a38-4ecd-bae5-219c86a6d0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0830", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/177660", "content": "(Write-up) RCE in AWS Kiro IDE\nhttps://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/\n\n submitted by /u/SkyFallRobin (https://www.reddit.com/user/SkyFallRobin) \n [link] (https://medium.com/@dhiraj_mishra/cve-2026-0830-aws-kiro-gitlab-helper-remote-code-execution-1f826469228d) [comments] (https://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/)", "creation_timestamp": "2026-09-04T00:01:06.192390Z"} 2026-09-04T00:01:06.192390+00:00 https://vulnerability.circl.lu/sighting/347134c9-fdb5-471a-97e1-5de78b8a869d/export 2026-09-17T09:59:06.667175+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "347134c9-fdb5-471a-97e1-5de78b8a869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.692297Z"} 2026-09-04T00:01:01.692297+00:00 https://vulnerability.circl.lu/sighting/15652bbc-4c7d-4de0-b83d-24f834ee1796/export 2026-09-17T09:59:06.667285+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "15652bbc-4c7d-4de0-b83d-24f834ee1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.595157Z"} 2026-09-03T03:00:05.595157+00:00 https://vulnerability.circl.lu/sighting/0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5/export 2026-09-17T09:59:06.667388+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T02:00:05.267375Z"} 2026-09-03T02:00:05.267375+00:00 https://vulnerability.circl.lu/sighting/1884d4ec-5be6-4c10-bd13-43fab0662ced/export 2026-09-17T09:59:06.667498+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1884d4ec-5be6-4c10-bd13-43fab0662ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0830", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/177660", "content": "(Write-up) RCE in AWS Kiro IDE\nhttps://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/\n\n submitted by /u/SkyFallRobin (https://www.reddit.com/user/SkyFallRobin) \n [link] (https://medium.com/@dhiraj_mishra/cve-2026-0830-aws-kiro-gitlab-helper-remote-code-execution-1f826469228d) [comments] (https://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/)", "creation_timestamp": "2026-09-03T02:00:05.155985Z"} 2026-09-03T02:00:05.155985+00:00 https://vulnerability.circl.lu/sighting/2d91ced9-838b-4c3b-8627-6c5a3cd52006/export 2026-09-17T09:59:06.667614+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2d91ced9-838b-4c3b-8627-6c5a3cd52006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-03T00:00:50.751689Z"} 2026-09-03T00:00:50.751689+00:00 https://vulnerability.circl.lu/sighting/c2f35e2d-f399-4bef-9333-9d085068de2c/export 2026-09-17T09:59:06.667743+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c2f35e2d-f399-4bef-9333-9d085068de2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44388", "content": "Una vulnerabilidad recientemente revelada, CVE-2026-0828, en el controlador del n\u00facleo de Windows ProcessMonitorDriver.sys pone de manifiesto una capacidad peligrosa: cualquier aplicaci\u00f3n en modo usuario que obtenga un identificador del dispositivo puede finalizar procesos arbitrarios, incluidos los procesos protegidos del sistema, sin que se realicen las comprobaciones de control de acceso adecuadas. Esta falla elude de hecho el modelo de seguridad habitual de Windows que protege los servicios cr\u00edticos del sistema y los componentes de seguridad.\n\nhttps://github.com/oxfemale/KillChain\n\n#maldev #github #killprocess", "creation_timestamp": "2026-09-03T00:00:47.422670Z"} 2026-09-03T00:00:47.422670+00:00 https://vulnerability.circl.lu/sighting/c15c5a87-4977-48eb-9404-2ddb740015bf/export 2026-09-17T09:59:06.667863+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c15c5a87-4977-48eb-9404-2ddb740015bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0848", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44124", "content": "https://unaaldia.hispasec.com/2026/03/como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848.html?utm_source=rss&utm_medium=rss&utm_campaign=como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848", "creation_timestamp": "2026-09-03T00:00:47.165005Z"} 2026-09-03T00:00:47.165005+00:00