https://vulnerability.circl.lu/sightings/feed 2026-09-17T10:26:42.583574+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a4c5d9e2-c0c4-4d51-81eb-d86a297676c3/export 2026-09-17T10:26:42.605339+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a4c5d9e2-c0c4-4d51-81eb-d86a297676c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:07.593709Z"} 2026-09-14T10:00:07.593709+00:00 https://vulnerability.circl.lu/sighting/39ab485c-4610-4340-b3fe-92902bd14973/export 2026-09-17T10:26:42.608916+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "39ab485c-4610-4340-b3fe-92902bd14973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29811", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgigszbco2e", "content": "\ud83d\udfe0 CVE-2026-29811 - High (7.7)\n\nCyberPanel before 2.4.4 attempts to detect an \"alais\" domain (i.e., a second domain that serves t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-29811/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-13T21:00:01.792765Z"} 2026-09-13T21:00:01.792765+00:00 https://vulnerability.circl.lu/sighting/352d1d6e-d084-4e8d-bb48-c03743e3a2db/export 2026-09-17T10:26:42.609064+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "352d1d6e-d084-4e8d-bb48-c03743e3a2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29204", "type": "seen", "source": "https://t.me/shimiscyberworld/1424", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-12\n\n\ud83d\udcca 99 vulnerabilities detected today \u2014 33 \ud83d\udd34 Critical, 66 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-42869 (10) \u2014 CVE-2026-42869: SOCFortress CoPilot Critical Auth Bypass\n \u2022 CVE-2026-29204 (10) \u2014 CVE-2026-29204: Critical Client Area Vulnerability Exposes\u2026\n \u2022 CVE-2026-42823 (9.9) \u2014 CVE-2026-42823: Critical Privilege Escalation in Azure\u2026\n \u2022 CVE-2026-42898 (9.9) \u2014 Microsoft Dynamics 365 On-Premises Critical Code Injection\u2026\n \u2022 CVE-2025-6577 (9.8) \u2014 Akilli Commerce E-Commerce Website SQLi Vulnerability\u2026\n \u2022 CVE-2026-43992 (9.8) \u2014 CVE-2026-43992: JunoClaw AI Exposes BIP-39 Seeds in Tool\u2026\n \u2022 CVE-2026-26083 (9.8) \u2014 Fortinet FortiSandbox Critical RCE: Unauthenticated\u2026\n \u2022 CVE-2026-41089 (9.8) \u2014 CVE-2026-41089: Critical Netlogon RCE Threatens Windows\u2026\n \u2026 and 25 more\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-41489 (8.8) \u2014 Pi-hole Privilege Escalation via Systemd Scripts\u2026\n \u2022 CVE-2026-7256 (8.8) \u2014 Zyxel WRE6505 v2: High-Severity Command Injection\u2026\n \u2022 CVE-2026-6001 (8.8) \u2014 CVE-2026-6001: ABIS BAPS\u0130S Authorization Bypass Exposes\u2026\n \u2022 CVE-2026-2465 (8.8) \u2014 Turboard FOR-S Privilege Escalation via Incorrect\u2026\n \u2022 CVE-2026-43937 (8.8) \u2014 YetAnotherForum.NET Vulnerability Allows Arbitrary SQL\u2026\n \u2022 CVE-2026-8111 (8.8) \u2014 Ivanti Endpoint Manager RCE via SQL Injection\u2026\n \u2022 CVE-2026-23819 (8.8) \u2014 AOS-10/AOS-8 Instant AP Vulnerability Allows Remote Code\u2026\n \u2022 CVE-2026-8429 (8.8) \u2014 SPIP RCE Vulnerability (CVE-2026-8429) Bypasses Security\u2026\n \u2022 CVE-2026-43888 (8.7) \u2014 Outline Service Vulnerability CVE-2026-43888 Allows\u2026\n \u2022 CVE-2026-43912 (8.7) \u2014 Vaultwarden CVE-2026-43912 Allows Org Data Access via Group\u2026\n \u2026 and 56 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:54.974291Z"} 2026-09-13T00:00:54.974291+00:00 https://vulnerability.circl.lu/sighting/6a8aad13-dc39-4918-8947-7f42056da5d3/export 2026-09-17T10:26:42.609195+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6a8aad13-dc39-4918-8947-7f42056da5d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29204", "type": "seen", "source": "https://t.me/shimiscyberworld/1403", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-29204 \u2014 CVSS 10\nCVE-2026-29204: Critical Client Area Vulnerability Exposes cPanel Accounts\n\nCVE-2026-29204 \u2014 Insufficient ownership checks in `clientarea.php` allow an authenticated client area user to submit requests using another user\u2019s `addonId` without any ownership v\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-29204 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:52.052587Z"} 2026-09-13T00:00:52.052587+00:00 https://vulnerability.circl.lu/sighting/72d62cd8-eeea-4a11-ab15-3868ba1df5d7/export 2026-09-17T10:26:42.609303+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "72d62cd8-eeea-4a11-ab15-3868ba1df5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29014", "type": "seen", "source": "https://t.me/shimiscyberworld/1234", "content": "\ud83d\udd35 SCW \u2502 Daily Intel Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 26 stories curated today from 8 sources\n\n\ud83d\udcf0 Top Stories\n \u2022 Weaver E-cology Critical Bug Exploited in Attacks Since March\n \u2022 ScarCruft Hacks Gaming Platform, Deploys BirdCall Malware on Android\u2026\n \u2022 Trellix Source Code Access Confirmed by Security Vendor\n \u2022 Android Critical RCE Vulnerability Patched in System Component\n \u2022 MetInfo CMS CVE-2026-29014 Exploited for RCE Attacks\n \u2022 EOL Software Creates CVE Blind Spots in SCA Tools\n \u2022 Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS, Potential RCE\n \u2022 DAEMON Tools Supply Chain Attack Compromises Official Installers\n \u2026 and 18 more\n\n\ud83c\udff7 #cyber #security #fujairah_port #handala #vulnerability\n\n\ud83d\udcd6 Read all on SCW \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:35.148535Z"} 2026-09-13T00:00:35.148535+00:00 https://vulnerability.circl.lu/sighting/0bc6b2d5-66c5-479f-b5a6-71773c08dac4/export 2026-09-17T10:26:42.609414+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0bc6b2d5-66c5-479f-b5a6-71773c08dac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:10.534547Z"} 2026-09-13T00:00:10.534547+00:00 https://vulnerability.circl.lu/sighting/d7337009-f77c-45f8-9e59-6ad362994a0f/export 2026-09-17T10:26:42.609542+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d7337009-f77c-45f8-9e59-6ad362994a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29004", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:17.157357Z"} 2026-09-12T10:00:17.157357+00:00 https://vulnerability.circl.lu/sighting/36d6f8b3-36d6-468f-9f47-5ceb046e6b3b/export 2026-09-17T10:26:42.609663+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "36d6f8b3-36d6-468f-9f47-5ceb046e6b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29014", "type": "seen", "source": "https://t.me/shimiscyberworld/1234", "content": "\ud83d\udd35 SCW \u2502 Daily Intel Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 26 stories curated today from 8 sources\n\n\ud83d\udcf0 Top Stories\n \u2022 Weaver E-cology Critical Bug Exploited in Attacks Since March\n \u2022 ScarCruft Hacks Gaming Platform, Deploys BirdCall Malware on Android\u2026\n \u2022 Trellix Source Code Access Confirmed by Security Vendor\n \u2022 Android Critical RCE Vulnerability Patched in System Component\n \u2022 MetInfo CMS CVE-2026-29014 Exploited for RCE Attacks\n \u2022 EOL Software Creates CVE Blind Spots in SCA Tools\n \u2022 Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS, Potential RCE\n \u2022 DAEMON Tools Supply Chain Attack Compromises Official Installers\n \u2026 and 18 more\n\n\ud83c\udff7 #cyber #security #fujairah_port #handala #vulnerability\n\n\ud83d\udcd6 Read all on SCW \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:15.670541Z"} 2026-09-12T10:00:15.670541+00:00 https://vulnerability.circl.lu/sighting/49679baa-0ac6-4d08-8b53-88475921412b/export 2026-09-17T10:26:42.609766+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "49679baa-0ac6-4d08-8b53-88475921412b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29204", "type": "seen", "source": "https://t.me/shimiscyberworld/1403", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-29204 \u2014 CVSS 10\nCVE-2026-29204: Critical Client Area Vulnerability Exposes cPanel Accounts\n\nCVE-2026-29204 \u2014 Insufficient ownership checks in `clientarea.php` allow an authenticated client area user to submit requests using another user\u2019s `addonId` without any ownership v\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-29204 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:06.945586Z"} 2026-09-12T10:00:06.945586+00:00 https://vulnerability.circl.lu/sighting/17544c61-3814-4043-9925-d3df3b72df8e/export 2026-09-17T10:26:42.609869+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "17544c61-3814-4043-9925-d3df3b72df8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29204", "type": "seen", "source": "https://t.me/shimiscyberworld/1424", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-12\n\n\ud83d\udcca 99 vulnerabilities detected today \u2014 33 \ud83d\udd34 Critical, 66 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-42869 (10) \u2014 CVE-2026-42869: SOCFortress CoPilot Critical Auth Bypass\n \u2022 CVE-2026-29204 (10) \u2014 CVE-2026-29204: Critical Client Area Vulnerability Exposes\u2026\n \u2022 CVE-2026-42823 (9.9) \u2014 CVE-2026-42823: Critical Privilege Escalation in Azure\u2026\n \u2022 CVE-2026-42898 (9.9) \u2014 Microsoft Dynamics 365 On-Premises Critical Code Injection\u2026\n \u2022 CVE-2025-6577 (9.8) \u2014 Akilli Commerce E-Commerce Website SQLi Vulnerability\u2026\n \u2022 CVE-2026-43992 (9.8) \u2014 CVE-2026-43992: JunoClaw AI Exposes BIP-39 Seeds in Tool\u2026\n \u2022 CVE-2026-26083 (9.8) \u2014 Fortinet FortiSandbox Critical RCE: Unauthenticated\u2026\n \u2022 CVE-2026-41089 (9.8) \u2014 CVE-2026-41089: Critical Netlogon RCE Threatens Windows\u2026\n \u2026 and 25 more\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-41489 (8.8) \u2014 Pi-hole Privilege Escalation via Systemd Scripts\u2026\n \u2022 CVE-2026-7256 (8.8) \u2014 Zyxel WRE6505 v2: High-Severity Command Injection\u2026\n \u2022 CVE-2026-6001 (8.8) \u2014 CVE-2026-6001: ABIS BAPS\u0130S Authorization Bypass Exposes\u2026\n \u2022 CVE-2026-2465 (8.8) \u2014 Turboard FOR-S Privilege Escalation via Incorrect\u2026\n \u2022 CVE-2026-43937 (8.8) \u2014 YetAnotherForum.NET Vulnerability Allows Arbitrary SQL\u2026\n \u2022 CVE-2026-8111 (8.8) \u2014 Ivanti Endpoint Manager RCE via SQL Injection\u2026\n \u2022 CVE-2026-23819 (8.8) \u2014 AOS-10/AOS-8 Instant AP Vulnerability Allows Remote Code\u2026\n \u2022 CVE-2026-8429 (8.8) \u2014 SPIP RCE Vulnerability (CVE-2026-8429) Bypasses Security\u2026\n \u2022 CVE-2026-43888 (8.7) \u2014 Outline Service Vulnerability CVE-2026-43888 Allows\u2026\n \u2022 CVE-2026-43912 (8.7) \u2014 Vaultwarden CVE-2026-43912 Allows Org Data Access via Group\u2026\n \u2026 and 56 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:05.870696Z"} 2026-09-12T10:00:05.870696+00:00