<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-20T21:52:59.714310+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3b5515f4-48a0-492e-ae42-27d749402439/export</id>
    <title>3b5515f4-48a0-492e-ae42-27d749402439</title>
    <updated>2026-09-20T21:52:59.728058+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3b5515f4-48a0-492e-ae42-27d749402439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36213", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102840", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36213-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a g17hubH4ck\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 09:55:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-36213: MEmu Android Emulator 9.2.7.0 Local Privilege Escalation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T12:00:06.052283Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3b5515f4-48a0-492e-ae42-27d749402439/export"/>
    <published>2026-09-20T12:00:06.052283+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aedb87d8-df6c-44ca-a7a7-41fba718a3b1/export</id>
    <title>aedb87d8-df6c-44ca-a7a7-41fba718a3b1</title>
    <updated>2026-09-20T21:52:59.730755+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aedb87d8-df6c-44ca-a7a7-41fba718a3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36453", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvgpffh7vv23", "content": "Rhymix 2.1.31\u672a\u6e80\u3067\u3001\u30d5\u30a1\u30a4\u30eb\u306b\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3055\u308c\u308b\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u5916\u90e8\u5909\u6570\u3092\u4ecb\u3057\u3066\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3002\nCVE-2026-36453 CVSS 7.4 | HIGH", "creation_timestamp": "2026-09-13T23:04:26.495815Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aedb87d8-df6c-44ca-a7a7-41fba718a3b1/export"/>
    <published>2026-09-13T23:04:26.495815+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0d64c2d9-3886-4fd6-a4dc-f20642b334dc/export</id>
    <title>0d64c2d9-3886-4fd6-a4dc-f20642b334dc</title>
    <updated>2026-09-20T21:52:59.730888+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0d64c2d9-3886-4fd6-a4dc-f20642b334dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36433", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6fpy6fdq2y", "content": "CVE-2026-36433\nThe Media Player Utilities version 4.46 can be tricked by someone standing close to the computer into running any code they choose, using its Production.dll and RdiskUpgrade.exe files. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-10T15:50:05.395135Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0d64c2d9-3886-4fd6-a4dc-f20642b334dc/export"/>
    <published>2026-09-10T15:50:05.395135+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a3c30b59-64da-4314-98d4-b630a968428a/export</id>
    <title>a3c30b59-64da-4314-98d4-b630a968428a</title>
    <updated>2026-09-20T21:52:59.730997+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a3c30b59-64da-4314-98d4-b630a968428a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3688", "type": "seen", "source": "https://bsky.app/profile/lbtoday1.bsky.social/post/3mv3bqibz7b2w", "content": "The hacking community was abuzz last week with news of a zero-day vulnerability in Google Chrome's V8 JavaScript engine being exploited in the wild. The vulnerability, tracked as CVE-2026-3688, affects Chrome versions 91 and older. Ormandy disclosed the bug to Google, and the tech giant released a.", "creation_timestamp": "2026-09-09T10:00:48.237226Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a3c30b59-64da-4314-98d4-b630a968428a/export"/>
    <published>2026-09-09T10:00:48.237226+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d535629e-2656-4be8-a3fe-e9be859210d5/export</id>
    <title>d535629e-2656-4be8-a3fe-e9be859210d5</title>
    <updated>2026-09-20T21:52:59.731096+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d535629e-2656-4be8-a3fe-e9be859210d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/192749", "content": "AxHunter \u2014 Updated!\n\nPoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).\nRead more...", "creation_timestamp": "2026-09-07T01:00:13.156248Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d535629e-2656-4be8-a3fe-e9be859210d5/export"/>
    <published>2026-09-07T01:00:13.156248+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/141ac172-a6ff-47f5-8257-f2b22fe33870/export</id>
    <title>141ac172-a6ff-47f5-8257-f2b22fe33870</title>
    <updated>2026-09-20T21:52:59.731194+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "141ac172-a6ff-47f5-8257-f2b22fe33870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://t.me/hacking_Attack/192742", "content": "BAS-Guardian \u2014 Updated!\n\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\nRead more...", "creation_timestamp": "2026-09-07T01:00:12.863192Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/141ac172-a6ff-47f5-8257-f2b22fe33870/export"/>
    <published>2026-09-07T01:00:12.863192+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/53531d92-6c76-4a08-9dd0-ab0bb3ccfe2a/export</id>
    <title>53531d92-6c76-4a08-9dd0-ab0bb3ccfe2a</title>
    <updated>2026-09-20T21:52:59.731292+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "53531d92-6c76-4a08-9dd0-ab0bb3ccfe2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/192749", "content": "AxHunter \u2014 Updated!\n\nPoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).\nRead more...", "creation_timestamp": "2026-09-06T14:00:05.492983Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/53531d92-6c76-4a08-9dd0-ab0bb3ccfe2a/export"/>
    <published>2026-09-06T14:00:05.492983+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ec8d04a9-8cca-4fa8-b63b-1a402d68cf66/export</id>
    <title>ec8d04a9-8cca-4fa8-b63b-1a402d68cf66</title>
    <updated>2026-09-20T21:52:59.731397+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ec8d04a9-8cca-4fa8-b63b-1a402d68cf66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3611", "type": "seen", "source": "https://t.me/hacking_Attack/192742", "content": "BAS-Guardian \u2014 Updated!\n\nFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS controllers via PowerShell or Bash.\nRead more...", "creation_timestamp": "2026-09-06T14:00:05.138749Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ec8d04a9-8cca-4fa8-b63b-1a402d68cf66/export"/>
    <published>2026-09-06T14:00:05.138749+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/795132b2-a0a3-448a-b34c-4cb181f40239/export</id>
    <title>795132b2-a0a3-448a-b34c-4cb181f40239</title>
    <updated>2026-09-20T21:52:59.731494+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "795132b2-a0a3-448a-b34c-4cb181f40239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36669", "type": "published-proof-of-concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "content": "", "creation_timestamp": "2026-09-06T00:00:46.984063Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/795132b2-a0a3-448a-b34c-4cb181f40239/export"/>
    <published>2026-09-06T00:00:46.984063+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c17d59bd-b6c7-4d44-873e-a54294f18066/export</id>
    <title>c17d59bd-b6c7-4d44-873e-a54294f18066</title>
    <updated>2026-09-20T21:52:59.731592+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c17d59bd-b6c7-4d44-873e-a54294f18066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36669", "type": "published-proof-of-concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "content": "", "creation_timestamp": "2026-09-05T13:00:04.894278Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c17d59bd-b6c7-4d44-873e-a54294f18066/export"/>
    <published>2026-09-05T13:00:04.894278+00:00</published>
  </entry>
</feed>
