<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T09:59:07.478866+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7247eb91-b3d2-45a4-ba9f-fa9a01810325/export</id>
    <title>7247eb91-b3d2-45a4-ba9f-fa9a01810325</title>
    <updated>2026-09-17T09:59:07.486132+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7247eb91-b3d2-45a4-ba9f-fa9a01810325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/EnefVat-4pmSVJwsEenGGPQIdPVwU23eA8t3s7zWM6ulnvI", "content": "", "creation_timestamp": "2026-09-17T07:00:03.816633Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7247eb91-b3d2-45a4-ba9f-fa9a01810325/export"/>
    <published>2026-09-17T07:00:03.816633+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/219a2e71-f1cb-4883-a2c9-47404300b482/export</id>
    <title>219a2e71-f1cb-4883-a2c9-47404300b482</title>
    <updated>2026-09-17T09:59:07.489204+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "219a2e71-f1cb-4883-a2c9-47404300b482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40854", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281215010783373", "content": "Vulnerabilities in a 5g router from T-Mobile, the company known for its security?! I'm shocked. Shocked! Well, not that shocked.\nhttps://cert.pl/posts/2026/09/CVE-2026-40854/\n#internetOfShit #miraiWillNeverDie#jobSecurityForSomeone", "creation_timestamp": "2026-09-16T14:35:21.637466Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/219a2e71-f1cb-4883-a2c9-47404300b482/export"/>
    <published>2026-09-16T14:35:21.637466+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/626dc0c9-2bcc-4810-b800-d62fc082078b/export</id>
    <title>626dc0c9-2bcc-4810-b800-d62fc082078b</title>
    <updated>2026-09-17T09:59:07.489346+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "626dc0c9-2bcc-4810-b800-d62fc082078b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvncslrkgs2t", "content": "\ud83d\udea8 CVE-2026-40855 \u2014 CVSS 9.3 CRITICAL\n\nWNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping f...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-40855\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T14:07:48.158437Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/626dc0c9-2bcc-4810-b800-d62fc082078b/export"/>
    <published>2026-09-16T14:07:48.158437+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/154d58df-387c-4a6c-af3e-3c82de6f59b4/export</id>
    <title>154d58df-387c-4a6c-af3e-3c82de6f59b4</title>
    <updated>2026-09-17T09:59:07.489454+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "154d58df-387c-4a6c-af3e-3c82de6f59b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i76akdyx2nbvn", "content": "CVE-2026-40857 - CSRF token bypass in T-Mobile 5G Box IDU routers\nCVE ID : CVE-2026-40857\n \n Published : Sept. 16, 2026, 11:21 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal....", "creation_timestamp": "2026-09-16T13:08:05.656002Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/154d58df-387c-4a6c-af3e-3c82de6f59b4/export"/>
    <published>2026-09-16T13:08:05.656002+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/393e85ae-a699-43df-a916-54d57a3c6c30/export</id>
    <title>393e85ae-a699-43df-a916-54d57a3c6c30</title>
    <updated>2026-09-17T09:59:07.489567+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "393e85ae-a699-43df-a916-54d57a3c6c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5aebau6pcvdwa", "content": "CVE-2026-40856 - Config disclosure in T-Mobile 5G Box IDU routers\nCVE ID : CVE-2026-40856\n \n Published : Sept. 16, 2026, 11:21 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the...", "creation_timestamp": "2026-09-16T13:02:01.951771Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/393e85ae-a699-43df-a916-54d57a3c6c30/export"/>
    <published>2026-09-16T13:02:01.951771+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1bd29b88-cf8f-4b6e-8595-cb9582f94608/export</id>
    <title>1bd29b88-cf8f-4b6e-8595-cb9582f94608</title>
    <updated>2026-09-17T09:59:07.489674+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "1bd29b88-cf8f-4b6e-8595-cb9582f94608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40856", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:45:09.589944Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1bd29b88-cf8f-4b6e-8595-cb9582f94608/export"/>
    <published>2026-09-16T12:45:09.589944+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c1ed5af4-05cf-4fc4-a924-68aa44dea1c6/export</id>
    <title>c1ed5af4-05cf-4fc4-a924-68aa44dea1c6</title>
    <updated>2026-09-17T09:59:07.491501+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "c1ed5af4-05cf-4fc4-a924-68aa44dea1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:45:07.730112Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c1ed5af4-05cf-4fc4-a924-68aa44dea1c6/export"/>
    <published>2026-09-16T12:45:07.730112+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4fcb4a89-e074-42a6-9c6e-ba1507f456f4/export</id>
    <title>4fcb4a89-e074-42a6-9c6e-ba1507f456f4</title>
    <updated>2026-09-17T09:59:07.491646+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4fcb4a89-e074-42a6-9c6e-ba1507f456f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvn5vrq7pl2j", "content": "CVE-2026-40855 - t-mobile 5g box idu\nThe T-Mobile 5G Box IDU router\u2019s ping feature can be tricked into running any command the attacker supplies. An attacker who can log in could gain full control of the device. Upgrade\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wnc #CVE #infosec", "creation_timestamp": "2026-09-16T12:40:07.209508Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4fcb4a89-e074-42a6-9c6e-ba1507f456f4/export"/>
    <published>2026-09-16T12:40:07.209508+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c0b2b5c-f699-4bc8-8cb3-04162950a9c1/export</id>
    <title>6c0b2b5c-f699-4bc8-8cb3-04162950a9c1</title>
    <updated>2026-09-17T09:59:07.491760+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "6c0b2b5c-f699-4bc8-8cb3-04162950a9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40857", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:15:08.417114Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c0b2b5c-f699-4bc8-8cb3-04162950a9c1/export"/>
    <published>2026-09-16T12:15:08.417114+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/46e3ab10-20f4-42e9-bb06-28e305bcd8ad/export</id>
    <title>46e3ab10-20f4-42e9-bb06-28e305bcd8ad</title>
    <updated>2026-09-17T09:59:07.491868+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "46e3ab10-20f4-42e9-bb06-28e305bcd8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40854", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:15:06.324015Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/46e3ab10-20f4-42e9-bb06-28e305bcd8ad/export"/>
    <published>2026-09-16T12:15:06.324015+00:00</published>
  </entry>
</feed>
