https://vulnerability.circl.lu/sightings/feed 2026-09-20T07:33:15.339857+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/918f0622-0f36-4b25-84e0-281d837f18cf/export 2026-09-20T07:33:15.365453+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "918f0622-0f36-4b25-84e0-281d837f18cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-42018.yaml", "content": "", "creation_timestamp": "2026-09-20T00:00:03.908346Z"} 2026-09-20T00:00:03.908346+00:00 https://vulnerability.circl.lu/sighting/e51b21c4-6b37-46a7-be00-2a80303c0134/export 2026-09-20T07:33:15.368255+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e51b21c4-6b37-46a7-be00-2a80303c0134", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42796", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c02771e9-d70b-4c34-bcba-04562a8fb702", "content": "", "creation_timestamp": "2026-09-19T11:00:42.769543Z"} 2026-09-19T11:00:42.769543+00:00 https://vulnerability.circl.lu/sighting/fc69e020-b59d-46cc-a813-e4ad4fc5af30/export 2026-09-20T07:33:15.368391+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fc69e020-b59d-46cc-a813-e4ad4fc5af30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42271", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-18)", "content": "", "creation_timestamp": "2026-09-19T10:15:07.133923Z"} 2026-09-19T10:15:07.133923+00:00 https://vulnerability.circl.lu/sighting/3c5d1106-3256-4a7c-a7a6-b8dd8253a989/export 2026-09-20T07:33:15.368501+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3c5d1106-3256-4a7c-a7a6-b8dd8253a989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42897", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42512", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/15/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:46.357574Z"} 2026-09-19T00:00:46.357574+00:00 https://vulnerability.circl.lu/sighting/f38663cc-e569-45ff-9a35-a6dcf404a5ac/export 2026-09-20T07:33:15.368610+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f38663cc-e569-45ff-9a35-a6dcf404a5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42945", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42524", "content": "NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE\n\nA newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days after its public disclosure, according to VulnCheck.\nThe vulnerability, tracked as CVE-2026-42945 (CVSS score: 9.2), is a heap buffer overflow in ngx_http_rewrite_module affecting NGINX versions 0.6.27 through 1.30.0. According to AI-native security company depthfirst, the\nhttps://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.html", "creation_timestamp": "2026-09-19T00:00:46.305848Z"} 2026-09-19T00:00:46.305848+00:00 https://vulnerability.circl.lu/sighting/cda563ed-6c20-482a-bb62-3d3d9942f27c/export 2026-09-20T07:33:15.368708+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cda563ed-6c20-482a-bb62-3d3d9942f27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42208", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42398", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added\u00a0one\u00a0new vulnerability\u00a0to its\u00a0Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-42208\u00a0BerriAI\u00a0LiteLLM\u00a0SQL Injection Vulnerability\nThis\u00a0type\u00a0of vulnerability is a\u00a0frequent attack vector\u00a0for malicious cyber actors and poses\u00a0significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/08/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:44.893768Z"} 2026-09-19T00:00:44.893768+00:00 https://vulnerability.circl.lu/sighting/b509694b-bc6a-401a-80a8-bb0144e9916d/export 2026-09-20T07:33:15.368819+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b509694b-bc6a-401a-80a8-bb0144e9916d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42533", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/43547", "content": "Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution\n\nF5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.\n\nTriggering it can crash or restart the worker, causing a denial of\nhttps://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html", "creation_timestamp": "2026-09-19T00:00:43.007520Z"} 2026-09-19T00:00:43.007520+00:00 https://vulnerability.circl.lu/sighting/fa5f70b0-a174-4d64-9d5e-937d52c7b980/export 2026-09-20T07:33:15.368934+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fa5f70b0-a174-4d64-9d5e-937d52c7b980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42897", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42506", "content": "Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild\n\nMicrosoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions.\nThe post Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/microsoft-warns-of-exchange-server-zero-day-exploited-in-the-wild/", "creation_timestamp": "2026-09-19T00:00:41.866911Z"} 2026-09-19T00:00:41.866911+00:00 https://vulnerability.circl.lu/sighting/210a2c4a-240b-4bc1-aeed-ef798289de59/export 2026-09-20T07:33:15.369031+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "210a2c4a-240b-4bc1-aeed-ef798289de59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42897", "type": "published-proof-of-concept", "source": "Telegram/0TYm20Si6i9ATjKMTFhXmrxNMpb5Q10R_tUfUFsZfOykYXE", "content": "", "creation_timestamp": "2026-09-19T00:00:13.068216Z"} 2026-09-19T00:00:13.068216+00:00 https://vulnerability.circl.lu/sighting/f938df0a-fd8b-47d5-a482-ff3049b0c6ec/export 2026-09-20T07:33:15.369132+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f938df0a-fd8b-47d5-a482-ff3049b0c6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-42018.yaml", "content": "", "creation_timestamp": "2026-09-19T00:00:03.908862Z"} 2026-09-19T00:00:03.908862+00:00