https://vulnerability.circl.lu/sightings/feed 2026-09-28T17:35:27.477654+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3185af97-037b-411c-a85f-6decdb102bd7/export 2026-09-28T17:35:27.507021+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3185af97-037b-411c-a85f-6decdb102bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ctyisjmolbrf7", "content": "CVE-2026-100886 - Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication\nCVE ID : CVE-2026-100886\n \n Published : Sept. 27, 2026, 11:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4...", "creation_timestamp": "2026-09-28T00:47:19.378128Z"} 2026-09-28T00:47:19.378128+00:00 https://vulnerability.circl.lu/sighting/14299cee-2927-4ae9-9eb8-a5363af57415/export 2026-09-28T17:35:27.509260+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "14299cee-2927-4ae9-9eb8-a5363af57415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwk25kijk22u", "content": "CVE-2026-100886\nThe Seetong T8108, T8108P, T8116 and T8232 units contain a flaw in their troubleshooting (debug) service that can let an attacker skip the normal login check from anywhere on the network. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-28T00:20:04.563321Z"} 2026-09-28T00:20:04.563321+00:00 https://vulnerability.circl.lu/sighting/bc962866-d6c5-4926-917b-e2056a4b0ae1/export 2026-09-28T17:35:27.509396+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bc962866-d6c5-4926-917b-e2056a4b0ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwjzgpjkv62u", "content": "\ud83d\udea8 CVE-2026-100886 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The aff...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100886\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T00:07:18.595460Z"} 2026-09-28T00:07:18.595460+00:00 https://vulnerability.circl.lu/sighting/c8befd3b-b8b3-44c7-94f0-dfd61ce870f4/export 2026-09-28T17:35:27.509505+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c8befd3b-b8b3-44c7-94f0-dfd61ce870f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjz3ypojc27", "content": "\ud83d\udd34 CVE-2026-100886 - Critical (10)\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build20260424101...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100886/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:01:20.453069Z"} 2026-09-28T00:01:20.453069+00:00 https://vulnerability.circl.lu/sighting/0e477d9b-b53e-4335-a2d3-678464e066d2/export 2026-09-28T17:35:27.509614+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0e477d9b-b53e-4335-a2d3-678464e066d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwjz2sebua2b", "content": "Seetong T8108 series faces CRITICAL CVE-2026-100886: remote unauthenticated access possible due to improper authentication (v4.6.1.4). No patch \u2014 restrict device access immediately. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #...", "creation_timestamp": "2026-09-28T00:00:38.878702Z"} 2026-09-28T00:00:38.878702+00:00 https://vulnerability.circl.lu/sighting/d8793f45-a161-4541-963c-6776defb78fe/export 2026-09-28T17:35:27.509716+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d8793f45-a161-4541-963c-6776defb78fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117345723098081984", "content": "Seetong T8108 series (v4.6.1.4-build202604241011) hit by CRITICAL CVE-2026-100886: improper authentication in Debug Service. Exploitable remotely \u2014 public exploit code available. No patch. Restrict network access ASAP. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #CVE2026100886 #IoTSecurity #Vuln", "creation_timestamp": "2026-09-28T00:00:37.025968Z"} 2026-09-28T00:00:37.025968+00:00 https://vulnerability.circl.lu/sighting/261fe31c-07eb-41ae-ac71-8ba9c6a44a3c/export 2026-09-28T17:35:27.509826+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "261fe31c-07eb-41ae-ac71-8ba9c6a44a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://gist.github.com/ichintu/0739db6c0846cb8d7c608bff5afb2d43", "content": "This September 27, 2026 threat intelligence briefing covers four newly disclosed vulnerabilities and a community security discussion:\n\n\u2022 **Seetong T8108 Series (CVE-2026-100886):** Critical (10.0) remote debug service improper authentication flaw. Exploit is public and the vendor remains unresponsive.\n\u2022 **Nezha \u22642.2.3 (CVE-2026-101090):** Critical (9.8) OAuth2 host header injection that reflects attacker-controlled URLs, enabling account takeover. No patch currently available.\n\u2022 **Obot \u2264v0.22.1 (4 CVEs):** Four high-to-critical (8.3\u20139.8) vulnerabilities, including unauthenticated admin access via Docker quickstart misconfiguration, OAuth/authorization bypasses, and SSRF via MCP registration. Remediation involves updating to v0.23.0 or explicitly enabling authentication.\n\u2022 **Community Discussion:** A Reddit thread explores budget-friendly (~$300) strategies for building a highly private, secure digital workspace from scratch.", "creation_timestamp": "2026-09-28T00:00:34.000000Z"} 2026-09-28T00:00:34+00:00