<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-23T17:07:10.575658+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/efcde825-cd05-4af0-a2cc-f4cfe1462bd6/export</id>
    <title>efcde825-cd05-4af0-a2cc-f4cfe1462bd6</title>
    <updated>2026-06-23T17:07:10.597999+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "efcde825-cd05-4af0-a2cc-f4cfe1462bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10521", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116798271507262478", "content": "#OT #Advisory VDE-2026-068MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24\nThere is a vulnerability in mbCONNECT24/mymbCONNECT24 that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.#CVE CVE-2026-10521\nhttps://certvde.com/en/advisories/vde-2026-068/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-068.json", "creation_timestamp": "2026-06-23T07:36:29.174103Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/efcde825-cd05-4af0-a2cc-f4cfe1462bd6/export"/>
    <published>2026-06-23T07:36:29.174103+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7740c096-e274-461a-832e-2cd13c133e10/export</id>
    <title>7740c096-e274-461a-832e-2cd13c133e10</title>
    <updated>2026-06-23T17:07:10.596811+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7740c096-e274-461a-832e-2cd13c133e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10521", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116798307883543003", "content": "#OT #Advisory VDE-2026-070Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual\nThere is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.#CVE CVE-2026-10521\nhttps://certvde.com/en/advisories/vde-2026-070/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-070.json", "creation_timestamp": "2026-06-23T07:45:43.319734Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7740c096-e274-461a-832e-2cd13c133e10/export"/>
    <published>2026-06-23T07:45:43.319734+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/26704caa-67d1-4dfd-8652-5f89da3a23d8/export</id>
    <title>26704caa-67d1-4dfd-8652-5f89da3a23d8</title>
    <updated>2026-06-23T17:07:10.596510+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "26704caa-67d1-4dfd-8652-5f89da3a23d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10521", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moxbtbxh4y2q", "content": "CVE-2026-10521 - Authenticated unintended access to critical program parameters\nCVE ID : CVE-2026-10521\n \n Published : 23 juin 2026 07:34 | 2\u00a0heures, 9\u00a0minutes ago\n \n Description : An high privileged remote attacker can access a hidden configuration method, that should not be ...", "creation_timestamp": "2026-06-23T11:20:33.634650Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/26704caa-67d1-4dfd-8652-5f89da3a23d8/export"/>
    <published>2026-06-23T11:20:33.634650+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5971fe8c-aab2-47d8-8d84-9b894d2a2b18/export</id>
    <title>5971fe8c-aab2-47d8-8d84-9b894d2a2b18</title>
    <updated>2026-06-23T17:07:10.596132+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5971fe8c-aab2-47d8-8d84-9b894d2a2b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10521", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116799310216975861", "content": "CVE-2026-10521 (HIGH, CVSS 8.6) in mbCONNECT24: Remote attackers with high privileges can access hidden configs, risking full system compromise. No patch yet \u2014 restrict access &amp;amp; monitor vendor updates. https://radar.offseq.com/threat/cve-2026-10521-cwe-425-direct-request-forced-brows-d20bd7167efa941e #OffSeq #Vulnerability #ICS #Security", "creation_timestamp": "2026-06-23T12:00:38.718609Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5971fe8c-aab2-47d8-8d84-9b894d2a2b18/export"/>
    <published>2026-06-23T12:00:38.718609+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8704278a-1132-4fdc-a900-0e3997fb3f55/export</id>
    <title>8704278a-1132-4fdc-a900-0e3997fb3f55</title>
    <updated>2026-06-23T17:07:10.592489+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8704278a-1132-4fdc-a900-0e3997fb3f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10521", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moxe2yd2da2o", "content": "CVE-2026-10521: HIGH severity flaw in MB connect line mbCONNECT24 lets privileged attackers access hidden config methods, risking total system compromise. No patch \u2014 restrict access, monitor advisories. https://radar.offseq.com/threat/cve-2026-10521-cwe-425-direct-request-forced-brows-d20bd7167ef...", "creation_timestamp": "2026-06-23T12:00:39.570684Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8704278a-1132-4fdc-a900-0e3997fb3f55/export"/>
    <published>2026-06-23T12:00:39.570684+00:00</published>
  </entry>
</feed>
