<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-16T21:06:11.664892+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8e143a99-b230-4bfd-ada8-9e731b4691a0/export</id>
    <title>8e143a99-b230-4bfd-ada8-9e731b4691a0</title>
    <updated>2026-06-16T21:06:11.670803+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8e143a99-b230-4bfd-ada8-9e731b4691a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofschtphv2l", "content": "Also watch the KEV layer.\n\nCISA added Cisco Catalyst SD-WAN Manager CVE-2026-20262 and LiteSpeed cPanel Plugin CVE-2026-54420 on June 15.\n\nCisco = enterprise control plane risk.\nLiteSpeed = shared hosting blast radius.\n\nRefs:\nwww.cisa.gov/sites/defaul...\nsec.cloudapps.cisco.com/security/cen...", "creation_timestamp": "2026-06-16T12:27:37.598413Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8e143a99-b230-4bfd-ada8-9e731b4691a0/export"/>
    <published>2026-06-16T12:27:37.598413+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aae907cd-2a8f-4589-94d2-2b4ef3dd788d/export</id>
    <title>aae907cd-2a8f-4589-94d2-2b4ef3dd788d</title>
    <updated>2026-06-16T21:06:11.670517+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aae907cd-2a8f-4589-94d2-2b4ef3dd788d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofscijst42t", "content": "References:\n\n- Mandiant/GTIG: PRC targets US medical research: cloud.google.com/blog/topics/...\n- Mandiant X post: x.com/Mandiant/sta...\n- CISA KEV catalog: www.cisa.gov/sites/defaul...\n- Cisco advisory CVE-2026-20262: sec.cloudapps.cisco.com/security/cen...", "creation_timestamp": "2026-06-16T12:27:38.562618Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aae907cd-2a8f-4589-94d2-2b4ef3dd788d/export"/>
    <published>2026-06-16T12:27:38.562618+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9d1b0b3e-07d8-47fa-bdda-b40218f5ebdc/export</id>
    <title>9d1b0b3e-07d8-47fa-bdda-b40218f5ebdc</title>
    <updated>2026-06-16T21:06:11.670440+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9d1b0b3e-07d8-47fa-bdda-b40218f5ebdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3moftlamm7t23", "content": "CVE-2026-20262 in Cisco SD-WAN Manager: authenticated attackers can upload malicious files and escalate to root, controlling traffic routing and segmentation across your entire enterprise network. #infosec #cybersecurity", "creation_timestamp": "2026-06-16T12:50:15.613871Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9d1b0b3e-07d8-47fa-bdda-b40218f5ebdc/export"/>
    <published>2026-06-16T12:50:15.613871+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aa9b6008-5264-4493-8f0b-689c9fdd00fb/export</id>
    <title>aa9b6008-5264-4493-8f0b-689c9fdd00fb</title>
    <updated>2026-06-16T21:06:11.670369+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aa9b6008-5264-4493-8f0b-689c9fdd00fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mofugnjtkh23", "content": "CRITICAL: Cisco Catalyst SD-WAN Manager CVE-2026-20262 is under active exploitation. Path traversal flaw allows unauthorized file access. Review our TSUITE forensic intelligence brief to secure your SD-WAN perimeter and prevent persistence https://thecybermind.co/jt3x", "creation_timestamp": "2026-06-16T13:05:35.799962Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aa9b6008-5264-4493-8f0b-689c9fdd00fb/export"/>
    <published>2026-06-16T13:05:35.799962+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2f138adc-14e6-4195-bd60-2500003f1315/export</id>
    <title>2f138adc-14e6-4195-bd60-2500003f1315</title>
    <updated>2026-06-16T21:06:11.670293+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2f138adc-14e6-4195-bd60-2500003f1315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mofukgpwttx2", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation Cisco warned that CVE-2026-20262, a Catalyst SD-WAN Manager vulnerability allowing arbitrary file writes, is being acti...\n\n#Breaking #News #Hacking #Security #Catalyst #SD-WAN #CISCO #hacking #news #information [\u2026]", "creation_timestamp": "2026-06-16T13:07:47.315584Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2f138adc-14e6-4195-bd60-2500003f1315/export"/>
    <published>2026-06-16T13:07:47.315584+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/33960ec0-a367-4696-a57e-3cb5be9f30a1/export</id>
    <title>33960ec0-a367-4696-a57e-3cb5be9f30a1</title>
    <updated>2026-06-16T21:06:11.670219+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "33960ec0-a367-4696-a57e-3cb5be9f30a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mofw5a7jtc26", "content": "Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write. www.securityweek.com/cisco-patche...", "creation_timestamp": "2026-06-16T13:36:08.381137Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/33960ec0-a367-4696-a57e-3cb5be9f30a1/export"/>
    <published>2026-06-16T13:36:08.381137+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/40bb251e-7ac6-49b4-bcd8-7aaf5438f33b/export</id>
    <title>40bb251e-7ac6-49b4-bcd8-7aaf5438f33b</title>
    <updated>2026-06-16T21:06:11.670146+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "40bb251e-7ac6-49b4-bcd8-7aaf5438f33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mog72ep6fe2r", "content": "~Cybergcca~\nCisco Catalyst SD-WAN Manager and multiple Fortinet products have actively exploited vulnerabilities.\n-\nIOCs: CVE-2026-20262, CVE-2026-39813, CVE-2026-39808\n-\n#Cisco #Fortinet #ThreatIntel", "creation_timestamp": "2026-06-16T16:15:34.487509Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/40bb251e-7ac6-49b4-bcd8-7aaf5438f33b/export"/>
    <published>2026-06-16T16:15:34.487509+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c54f7f0-916b-4094-8edc-a85b2b67bc2d/export</id>
    <title>6c54f7f0-916b-4094-8edc-a85b2b67bc2d</title>
    <updated>2026-06-16T21:06:11.670069+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6c54f7f0-916b-4094-8edc-a85b2b67bc2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3moge46jgbs2h", "content": "Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks\n\nCisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges. [...]\n#hackernews #news", "creation_timestamp": "2026-06-16T17:46:04.693768Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c54f7f0-916b-4094-8edc-a85b2b67bc2d/export"/>
    <published>2026-06-16T17:46:04.693768+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/89c074b8-5b7c-48d7-b850-158328b5494b/export</id>
    <title>89c074b8-5b7c-48d7-b850-158328b5494b</title>
    <updated>2026-06-16T21:06:11.669969+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "89c074b8-5b7c-48d7-b850-158328b5494b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moggxx22g625", "content": "\u26a0\ufe0f Cisco Catalyst SD-WAN Manager flaw CVE-2026-20262 is actively exploited! The bug allows root privilege escalation. CISA has added it to the KEV catalog, mandating a patch by June 29. Update now! #Cisco #CVE #CyberSecurity #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-16T18:37:23.932315Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/89c074b8-5b7c-48d7-b850-158328b5494b/export"/>
    <published>2026-06-16T18:37:23.932315+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7adf95b7-7b35-4b88-a12f-293e4037adc3/export</id>
    <title>7adf95b7-7b35-4b88-a12f-293e4037adc3</title>
    <updated>2026-06-16T21:06:11.668763+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7adf95b7-7b35-4b88-a12f-293e4037adc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20262", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mogofuhywf2k", "content": "\ud83d\udc1b VULNERABILITIES Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/06/16/cisco-sd-wan-cve-2026-20262-exploited/ #InfoSec #CyberSecurity", "creation_timestamp": "2026-06-16T20:50:26.213345Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7adf95b7-7b35-4b88-a12f-293e4037adc3/export"/>
    <published>2026-06-16T20:50:26.213345+00:00</published>
  </entry>
</feed>
