https://vulnerability.circl.lu/sightings/feed 2026-09-01T16:24:01.517001+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/291a1b90-fc23-4b6d-8444-79b7dc592e81/export 2026-09-01T16:24:01.538260+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "291a1b90-fc23-4b6d-8444-79b7dc592e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/pphm_HackerNews/2590", "content": "\ud83d\udd34 Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\n\nCisco informed customers on Tuesday that it has released patches for a zero-day vulnerability affecting firewalls running Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software.\n\nThe security hole, tracked as CVE-2026-20349, is related to the processing of HTTP requests. \n\nA remote, unauthenticated attacker can cause an appliance to reload and enter a denial-of-service (DoS) condition by sending a specially crafted HTTP request to the Remote Access SSL VPN service. \n\nThe vulnerability was discovered internally by Cisco and also reported by an external researcher.", "creation_timestamp": "2026-08-23T00:00:47.070592Z"} 2026-08-23T00:00:47.070592+00:00 https://vulnerability.circl.lu/sighting/501445bb-7e0a-4c81-9c78-e81fa7ffb0be/export 2026-09-01T16:24:01.540333+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "501445bb-7e0a-4c81-9c78-e81fa7ffb0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/pphm_HackerNews/2590", "content": "\ud83d\udd34 Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\n\nCisco informed customers on Tuesday that it has released patches for a zero-day vulnerability affecting firewalls running Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software.\n\nThe security hole, tracked as CVE-2026-20349, is related to the processing of HTTP requests. \n\nA remote, unauthenticated attacker can cause an appliance to reload and enter a denial-of-service (DoS) condition by sending a specially crafted HTTP request to the Remote Access SSL VPN service. \n\nThe vulnerability was discovered internally by Cisco and also reported by an external researcher.", "creation_timestamp": "2026-08-22T00:00:10.166221Z"} 2026-08-22T00:00:10.166221+00:00 https://vulnerability.circl.lu/sighting/99a842e4-826f-4b77-8f50-1c5b66bafea2/export 2026-09-01T16:24:01.540473+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "99a842e4-826f-4b77-8f50-1c5b66bafea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/pphm_HackerNews/2590", "content": "\ud83d\udd34 Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\n\nCisco informed customers on Tuesday that it has released patches for a zero-day vulnerability affecting firewalls running Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software.\n\nThe security hole, tracked as CVE-2026-20349, is related to the processing of HTTP requests. \n\nA remote, unauthenticated attacker can cause an appliance to reload and enter a denial-of-service (DoS) condition by sending a specially crafted HTTP request to the Remote Access SSL VPN service. \n\nThe vulnerability was discovered internally by Cisco and also reported by an external researcher.", "creation_timestamp": "2026-08-21T23:00:06.435499Z"} 2026-08-21T23:00:06.435499+00:00 https://vulnerability.circl.lu/sighting/34a17f0a-7508-47d6-aa10-4d1efb54071f/export 2026-09-01T16:24:01.540591+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "34a17f0a-7508-47d6-aa10-4d1efb54071f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mtg4byhgau2y", "content": "\ud83d\udc1b Vuln\u00e9rabilit\u00e9s : Cisco CVE-2026-20349 activement exploit\u00e9e (DoS) https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1010/ ; PostgreSQL : RCE possible, patch dispo. https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1024/", "creation_timestamp": "2026-08-19T06:32:07.164117Z"} 2026-08-19T06:32:07.164117+00:00 https://vulnerability.circl.lu/sighting/c5a5083a-0fa5-44a2-966b-f5a36b47a2f9/export 2026-09-01T16:24:01.540696+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c5a5083a-0fa5-44a2-966b-f5a36b47a2f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mte3qcsy6e2c", "content": "Here we go again, as Cisco Secure Firewall ASA and FTD deployments take an unprompted nap thanks to CVE-2026-20349. Unauthenticated miscreants are happily crashing Remote Access SSL VPN services because someone forgot basic HTTP error handling. If your enterprise perimeter is cur...\n\nRead full story", "creation_timestamp": "2026-08-18T11:16:54.425963Z"} 2026-08-18T11:16:54.425963+00:00 https://vulnerability.circl.lu/sighting/5b6fa221-6d83-4e09-9dbf-baf6ae649044/export 2026-09-01T16:24:01.540797+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5b6fa221-6d83-4e09-9dbf-baf6ae649044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mtdlqs7cdw25", "content": "\ud83d\udd13 Vuln\u00e9rabilit\u00e9s (CERT-FR) :\n\u2022 Cisco : CVE-2026-20349 activement exploit\u00e9e\n\u2022 OpenSSH : multiples vuln\u00e9rabilit\u00e9s\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1010/\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0997/", "creation_timestamp": "2026-08-18T06:30:50.568657Z"} 2026-08-18T06:30:50.568657+00:00 https://vulnerability.circl.lu/sighting/259310b2-3427-4b92-9f7e-35270997a686/export 2026-09-01T16:24:01.540899+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "259310b2-3427-4b92-9f7e-35270997a686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/trinity.sh/post/3mtb5dkiqmn2s", "content": "Cisco ASA/FTD SSL VPN DoS (CVE-2026-20349, CVSS 8.6) is in CISA KEV, 3 days past their due date. Unauthenticated device reload on any internet-facing firewall with SSL VPN enabled.\n\nDeep dive:", "creation_timestamp": "2026-08-17T07:07:34.477576Z"} 2026-08-17T07:07:34.477576+00:00 https://vulnerability.circl.lu/sighting/67bb2546-1202-4b00-912c-5bd6ffc4fe69/export 2026-09-01T16:24:01.540998+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "67bb2546-1202-4b00-912c-5bd6ffc4fe69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtaoo6jumm2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 40 interactions\nCVE-2026-59310: 37 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-33696: 5 interactions\nCVE-2026-17581: 3 interactions\nCVE-2026-14498: 2 interactions\n", "creation_timestamp": "2026-08-17T02:45:05.932868Z"} 2026-08-17T02:45:05.932868+00:00 https://vulnerability.circl.lu/sighting/4eafdbff-a41e-4fc2-998b-574addfb762b/export 2026-09-01T16:24:01.541098+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4eafdbff-a41e-4fc2-998b-574addfb762b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 39 interactions\nCVE-2026-59310: 36 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14484: 3 interactions\nCVE-2026-19900: 3 interactions\nCVE-2026-65400: 3 interactions\n", "creation_timestamp": "2026-08-16T02:45:24.972722Z"} 2026-08-16T02:45:24.972722+00:00 https://vulnerability.circl.lu/sighting/3d3441df-0724-4f99-9f9d-792636994eab/export 2026-09-01T16:24:01.541204+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3d3441df-0724-4f99-9f9d-792636994eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.681295Z"} 2026-08-16T00:00:21.681295+00:00