https://vulnerability.circl.lu/sightings/feed 2026-09-10T17:50:26.381753+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cdbe8fc3-ee45-457a-9aa8-be89cd496bc5/export 2026-09-10T17:50:26.405012+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cdbe8fc3-ee45-457a-9aa8-be89cd496bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21085", "type": "seen", "source": "https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355", "content": "On September 9, 2026, Microsoft released a record-breaking Patch Tuesday update addressing 972\u2013974 vulnerabilities, including 113 critical flaws and two actively exploited zero-days across Windows, Office, and SQL. The digest also highlights several high-severity CVEs: a CVSS 10.0 pre-auth RCE in N-able N-central (CVE-2026-86218) added to CISA\u2019s KEV catalog with a federal patch deadline of Sept 11; an authenticated RCE in the WordPress FireBox plugin (CVE-2026-76801); and a high-severity out-of-bounds write in Android\u2019s Keymaster trustlet (CVE-2026-21085). Finally, the update covers emerging AI cybersecurity trends, featuring Alovia\u2014a new security layer for AI-driven platforms\u2014and ongoing industry discussions on the escalating AI arms race and agentic AI applications for both attackers and defenders.", "creation_timestamp": "2026-09-09T08:11:50.566746Z"} 2026-09-09T08:11:50.566746+00:00