<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-25T17:54:32.263536+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0b96ce71-26c2-46e6-bec0-458f4b94d9b9/export</id>
    <title>0b96ce71-26c2-46e6-bec0-458f4b94d9b9</title>
    <updated>2026-06-25T17:54:32.290060+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0b96ce71-26c2-46e6-bec0-458f4b94d9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25089", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3moh43dyiqk2t", "content": "\u2694\ufe0f ATTACKS Attackers are exploiting FortiSandbox vulnerabilities \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/06/16/fortisandbox-vulnerabilities-cve-2026-39813-cve-2026-39808-cve-2026-25089/ #InfoSec #CyberSecurity", "creation_timestamp": "2026-06-17T00:55:06.577585Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0b96ce71-26c2-46e6-bec0-458f4b94d9b9/export"/>
    <published>2026-06-17T00:55:06.577585+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/128fd0bd-7887-46df-a47a-c6a67cc374be/export</id>
    <title>128fd0bd-7887-46df-a47a-c6a67cc374be</title>
    <updated>2026-06-25T17:54:32.289954+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "128fd0bd-7887-46df-a47a-c6a67cc374be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mohggp6udq2t", "content": "Fortinet FortiSandbox: attackers are exploiting CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089; patch CVE-2026-39813 now and review for active JRPC/path traversal attemp\u2026 #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/06/attackers-exploit-three-fortinet.html", "creation_timestamp": "2026-06-17T04:00:25.331374Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/128fd0bd-7887-46df-a47a-c6a67cc374be/export"/>
    <published>2026-06-17T04:00:25.331374+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1a4832d0-2d53-4451-91cb-4c5d240ae8da/export</id>
    <title>1a4832d0-2d53-4451-91cb-4c5d240ae8da</title>
    <updated>2026-06-25T17:54:32.289855+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1a4832d0-2d53-4451-91cb-4c5d240ae8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mohs2xlhbs35", "content": "Fortinet FortiSandbox\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-39813\u3001CVE-2026-39808\u3001CVE-2026-25089\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46235/", "creation_timestamp": "2026-06-17T07:29:37.415323Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1a4832d0-2d53-4451-91cb-4c5d240ae8da/export"/>
    <published>2026-06-17T07:29:37.415323+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/083b3b18-5d75-4a8a-bb03-15fb8e00e345/export</id>
    <title>083b3b18-5d75-4a8a-bb03-15fb8e00e345</title>
    <updated>2026-06-25T17:54:32.289744+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "083b3b18-5d75-4a8a-bb03-15fb8e00e345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3moij2d74dc2h", "content": "Attackers are exploiting FortiSandbox vulnerabilities\n\nAttackers have been spotted exploiting three vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089) in FortiSandbox, a platform that other Fortinet security products depend on for threat verdicts to enforce blocking \u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T14:19:52.249387Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/083b3b18-5d75-4a8a-bb03-15fb8e00e345/export"/>
    <published>2026-06-17T14:19:52.249387+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31b5f57e-e177-4afc-8de6-16151c2b0e0c/export</id>
    <title>31b5f57e-e177-4afc-8de6-16151c2b0e0c</title>
    <updated>2026-06-25T17:54:32.289638+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31b5f57e-e177-4afc-8de6-16151c2b0e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3moo3csgxk42f", "content": "Threat actors are exploiting Fortinet FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089). Stay updated and patch to prevent breaches. #Cybersecurity", "creation_timestamp": "2026-06-19T19:30:00.520021Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31b5f57e-e177-4afc-8de6-16151c2b0e0c/export"/>
    <published>2026-06-19T19:30:00.520021+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3888b03f-5e05-4459-a0e0-506ed9be13c4/export</id>
    <title>3888b03f-5e05-4459-a0e0-506ed9be13c4</title>
    <updated>2026-06-25T17:54:32.289526+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3888b03f-5e05-4459-a0e0-506ed9be13c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mos63ixquk2v", "content": "\u26a0\ufe0f Four CVEs. Three breach reports. One week.\n\nCVE-2026-10520 in Chrome.\nCVE-2026-11645 in Cisco.\nCVE-2026-25089 in Exchange.\nCVE-2026-35273 in Google.\n\nhttps://www.yazoul.net/news/article/2026-w24-weekly-threat-roundup/\n\n#CyberSecurity #PatchNow", "creation_timestamp": "2026-06-21T10:32:26.505622Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3888b03f-5e05-4459-a0e0-506ed9be13c4/export"/>
    <published>2026-06-21T10:32:26.505622+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ae56749d-7c63-4769-a24c-5421caa7d19d/export</id>
    <title>ae56749d-7c63-4769-a24c-5421caa7d19d</title>
    <updated>2026-06-25T17:54:32.289407+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ae56749d-7c63-4769-a24c-5421caa7d19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3movslpmknz27", "content": "\ud83d\udce1 Fortinet FortiSandbox: Three Critical Vulnerabilities Under Active Attack (CVE-2026-39808, CVE-2026-39813, CVE-2026-25089)", "creation_timestamp": "2026-06-22T21:15:14.094342Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ae56749d-7c63-4769-a24c-5421caa7d19d/export"/>
    <published>2026-06-22T21:15:14.094342+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08446d0f-6dc2-4cb4-ab79-a441d9c8f62a/export</id>
    <title>08446d0f-6dc2-4cb4-ab79-a441d9c8f62a</title>
    <updated>2026-06-25T17:54:32.289277+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08446d0f-6dc2-4cb4-ab79-a441d9c8f62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/yogsotho.bsky.social/post/3movwgvbanc23", "content": "#FortiSandbox CVE-2026-25089 Military-Grade #Exploit Kit\n\nRemote Unauthenticated Command Injection in #Fortinet FortiSandbox with root-level RCE.\n\nAffected Products\nFortiSandbox (all variants)\nFortiSandbox Cloud 5.0.4-5.0.5\nFortiSandbox PaaS 5.0.4-5.0.5\n#0days #security #hacking #CVE #CVSS #RCE", "creation_timestamp": "2026-06-22T22:24:13.485073Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08446d0f-6dc2-4cb4-ab79-a441d9c8f62a/export"/>
    <published>2026-06-22T22:24:13.485073+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/17a30498-ecd9-4cba-a0b8-0d5efe80d69a/export</id>
    <title>17a30498-ecd9-4cba-a0b8-0d5efe80d69a</title>
    <updated>2026-06-25T17:54:32.288234+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "17a30498-ecd9-4cba-a0b8-0d5efe80d69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp3qc2cvjt2f", "content": "CVE-2026-2508 - Gravity Forms Booking\nCVE ID : CVE-2026-2508\n \n Published : June 25, 2026, 3:42 a.m. | 2\u00a0hours, 2\u00a0minutes ago\n \n Description : The Gravity Forms Booking plugin for WordPress is vulnerable to time-based SQL Injection via the \u2018staff_id\u2019 parameter in all versions ...", "creation_timestamp": "2026-06-25T05:50:00.234583Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/17a30498-ecd9-4cba-a0b8-0d5efe80d69a/export"/>
    <published>2026-06-25T05:50:00.234583+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e1b2a3f3-edec-4208-8243-6941d698f6e6/export</id>
    <title>e1b2a3f3-edec-4208-8243-6941d698f6e6</title>
    <updated>2026-06-25T17:54:32.285597+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "e1b2a3f3-edec-4208-8243-6941d698f6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet", "content": "", "creation_timestamp": "2026-06-25T16:45:20.523172Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e1b2a3f3-edec-4208-8243-6941d698f6e6/export"/>
    <published>2026-06-25T16:45:20.523172+00:00</published>
  </entry>
</feed>
