https://vulnerability.circl.lu/sightings/feed 2026-05-29T23:09:14.483947+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ad2b95ed-89ba-49c2-8077-49735dd0cdec/export 2026-05-29T23:09:14.838879+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ad2b95ed-89ba-49c2-8077-49735dd0cdec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfv2xflkle2z", "content": "", "creation_timestamp": "2026-02-28T01:25:31.512394Z"} 2026-02-28T01:25:31.512394+00:00 https://vulnerability.circl.lu/sighting/25211b57-2332-4428-a519-dc62933f38cf/export 2026-05-29T23:09:14.838758+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "25211b57-2332-4428-a519-dc62933f38cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28517", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opendcim_install_sqli_rce.rb", "content": "", "creation_timestamp": "2026-04-14T20:15:55.000000Z"} 2026-04-14T20:15:55+00:00 https://vulnerability.circl.lu/sighting/858a98c9-73da-4e16-81f0-bcbc61afebd5/export 2026-05-29T23:09:14.838612+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "858a98c9-73da-4e16-81f0-bcbc61afebd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28517", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjks6k2s4z26", "content": "", "creation_timestamp": "2026-04-15T21:02:40.913272Z"} 2026-04-15T21:02:40.913272+00:00 https://vulnerability.circl.lu/sighting/e8e76b96-8563-453d-b2c9-86d09680e4c9/export 2026-05-29T23:09:14.836871+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e8e76b96-8563-453d-b2c9-86d09680e4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28517", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/116574230763721167", "content": "\u2757Earlier today, VulnCheck Canaries detected first-time exploitation of CVE-2026-28515 and CVE-2026-28517 in openDCIM, an open-source code base used for data center infrastructure management. \n\ud83d\udc1a The cluster of attacker activity we're observing so far originates from a single Chinese IP and uses what appears to be a customized implementation of AI vuln discovery tool Vulnhuntr to automatically check for vulnerable installations before dropping a PHP webshell. \n\ud83c\udf10 The VulnCheck team's ASM queries for these vulnerabilities find fewer than 50 systems online, many of which belong to higher education institutions globally. Both CVEs were discovered by new VulnCheck research team member @chocapikk_. \nMoar KEVs: https://www.vulncheck.com/kev", "creation_timestamp": "2026-05-14T18:02:13.286046Z"} 2026-05-14T18:02:13.286046+00:00