https://vulnerability.circl.lu/sightings/feed 2026-09-17T05:39:36.431687+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ba6ac0da-463d-44a6-a926-0cce2f7ad456/export 2026-09-17T05:39:36.458190+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ba6ac0da-463d-44a6-a926-0cce2f7ad456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mviywqp6lq22", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-14T21:00:30.888448Z"} 2026-09-14T21:00:30.888448+00:00 https://vulnerability.circl.lu/sighting/586683b3-c1a8-438a-ae6d-dc98970a96e0/export 2026-09-17T05:39:36.461433+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "586683b3-c1a8-438a-ae6d-dc98970a96e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvdxyu76762j", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-12T21:00:29.571046Z"} 2026-09-12T21:00:29.571046+00:00 https://vulnerability.circl.lu/sighting/b4ea8381-6400-4f41-8247-5226d2c1d987/export 2026-09-17T05:39:36.461585+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b4ea8381-6400-4f41-8247-5226d2c1d987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3muxfoebg6u22", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-07T21:00:33.035490Z"} 2026-09-07T21:00:33.035490+00:00 https://vulnerability.circl.lu/sighting/d92d9572-4a1e-45bf-9c38-d6086c0b4a0f/export 2026-09-17T05:39:36.461704+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d92d9572-4a1e-45bf-9c38-d6086c0b4a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3muuv7f7wpe2g", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-06T21:00:31.523848Z"} 2026-09-06T21:00:31.523848+00:00 https://vulnerability.circl.lu/sighting/7d335646-eafd-4d66-90c8-607fb3dc27e9/export 2026-09-17T05:39:36.461833+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7d335646-eafd-4d66-90c8-607fb3dc27e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3museqkvw5o2j", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-05T21:00:34.401720Z"} 2026-09-05T21:00:34.401720+00:00 https://vulnerability.circl.lu/sighting/826ca8b6-b496-44c7-be9d-17a2281bf8eb/export 2026-09-17T05:39:36.461934+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "826ca8b6-b496-44c7-be9d-17a2281bf8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupv6frp2k2b", "content": "\u7c73CISA\u3001\u300cFortiSandbox\u300d\u300cSharePoint\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3092\u8b66\u544a\n\n\u7c73\u5f53\u5c40\u306f\u3001Fortinet\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u89e3\u6790\u88fd\u54c1\u300cFortiSandbox\u300d\u3084Microsoft\u306e\u60c5\u5831\u5171\u6709\u57fa\u76e4\u300cSharePoint\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n...\n\n\u300cFortiSandbox\u300d\u306b\u95a2\u3057\u3066\u306f\u3001OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-39808\u300d\u300cCVE-2026-25089\u300d\u3092\u767b\u9332\u3057\u305f\u3002\n\n\u305d\u308c\u305e\u308c4\u6708\u30016\u6708\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u304c\u516c\u8868\u3055\u308c\u3066\u3044\u308b\u3002\u7d30\u5de5\u3057\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u3088\u3063\u3066\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30b3\u30de\u30f3\u30c9\u3084\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002...", "creation_timestamp": "2026-09-04T21:16:40.292226Z"} 2026-09-04T21:16:40.292226+00:00 https://vulnerability.circl.lu/sighting/48344019-3b72-489c-b289-7957211730bb/export 2026-09-17T05:39:36.462055+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "48344019-3b72-489c-b289-7957211730bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupuzpnauk2b", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date July 16, 2026\n\nCVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability \nCVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability \nCVE-2026-58644 Microsoft SharePoint Deserialization of Untrust...", "creation_timestamp": "2026-09-04T21:14:04.751908Z"} 2026-09-04T21:14:04.751908+00:00 https://vulnerability.circl.lu/sighting/2ea8a39a-d99d-4bd5-8753-adefba650fc7/export 2026-09-17T05:39:36.462160+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2ea8a39a-d99d-4bd5-8753-adefba650fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "published-proof-of-concept", "source": "https://t.me/p3Nt3st3rsTAr/24", "content": "https://github.com/p3Nt3st3r-sTAr/FortiSandbox-RCE-Exploit-CVE-2026-39808", "creation_timestamp": "2026-09-02T01:05:06.768401Z"} 2026-09-02T01:05:06.768401+00:00 https://vulnerability.circl.lu/sighting/74b42c94-8d25-4565-93a8-a4732f64b353/export 2026-09-17T05:39:36.462272+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "74b42c94-8d25-4565-93a8-a4732f64b353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/24", "content": "https://github.com/p3Nt3st3r-sTAr/FortiSandbox-RCE-Exploit-CVE-2026-39808", "creation_timestamp": "2026-09-01T13:00:05.763000Z"} 2026-09-01T13:00:05.763000+00:00 https://vulnerability.circl.lu/sighting/75844645-ddd4-457a-b59b-c19f78ec35c6/export 2026-09-17T05:39:36.462362+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "75844645-ddd4-457a-b59b-c19f78ec35c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39808", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mufsg6oemr2v", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-08-31T21:00:41.820580Z"} 2026-08-31T21:00:41.820580+00:00