<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-27T18:50:53.645945+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1075e51f-05ba-4c30-942e-7970b301ee45/export</id>
    <title>1075e51f-05ba-4c30-942e-7970b301ee45</title>
    <updated>2026-05-27T18:50:53.657687+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1075e51f-05ba-4c30-942e-7970b301ee45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mltruzpb4i2m", "content": "Windows \u306e DNS \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u30b7\u30b9\u30c6\u30e0\u3092\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u6652\u3059\n\n\u4e16\u754c\u4e2d\u306e Windows \u30b7\u30b9\u30c6\u30e0\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u64cd\u4f5c\u306a\u3057\u306b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u53ef\u80fd\u6027\u306e\u3042\u308bWindows DNS \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u65b0\u3057\u3044\u91cd\u5927\u306a\u8106\u5f31\u6027\u304b\u3089\u30ea\u30b9\u30af\u306b\u3055\u3089\u3055\u308c\u3066\u3044\u307e\u3059\u3002 CVE-2026-41096 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u91cd\u5927\u3068\u8a55\u4fa1\u3055\u308c\u3001CVSS \u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u306f 9.8 \u3067\u3059\u3002Microsof", "creation_timestamp": "2026-05-14T21:41:37.850941Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1075e51f-05ba-4c30-942e-7970b301ee45/export"/>
    <published>2026-05-14T21:41:37.850941+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8729cf5e-f411-4866-831a-fe0f2c34ec09/export</id>
    <title>8729cf5e-f411-4866-831a-fe0f2c34ec09</title>
    <updated>2026-05-27T18:50:53.657603+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8729cf5e-f411-4866-831a-fe0f2c34ec09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "seen", "source": "https://t.me/GithubRedTeam/84294", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a DNS-Mayhem-CVE-2026-41096-Deep-Dive\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mrk336\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-15 07:53:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIn\u2011depth technical analysis of CVE\u20112026\u201141096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-15T08:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8729cf5e-f411-4866-831a-fe0f2c34ec09/export"/>
    <published>2026-05-15T08:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/38965abc-268e-4390-9598-cf1bfebad8a2/export</id>
    <title>38965abc-268e-4390-9598-cf1bfebad8a2</title>
    <updated>2026-05-27T18:50:53.657503+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "38965abc-268e-4390-9598-cf1bfebad8a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "published-proof-of-concept", "source": "Telegram/q3bZ7dzwt6XdRM-jyUWUHYQhep0OmyjD4PHNSw542P5jdgA", "content": "", "creation_timestamp": "2026-05-15T15:00:07.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/38965abc-268e-4390-9598-cf1bfebad8a2/export"/>
    <published>2026-05-15T15:00:07+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c5e3c51-87fe-4f0a-ab48-5e1a488924b0/export</id>
    <title>2c5e3c51-87fe-4f0a-ab48-5e1a488924b0</title>
    <updated>2026-05-27T18:50:53.657411+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2c5e3c51-87fe-4f0a-ab48-5e1a488924b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "seen", "source": "https://t.me/bdufstecru/3171", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 DNS Client \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-06863\nCVE-2026-41096\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41096", "creation_timestamp": "2026-05-18T14:16:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c5e3c51-87fe-4f0a-ab48-5e1a488924b0/export"/>
    <published>2026-05-18T14:16:08+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1c59ffa5-532d-4679-b074-807e0b4151e9/export</id>
    <title>1c59ffa5-532d-4679-b074-807e0b4151e9</title>
    <updated>2026-05-27T18:50:53.657325+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1c59ffa5-532d-4679-b074-807e0b4151e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "seen", "source": "https://bsky.app/profile/kubonai.bsky.social/post/3mmhbv6nolm2s", "content": "Microsoft May 2026 Patch Tuesday: 138 CVEs Including Critical DNS &amp;amp; Netlogon RCE\n\nMicrosoft's May 2026 Patch Tuesday fixes 138 vulnerabilities including CVE-2026-41096 (CVSS 9.8 DNS heap overf...\n\n\ud83d\udd17 https://ipsec.live/blog/2026-05-22-microsoft-may-2026-patch-tuesday\n\n#infosec #cybersecurity", "creation_timestamp": "2026-05-22T15:48:42.708609Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1c59ffa5-532d-4679-b074-807e0b4151e9/export"/>
    <published>2026-05-22T15:48:42.708609+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7d7c1e4e-aaa9-4377-aaef-7e375184ff8c/export</id>
    <title>7d7c1e4e-aaa9-4377-aaef-7e375184ff8c</title>
    <updated>2026-05-27T18:50:53.657231+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7d7c1e4e-aaa9-4377-aaef-7e375184ff8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/85620", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41096-POC-trigger-no-exploit-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bajoex\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-24 00:37:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\npoc of vulnerability\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-24T01:00:03.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7d7c1e4e-aaa9-4377-aaef-7e375184ff8c/export"/>
    <published>2026-05-24T01:00:03+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1d028a30-1955-4ef7-8ad1-6481b1956a06/export</id>
    <title>1d028a30-1955-4ef7-8ad1-6481b1956a06</title>
    <updated>2026-05-27T18:50:53.657142+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1d028a30-1955-4ef7-8ad1-6481b1956a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "seen", "source": "https://t.me/GithubRedTeam/85632", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41096-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a satchfunky\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-24 01:48:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nwindows api bug\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-24T02:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1d028a30-1955-4ef7-8ad1-6481b1956a06/export"/>
    <published>2026-05-24T02:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c5d1e4a3-e84a-430e-99a8-3feee2435db8/export</id>
    <title>c5d1e4a3-e84a-430e-99a8-3feee2435db8</title>
    <updated>2026-05-27T18:50:53.657057+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c5d1e4a3-e84a-430e-99a8-3feee2435db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "seen", "source": "Telegram/aIPIWoZyEYzzX9nHUVKB1aA0s_e1mj3mQ8Eug10fFDw9pT4", "content": "", "creation_timestamp": "2026-05-24T03:00:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c5d1e4a3-e84a-430e-99a8-3feee2435db8/export"/>
    <published>2026-05-24T03:00:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f4453820-b842-47f8-babc-a8412780f14b/export</id>
    <title>f4453820-b842-47f8-babc-a8412780f14b</title>
    <updated>2026-05-27T18:50:53.656938+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f4453820-b842-47f8-babc-a8412780f14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "seen", "source": "Telegram/tLTaf5zN9aUn_D8KOi_rgxptZENw0EocHmy4bQpa2VASaD8", "content": "", "creation_timestamp": "2026-05-24T09:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f4453820-b842-47f8-babc-a8412780f14b/export"/>
    <published>2026-05-24T09:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c0b20d0c-47a0-4866-995d-99255e921215/export</id>
    <title>c0b20d0c-47a0-4866-995d-99255e921215</title>
    <updated>2026-05-27T18:50:53.655630+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c0b20d0c-47a0-4866-995d-99255e921215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41096", "type": "seen", "source": "Telegram/Ob2oA_mupoVDMqE6Q_QCizAK8aYtg6z11DPx_SkAfocJmb0", "content": "", "creation_timestamp": "2026-05-24T21:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c0b20d0c-47a0-4866-995d-99255e921215/export"/>
    <published>2026-05-24T21:00:04+00:00</published>
  </entry>
</feed>
