https://vulnerability.circl.lu/sightings/feed 2026-09-14T15:12:54.209574+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/16595b58-7d73-4010-80b5-b19ca2948b79/export 2026-09-14T15:12:54.230020+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "16595b58-7d73-4010-80b5-b19ca2948b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mvianj6ax32k", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: China-Linked Group Exploits CVE-2026-51990 in Sogou Input to Drop GrayRabbit\n\n#APT #ThreatIntel #CyberSecurity", "creation_timestamp": "2026-09-14T13:45:51.642321Z"} 2026-09-14T13:45:51.642321+00:00 https://vulnerability.circl.lu/sighting/aeee5d71-1026-42f3-a3cb-9949b854e6df/export 2026-09-14T15:12:54.233620+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "aeee5d71-1026-42f3-a3cb-9949b854e6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvi32jjcl322", "content": "CVE-2026-51990 in Sogou Input Method enables a one-click exploit that injects command-line arguments and uses an outdated, unsandboxed Chromium engine to execute system-level code.\n", "creation_timestamp": "2026-09-14T12:05:46.269421Z"} 2026-09-14T12:05:46.269421+00:00 https://vulnerability.circl.lu/sighting/5a42b597-04f3-4367-b5cc-a383bcd850ae/export 2026-09-14T15:12:54.233810+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5a42b597-04f3-4367-b5cc-a383bcd850ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvhsn45rp22d", "content": "Hackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n#hackernews #news", "creation_timestamp": "2026-09-14T09:35:06.160243Z"} 2026-09-14T09:35:06.160243+00:00 https://vulnerability.circl.lu/sighting/d57f03ca-3eba-4363-bd26-d86384b939c3/export 2026-09-14T15:12:54.233943+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d57f03ca-3eba-4363-bd26-d86384b939c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvhs65r4ku2i", "content": "\ud83e\udd16 CVE-2026-51990: a China-aligned espionage group exploits a critical flaw in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. Exploited in the wild.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-14T09:26:43.780606Z"} 2026-09-14T09:26:43.780606+00:00 https://vulnerability.circl.lu/sighting/43a58e24-d7aa-4c2e-99d3-ed4c614e2cff/export 2026-09-14T15:12:54.234068+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "43a58e24-d7aa-4c2e-99d3-ed4c614e2cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mvhlzz7pwo2e", "content": "\u26a0\ufe0f\ud83d\udc30 Tencent flaw deploys GrayRabbit\n\nCVE-2026-51990 enables RCE through Sogou Input Method; fixed in version 16.3.\n\n\ud83d\udd17 read more: www.bleepingcomputer...\n\n#ransomNews #cyberthreats #GrayRabbit \n", "creation_timestamp": "2026-09-14T07:37:03.732211Z"} 2026-09-14T07:37:03.732211+00:00 https://vulnerability.circl.lu/sighting/074307c2-4ae2-4e84-b762-d526e846a002/export 2026-09-14T15:12:54.234197+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "074307c2-4ae2-4e84-b762-d526e846a002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/HackerNewscyber/3457", "content": "\u2708 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Sogou \u0628\u0631\u0627\u06cc \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit\n\n\u00a9\ufe0f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0646\u062a\u0633\u0628 \u0628\u0647 \u06af\u0631\u0648\u0647 \u0647\u0645\u0633\u0648 \u0628\u0627 \u0686\u06cc\u0646 UNC3569 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-51990 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 Sogou Input Method \u0634\u0631\u06a9\u062a Tencent \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u0631\u0627 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0645\u0633\u062a\u0642\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062d\u0645\u0644\u0647 \u0628\u0627 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0648 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646\u060c \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc Sogou \u0648 \u06cc\u06a9 \u0646\u0633\u062e\u0647 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0628\u062f\u0648\u0646 sandbox \u0627\u0632 Chromium\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u06cc\u06a9 \u0628\u06a9\u200c\u062f\u0648\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0627\u06cc\u0646\u062f\u0647\u0627\u060c \u0627\u06cc\u062c\u0627\u062f \u067e\u0648\u0633\u062a\u0647 \u0645\u0639\u06a9\u0648\u0633\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0633\u06cc\u0633\u062a\u0645 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u062f\u0627\u0631\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u062f\u0627\u0645\u0647: Tencent \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 16.3.0.3498 \u062f\u0631 \u0622\u0648\u0631\u06cc\u0644 \u06f2\u06f0\u06f2\u06f6 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0648\u062a\u0648\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc \u0647\u0645\u0686\u0646\u0627\u0646 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0641\u0627\u0642\u062f sandbox \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062e\u0637\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-14T07:00:04.456822Z"} 2026-09-14T07:00:04.456822+00:00 https://vulnerability.circl.lu/sighting/ddda9b84-2b22-44f2-a543-332943273d16/export 2026-09-14T15:12:54.234360+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ddda9b84-2b22-44f2-a543-332943273d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvhjwehwaz2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 26 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 7 interactions\nCVE-2026-90561: 4 interactions\nCVE-2025-59287: 3 interactions\n", "creation_timestamp": "2026-09-14T06:59:12.737425Z"} 2026-09-14T06:59:12.737425+00:00 https://vulnerability.circl.lu/sighting/9155bc54-f7a9-4a87-9105-799f05d3a5b8/export 2026-09-14T15:12:54.234478+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9155bc54-f7a9-4a87-9105-799f05d3a5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvhhznyusb2q", "content": "CVE-2026-51990 is trending. Hype score 5, currently #5 on cvemon.\n\nCurrently trending CVE - Hype Score: 5\n\nhttps://cvemon.intruder.io/cves/CVE-2026-51990", "creation_timestamp": "2026-09-14T06:25:16.244461Z"} 2026-09-14T06:25:16.244461+00:00 https://vulnerability.circl.lu/sighting/20be35c7-7ea1-46da-a6da-57dfb9d236e9/export 2026-09-14T15:12:54.234598+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "20be35c7-7ea1-46da-a6da-57dfb9d236e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhagjon4q2j", "content": "2/ PHISHING & MALWARE: Microsoft details AI-assisted CEO fraud (1M+ emails, Aug 3-5) + passkey-themed attacks hijacking cloud accounts. UNC3569 exploits Tencent Sogou Input Method (CVE-2026-51990) \u2014 one-click RCE \u2014 to deploy GrayRabbit backdoor. Src: TheHackerNews, BleepingComputer", "creation_timestamp": "2026-09-14T04:09:17.164440Z"} 2026-09-14T04:09:17.164440+00:00 https://vulnerability.circl.lu/sighting/98349b1e-c4bc-40bc-b049-8d0ebb225c02/export 2026-09-14T15:12:54.234714+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "98349b1e-c4bc-40bc-b049-8d0ebb225c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhaflnz2v2l", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:08:46.124799Z"} 2026-09-14T04:08:46.124799+00:00