<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-01T17:58:24.871323+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/764ad49c-5296-4497-ac8d-610b2bd7abfc/export</id>
    <title>764ad49c-5296-4497-ac8d-610b2bd7abfc</title>
    <updated>2026-09-01T17:58:24.894304+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "764ad49c-5296-4497-ac8d-610b2bd7abfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "exploited", "source": "https://t.me/CyberDispatch/2570", "content": "SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch.", "creation_timestamp": "2026-08-30T00:00:38.280434Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/764ad49c-5296-4497-ac8d-610b2bd7abfc/export"/>
    <published>2026-08-30T00:00:38.280434+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b43ad564-ada2-4733-852e-404a7f8e1e08/export</id>
    <title>b43ad564-ada2-4733-852e-404a7f8e1e08</title>
    <updated>2026-09-01T17:58:24.896414+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b43ad564-ada2-4733-852e-404a7f8e1e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://t.me/CyberDispatch/2570", "content": "SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch.", "creation_timestamp": "2026-08-29T20:00:05.710115Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b43ad564-ada2-4733-852e-404a7f8e1e08/export"/>
    <published>2026-08-29T20:00:05.710115+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1ae5b0ca-9bfe-449e-a717-40d5ab64ed28/export</id>
    <title>1ae5b0ca-9bfe-449e-a717-40d5ab64ed28</title>
    <updated>2026-09-01T17:58:24.896557+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1ae5b0ca-9bfe-449e-a717-40d5ab64ed28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mu4i5f2wsa2o", "content": "\ud83c\udfe2 SAP: Commerce Cloud CVE-2026-58231 \u2014 CVSS 10.0 unauth RCE, actively exploited in wild. No public PoC yet. Attackers targeting enterprise e-commerce platforms. SAP security note released \u2014 apply immediately. Src: Cybersecurity News", "creation_timestamp": "2026-08-28T04:02:51.548223Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1ae5b0ca-9bfe-449e-a717-40d5ab64ed28/export"/>
    <published>2026-08-28T04:02:51.548223+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1a49c43a-1dd4-4b77-904b-bf247ac5e187/export</id>
    <title>1a49c43a-1dd4-4b77-904b-bf247ac5e187</title>
    <updated>2026-09-01T17:58:24.896663+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1a49c43a-1dd4-4b77-904b-bf247ac5e187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/495", "content": "CVE-2026-58231", "creation_timestamp": "2026-08-28T00:00:39.335130Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1a49c43a-1dd4-4b77-904b-bf247ac5e187/export"/>
    <published>2026-08-28T00:00:39.335130+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0890d470-c57b-42b8-8830-e76050c1323c/export</id>
    <title>0890d470-c57b-42b8-8830-e76050c1323c</title>
    <updated>2026-09-01T17:58:24.896796+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0890d470-c57b-42b8-8830-e76050c1323c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/495", "content": "CVE-2026-58231", "creation_timestamp": "2026-08-27T15:00:05.671988Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0890d470-c57b-42b8-8830-e76050c1323c/export"/>
    <published>2026-08-27T15:00:05.671988+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/385ec0d0-4563-4d79-a300-0baf4c93f15c/export</id>
    <title>385ec0d0-4563-4d79-a300-0baf4c93f15c</title>
    <updated>2026-09-01T17:58:24.896920+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "385ec0d0-4563-4d79-a300-0baf4c93f15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "published-proof-of-concept", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-25T00:00:05.308223Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/385ec0d0-4563-4d79-a300-0baf4c93f15c/export"/>
    <published>2026-08-25T00:00:05.308223+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bb7936e4-354e-4db1-b9d6-5e6440e5a73e/export</id>
    <title>bb7936e4-354e-4db1-b9d6-5e6440e5a73e</title>
    <updated>2026-09-01T17:58:24.897014+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bb7936e4-354e-4db1-b9d6-5e6440e5a73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.461113Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bb7936e4-354e-4db1-b9d6-5e6440e5a73e/export"/>
    <published>2026-08-24T21:00:06.461113+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/27ccc609-d67a-4819-8c9c-ba4c372c61a5/export</id>
    <title>27ccc609-d67a-4819-8c9c-ba4c372c61a5</title>
    <updated>2026-09-01T17:58:24.897104+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "27ccc609-d67a-4819-8c9c-ba4c372c61a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "exploited", "source": "https://t.me/information_security_channel/55751", "content": "Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure\nhttps://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/\n\nThe vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.\nThe post Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure (https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-24T00:00:09.386677Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/27ccc609-d67a-4819-8c9c-ba4c372c61a5/export"/>
    <published>2026-08-24T00:00:09.386677+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a8e43294-f7e8-4b86-81cc-32b9a7bbb120/export</id>
    <title>a8e43294-f7e8-4b86-81cc-32b9a7bbb120</title>
    <updated>2026-09-01T17:58:24.897203+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a8e43294-f7e8-4b86-81cc-32b9a7bbb120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtr2ze3gdz2v", "content": "CVE-2026-58231: Active Exploits Hit SAP Commerce Cloud Three Days After Patch", "creation_timestamp": "2026-08-23T15:08:41.028356Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a8e43294-f7e8-4b86-81cc-32b9a7bbb120/export"/>
    <published>2026-08-23T15:08:41.028356+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/99c58f2d-f496-481f-a017-c07f3bac67a6/export</id>
    <title>99c58f2d-f496-481f-a017-c07f3bac67a6</title>
    <updated>2026-09-01T17:58:24.897296+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "99c58f2d-f496-481f-a017-c07f3bac67a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58231", "type": "seen", "source": "https://t.me/pphm_HackerNews/2592", "content": "\ud83d\udd34 SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code\n\nSAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.\n\nThe vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.\n\n\"SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation,\" according to a description of the flaw on CVE.org.", "creation_timestamp": "2026-08-23T00:00:47.798235Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/99c58f2d-f496-481f-a017-c07f3bac67a6/export"/>
    <published>2026-08-23T00:00:47.798235+00:00</published>
  </entry>
</feed>
