<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-08T01:43:54.329232+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4aa9004e-5653-464c-814e-022cadd235af/export</id>
    <title>4aa9004e-5653-464c-814e-022cadd235af</title>
    <updated>2026-09-08T01:43:54.353569+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4aa9004e-5653-464c-814e-022cadd235af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3muwj5nra5a2d", "content": "\ud83d\udce2 [VULN] Une VM pour prendre le contr\u00f4le de votre PC : patchez VMware Workstation et Fusion - CVE-2026-59346 CVE-2026-59347\n\nVous utilisez VMware Workstation Pro ou VMware Fusion ? Passez par la case maintenance.\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "creation_timestamp": "2026-09-07T12:30:07.927480Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4aa9004e-5653-464c-814e-022cadd235af/export"/>
    <published>2026-09-07T12:30:07.927480+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3a81fa10-dad0-4146-b086-f36970ac0e0b/export</id>
    <title>3a81fa10-dad0-4146-b086-f36970ac0e0b</title>
    <updated>2026-09-08T01:43:54.355519+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3a81fa10-dad0-4146-b086-f36970ac0e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3muwfvp5nvt23", "content": "Broadcom patches critical security flaws in VMware Workstation &amp;amp; Fusion, including CVE-2026-59346, a high-severity bug (CVSS 9.3) that allows local attackers to run arbitrary code.", "creation_timestamp": "2026-09-07T11:31:59.551307Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3a81fa10-dad0-4146-b086-f36970ac0e0b/export"/>
    <published>2026-09-07T11:31:59.551307+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c320e28e-39ba-468a-82ce-fc4fcbb5c484/export</id>
    <title>c320e28e-39ba-468a-82ce-fc4fcbb5c484</title>
    <updated>2026-09-08T01:43:54.355640+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c320e28e-39ba-468a-82ce-fc4fcbb5c484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59346", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muu4gj3dkb2f", "content": "\ud83d\udccc VMware Patches Critical VM Escape Vulnerability CVE-2026-59346 in Workstation and Fusion https://www.cyberhub.blog/article/31702-vmware-patches-critical-vm-escape-vulnerability-cve-2026-59346-in-workstation-and-fusion", "creation_timestamp": "2026-09-06T13:37:07.559279Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c320e28e-39ba-468a-82ce-fc4fcbb5c484/export"/>
    <published>2026-09-06T13:37:07.559279+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2a30f6ff-7175-48e5-bd1f-14e8b99873cd/export</id>
    <title>2a30f6ff-7175-48e5-bd1f-14e8b99873cd</title>
    <updated>2026-09-08T01:43:54.355712+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2a30f6ff-7175-48e5-bd1f-14e8b99873cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "content": "Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.\n\n\"A", "creation_timestamp": "2026-09-06T01:00:34.390528Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2a30f6ff-7175-48e5-bd1f-14e8b99873cd/export"/>
    <published>2026-09-06T01:00:34.390528+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d94be653-a645-4356-abb6-ae7c7da535c6/export</id>
    <title>d94be653-a645-4356-abb6-ae7c7da535c6</title>
    <updated>2026-09-08T01:43:54.355782+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d94be653-a645-4356-abb6-ae7c7da535c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3musqomuqt52t", "content": "\ud83e\udd16 CVE-2026-59346 (CVSS 9.3): integer-overflow in VMware Workstation/Fusion lets an elevated local attacker execute arbitrary code on the host OS. Patches available.\n\nhttps://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "creation_timestamp": "2026-09-06T00:34:14.368463Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d94be653-a645-4356-abb6-ae7c7da535c6/export"/>
    <published>2026-09-06T00:34:14.368463+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/45b2e74c-3913-45ba-af16-b12683e6c618/export</id>
    <title>45b2e74c-3913-45ba-af16-b12683e6c618</title>
    <updated>2026-09-08T01:43:54.355853+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "45b2e74c-3913-45ba-af16-b12683e6c618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9977", "content": "\ud83d\uded1 A critical VMware flaw can turn local VM admin access into host code execution.\n\nBroadcom fixed CVE-2026-59346 and an HGFS flaw in Workstation and Fusion 26H1u1. Both affect 25H2 and 26H1, with no workarounds or known exploitation.\n\nHow the code execution paths work: https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html", "creation_timestamp": "2026-09-06T00:00:38.832648Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/45b2e74c-3913-45ba-af16-b12683e6c618/export"/>
    <published>2026-09-06T00:00:38.832648+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d70edc39-0f1c-41a4-a999-f151381fb8e2/export</id>
    <title>d70edc39-0f1c-41a4-a999-f151381fb8e2</title>
    <updated>2026-09-08T01:43:54.355922+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d70edc39-0f1c-41a4-a999-f151381fb8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://t.me/pphm_HackerNews/3015", "content": "\ud83d\udd34 Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities\n\nBroadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update to version 26H1u1 immediately.\n\nBroadcom published advisory VMSA-2026-0007, patching two vulnerabilities in VMware Workstation and Fusion that allow an attacker inside a virtual machine to execute code on the underlying host. One is rated Critical. Neither has a workaround.\n\nThe first vulnerability, tracked as CVE-2026-59346 (CVSS score of 9.3), is an integer-overflow vulnerability. The issue resides in the VMXNET3, a virtual network adapter (virtual NIC) designed by VMware for virtual machines.", "creation_timestamp": "2026-09-06T00:00:38.728529Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d70edc39-0f1c-41a4-a999-f151381fb8e2/export"/>
    <published>2026-09-06T00:00:38.728529+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e6c30e54-17d0-49f9-9969-3d5d917efef7/export</id>
    <title>e6c30e54-17d0-49f9-9969-3d5d917efef7</title>
    <updated>2026-09-08T01:43:54.355994+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e6c30e54-17d0-49f9-9969-3d5d917efef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "Telegram/Y4RY5TckTSc8jEcD741Tx3x48bPOu6xPsvJUJ4knYrX-KQ", "content": "", "creation_timestamp": "2026-09-06T00:00:15.592022Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e6c30e54-17d0-49f9-9969-3d5d917efef7/export"/>
    <published>2026-09-06T00:00:15.592022+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b99cc75d-08b8-4be8-9ad1-010e2124b275/export</id>
    <title>b99cc75d-08b8-4be8-9ad1-010e2124b275</title>
    <updated>2026-09-08T01:43:54.356064+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b99cc75d-08b8-4be8-9ad1-010e2124b275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3musnxcvfsd2x", "content": "Broadcom patched VMware Workstation and Fusion flaws, including CVE-2026-59346, a critical 9.3 integer overflow that could let an elevated attacker run code on the host. #VMware #CVE202659346 #Broadcom", "creation_timestamp": "2026-09-05T23:45:25.576507Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b99cc75d-08b8-4be8-9ad1-010e2124b275/export"/>
    <published>2026-09-05T23:45:25.576507+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/322bf14c-29bf-4077-942b-b2c6e23af5ec/export</id>
    <title>322bf14c-29bf-4077-942b-b2c6e23af5ec</title>
    <updated>2026-09-08T01:43:54.356131+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "322bf14c-29bf-4077-942b-b2c6e23af5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59346", "type": "seen", "source": "Telegram/Y4RY5TckTSc8jEcD741Tx3x48bPOu6xPsvJUJ4knYrX-KQ", "content": "", "creation_timestamp": "2026-09-05T21:00:05.059166Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/322bf14c-29bf-4077-942b-b2c6e23af5ec/export"/>
    <published>2026-09-05T21:00:05.059166+00:00</published>
  </entry>
</feed>
