<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-30T22:48:42.571684+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/154c4b9a-10ac-4536-8cfa-8cd81e676989/export</id>
    <title>154c4b9a-10ac-4536-8cfa-8cd81e676989</title>
    <updated>2026-08-30T22:48:42.598737+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "154c4b9a-10ac-4536-8cfa-8cd81e676989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6837-zyxel-export-cgi-command-injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a minanagehsalalma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 17:45:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.611917Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/154c4b9a-10ac-4536-8cfa-8cd81e676989/export"/>
    <published>2026-08-24T00:00:10.611917+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/89dc7974-4f74-4526-b3a4-9d9913cf2f16/export</id>
    <title>89dc7974-4f74-4526-b3a4-9d9913cf2f16</title>
    <updated>2026-08-30T22:48:42.601337+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "89dc7974-4f74-4526-b3a4-9d9913cf2f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://t.me/GithubRedTeam/98354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6837-zyxel-export-cgi-command-injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a minanagehsalalma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 17:45:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.053861Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/89dc7974-4f74-4526-b3a4-9d9913cf2f16/export"/>
    <published>2026-08-23T00:00:33.053861+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cfbac8e0-c3a7-4c40-ae60-c925b7955117/export</id>
    <title>cfbac8e0-c3a7-4c40-ae60-c925b7955117</title>
    <updated>2026-08-30T22:48:42.601622+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cfbac8e0-c3a7-4c40-ae60-c925b7955117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://t.me/GithubRedTeam/98354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6837-zyxel-export-cgi-command-injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a minanagehsalalma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 17:45:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.551322Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cfbac8e0-c3a7-4c40-ae60-c925b7955117/export"/>
    <published>2026-08-22T19:00:09.551322+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/32199ba3-946c-454c-81e0-f84576417f61/export</id>
    <title>32199ba3-946c-454c-81e0-f84576417f61</title>
    <updated>2026-08-30T22:48:42.601849+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "32199ba3-946c-454c-81e0-f84576417f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mtof2ncryk2s", "content": "Zyxel devices vulnerable to authenticated command injection in certificate export. New CVE-2026-6837 analysis reveals attack surface in PKCS#12\u2026\n\nhttps://www.reddit.com/r/netsec/comments/1vq55y4/cve20266837_command_injection_in_zyxel_exportcgi/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-08-22T13:30:21.985192Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/32199ba3-946c-454c-81e0-f84576417f61/export"/>
    <published>2026-08-22T13:30:21.985192+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0312e961-6d31-4a12-9308-61271c571350/export</id>
    <title>0312e961-6d31-4a12-9308-61271c571350</title>
    <updated>2026-08-30T22:48:42.602052+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0312e961-6d31-4a12-9308-61271c571350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtjbx4vqis2b", "content": "CVE-2026-6837 affects 18 Zyxel APs\u2014admin access allows root command injection via export-cgi. Patch now. #Cybersecurity #Bugs #Zyxel #Firmware #CommandInjection #NetworkSecurity https://thedailytechfeed.com/zyxel-fixes-high-severity-command-injection-bug-in-18-access-points/", "creation_timestamp": "2026-08-20T12:51:25.385253Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0312e961-6d31-4a12-9308-61271c571350/export"/>
    <published>2026-08-20T12:51:25.385253+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f7cad23c-0333-40ba-943a-8c0175d74124/export</id>
    <title>f7cad23c-0333-40ba-943a-8c0175d74124</title>
    <updated>2026-08-30T22:48:42.602263+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f7cad23c-0333-40ba-943a-8c0175d74124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "published-proof-of-concept", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-18T00:00:11.963590Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f7cad23c-0333-40ba-943a-8c0175d74124/export"/>
    <published>2026-08-18T00:00:11.963590+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d0a85c46-2e5b-46c2-b48f-a00759cd08d2/export</id>
    <title>d0a85c46-2e5b-46c2-b48f-a00759cd08d2</title>
    <updated>2026-08-30T22:48:42.602400+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d0a85c46-2e5b-46c2-b48f-a00759cd08d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "published-proof-of-concept", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-18T00:00:11.120548Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d0a85c46-2e5b-46c2-b48f-a00759cd08d2/export"/>
    <published>2026-08-18T00:00:11.120548+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7436e93c-68cf-4f7a-967e-48170c695450/export</id>
    <title>7436e93c-68cf-4f7a-967e-48170c695450</title>
    <updated>2026-08-30T22:48:42.602507+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7436e93c-68cf-4f7a-967e-48170c695450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-17T18:00:05.075151Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7436e93c-68cf-4f7a-967e-48170c695450/export"/>
    <published>2026-08-17T18:00:05.075151+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08133c0e-b6cd-4dc6-bba9-423a008198dc/export</id>
    <title>08133c0e-b6cd-4dc6-bba9-423a008198dc</title>
    <updated>2026-08-30T22:48:42.602594+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08133c0e-b6cd-4dc6-bba9-423a008198dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-17T18:00:04.728092Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08133c0e-b6cd-4dc6-bba9-423a008198dc/export"/>
    <published>2026-08-17T18:00:04.728092+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c9baad47-8b10-4831-83d4-0658e21f4fc9/export</id>
    <title>c9baad47-8b10-4831-83d4-0658e21f4fc9</title>
    <updated>2026-08-30T22:48:42.602659+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c9baad47-8b10-4831-83d4-0658e21f4fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117037623751892634", "content": "CVE-2026-6837 - Post-auth command injection in Zyxel WAX650S export-cgi. Admin RCE. CVSS 7.2. Unpatched - restrict admin access now. #CVE #Zyxel #infosec\nhttps://www.valtersit.com/cve/CVE-2026-6837/", "creation_timestamp": "2026-08-04T14:06:56.191637Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c9baad47-8b10-4831-83d4-0658e21f4fc9/export"/>
    <published>2026-08-04T14:06:56.191637+00:00</published>
  </entry>
</feed>
