https://vulnerability.circl.lu/sightings/feed 2026-09-11T15:51:48.575965+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6fcc9c76-3566-4c24-982b-753f092de07c/export 2026-09-11T15:51:48.600761+00:00 Cédric Bonhomme https://vulnerability.circl.lu/user/cedric {"uuid": "6fcc9c76-3566-4c24-982b-753f092de07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://ettayeb.fr/en/security/entra-id-rce-cve-2026-69836/", "content": "", "creation_timestamp": "2026-09-09T19:40:41.428510Z"} 2026-09-09T19:40:41.428510+00:00 https://vulnerability.circl.lu/sighting/95e80864-c962-4a64-8b68-8ccb590a347a/export 2026-09-11T15:51:48.603239+00:00 Cédric Bonhomme https://vulnerability.circl.lu/user/cedric {"uuid": "95e80864-c962-4a64-8b68-8ccb590a347a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://vulnerability.circl.lu/comment/8bf59235-354e-431b-b6a8-cd53da06cc8c", "content": "", "creation_timestamp": "2026-09-09T19:39:32.530474Z"} 2026-09-09T19:39:32.530474+00:00 https://vulnerability.circl.lu/sighting/96b15e39-7000-423f-a858-c5d535e4270e/export 2026-09-11T15:51:48.603321+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "96b15e39-7000-423f-a858-c5d535e4270e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3mv3rksrrr3d2", "content": "The @gcve BCP-07 KEV format has been updated to allow the `Withdrawn` and `Reasserted` KEV Assertions.\n\nThis allows to support case like CVE-2026-69836 .\n\n\ud83d\udd17 https://gcve.eu/bcp/gcve-bcp-07/#withdrawn-and-reasserted-kev-assertions\n\n#cve #gcve #kev [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-09-09T14:45:18.473219Z"} 2026-09-09T14:45:18.473219+00:00 https://vulnerability.circl.lu/sighting/3d884633-6ad0-4914-99bc-d72300a14178/export 2026-09-11T15:51:48.604049+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3d884633-6ad0-4914-99bc-d72300a14178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://infosec.exchange/users/adulau/statuses/117241612141673967", "content": "The @gcve BCP-07 KEV format has been updated to allow the Withdrawn and Reasserted KEV Assertions.\nThis allows to support case like CVE-2026-69836 . \n\ud83d\udd17 https://gcve.eu/bcp/gcve-bcp-07/#withdrawn-and-reasserted-kev-assertions\n#cve #gcve #kev #cybersecurity #vulnerabilitymanagement #vulnerability", "creation_timestamp": "2026-09-09T14:43:50.358088Z"} 2026-09-09T14:43:50.358088+00:00 https://vulnerability.circl.lu/sighting/4497898c-db75-4dfa-898a-99f12b5d7ef9/export 2026-09-11T15:51:48.604142+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4497898c-db75-4dfa-898a-99f12b5d7ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztcjzoss2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-69836: Microsoft Entra ID Remote Code Execution Vulnerability\nCVSS 10 \u00b7 EPSS 1.6%\nhttps://beta.vulnsea.com/cve/CVE-2026-69836\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:48.203542Z"} 2026-09-08T20:09:48.203542+00:00 https://vulnerability.circl.lu/sighting/62892339-e823-4220-8deb-98cd3cdaa24a/export 2026-09-11T15:51:48.604209+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "62892339-e823-4220-8deb-98cd3cdaa24a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvr6bzn2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-69836: Microsoft Entra ID Remote Code Execution Vulnerability\nCVSS 10 \u00b7 EPSS 1.6%\nhttps://beta.vulnsea.com/cve/CVE-2026-69836\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:08:58.078637Z"} 2026-09-08T19:08:58.078637+00:00 https://vulnerability.circl.lu/sighting/ddaa50dd-1edc-47ce-abef-a8f2dd771aef/export 2026-09-11T15:51:48.604270+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ddaa50dd-1edc-47ce-abef-a8f2dd771aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/sequretek.bsky.social/post/3muosyfkzrs27", "content": "CVE-2026-69836 is a critical RCE in Microsoft Entra ID. Microsoft mitigated it server-side before disclosure.\nFor security teams, the priority now is validation: review Entra sign-ins, audit logs, risky activity and authentication anomalies.\n\nRead more: www.sequretek.com/resources/th...", "creation_timestamp": "2026-09-04T11:04:51.552017Z"} 2026-09-04T11:04:51.552017+00:00 https://vulnerability.circl.lu/sighting/c6e5f3e1-f2a9-4f37-a163-107135b863de/export 2026-09-11T15:51:48.604335+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c6e5f3e1-f2a9-4f37-a163-107135b863de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "exploited", "source": "https://t.me/CyberDispatch/2638", "content": "A CVSS 10.0 Entra ID flaw was exploited in the wild.\n\nCVE-2026-69836 allows an unauthorized attacker to remotely execute code through unsafe deserialization.\n\nMicrosoft says the flaw is fully mitigated and no customer action is required. How attackers exploited it remains undisclosed.", "creation_timestamp": "2026-08-30T00:00:38.780459Z"} 2026-08-30T00:00:38.780459+00:00 https://vulnerability.circl.lu/sighting/4e112bce-e0f0-487e-b7b6-72c049027fa4/export 2026-09-11T15:51:48.604395+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4e112bce-e0f0-487e-b7b6-72c049027fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://t.me/CyberDispatch/2638", "content": "A CVSS 10.0 Entra ID flaw was exploited in the wild.\n\nCVE-2026-69836 allows an unauthorized attacker to remotely execute code through unsafe deserialization.\n\nMicrosoft says the flaw is fully mitigated and no customer action is required. How attackers exploited it remains undisclosed.", "creation_timestamp": "2026-08-29T20:00:04.798548Z"} 2026-08-29T20:00:04.798548+00:00 https://vulnerability.circl.lu/sighting/70ac2053-f0bb-4a84-a7b3-1a431d3ada99/export 2026-09-11T15:51:48.604457+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "70ac2053-f0bb-4a84-a7b3-1a431d3ada99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu5hchhbzm2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-41992: 41 interactions\nCVE-2026-60137: 10 interactions\nCVE-2026-63030: 10 interactions\n", "creation_timestamp": "2026-08-28T13:20:28.079122Z"} 2026-08-28T13:20:28.079122+00:00