https://vulnerability.circl.lu/sightings/feed 2026-09-17T04:20:08.601704+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a9679006-1f64-49a1-99d1-51d020a2a3e8/export 2026-09-17T04:20:08.622360+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a9679006-1f64-49a1-99d1-51d020a2a3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73447", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvms6cc22s2f", "content": "CVE-2026-73447\nArista EOS devices that use the gNSI Certz service can be tricked by a logged\u2011in user into executing any operating\u2011system command with full system rights. This can give an attacker complete control over the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T09:10:07.159405Z"} 2026-09-16T09:10:07.159405+00:00 https://vulnerability.circl.lu/sighting/9016b4b1-a1f7-4a23-a1f4-aa3a84472ef6/export 2026-09-17T04:20:08.624584+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9016b4b1-a1f7-4a23-a1f4-aa3a84472ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73447", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmonvh4mn2p", "content": "\ud83d\udea8 CVE-2026-73447 \u2014 CVSS 9.4 CRITICAL\n\nA privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, lea...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73447\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T08:07:15.422767Z"} 2026-09-16T08:07:15.422767+00:00 https://vulnerability.circl.lu/sighting/f59db956-da9c-43f1-b2b6-84cc9ff96011/export 2026-09-17T04:20:08.624717+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f59db956-da9c-43f1-b2b6-84cc9ff96011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73447", "type": "seen", "source": "https://gist.github.com/ichintu/267a83b424137af67bec5f39bcd35594", "content": "This daily threat intelligence digest highlights four critical security updates from September 2026:\n\n\u2022 **Arista EOS (CVE-2026-73447):** Critical (9.4) OS command injection in gNSI Certz/Bootz services allows authenticated users to escalate privileges and fully compromise devices.\n\u2022 **WSO2 API Manager (CVE-2026-5430):** Critical (9.8) JWT signature verification flaw enables forged admin tokens for account takeover; actively exploited in the wild.\n\u2022 **Oracle September 2026 CSPU:** Major patch release addressing 673 vulnerabilities, including several rated CVSS 10.0.\n\u2022 **VeloCloud Edge (CVE-2026-86108):** High (8.0) input validation weakness in management workflows can be abused for elevated OS command execution.\n\n**Recommendation:** Organizations should prioritize immediate patching and threat monitoring for these critical flaws to prevent privilege escalation, account compromise, and active exploitation.", "creation_timestamp": "2026-09-16T08:02:29.791600Z"} 2026-09-16T08:02:29.791600+00:00