<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-15T14:36:47.158141+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bf92df24-4b26-44aa-8807-5f08f0e08742/export</id>
    <title>bf92df24-4b26-44aa-8807-5f08f0e08742</title>
    <updated>2026-09-15T14:36:47.186983+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bf92df24-4b26-44aa-8807-5f08f0e08742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvkpi2ajph2q", "content": "Cisco has issued a warning about a zero-day vulnerability (CVE-2026-76461) in its Secure Email Gateway that allows remote attackers to execute arbitrary commands with root privileges. The flaw arises from a parsing issue in AsyncOS Software, enabling exploitation via malicious emails.", "creation_timestamp": "2026-09-15T13:16:34.035582Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bf92df24-4b26-44aa-8807-5f08f0e08742/export"/>
    <published>2026-09-15T13:16:34.035582+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/af0d8cda-7307-41d1-953e-9da21ae5b6ef/export</id>
    <title>af0d8cda-7307-41d1-953e-9da21ae5b6ef</title>
    <updated>2026-09-15T14:36:47.190436+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "af0d8cda-7307-41d1-953e-9da21ae5b6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvkphlll2a2j", "content": "Cisco Secure Email Gateway CVE-2026-76461 (CVSS 9.8) lets a crafted inbound email execute commands as root on the appliance \u2014 apply Cisco's advisory updates immediately. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-15T13:16:18.390388Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/af0d8cda-7307-41d1-953e-9da21ae5b6ef/export"/>
    <published>2026-09-15T13:16:18.390388+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/58df1497-80fe-492c-8d46-e946dc6e723f/export</id>
    <title>58df1497-80fe-492c-8d46-e946dc6e723f</title>
    <updated>2026-09-15T14:36:47.190837+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "58df1497-80fe-492c-8d46-e946dc6e723f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://t.me/GithubRedTeam/102359", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76461\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 06:13:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-76461 - Draft or TODO\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T13:00:05.510753Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/58df1497-80fe-492c-8d46-e946dc6e723f/export"/>
    <published>2026-09-15T13:00:05.510753+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2843e5f7-e10d-4044-be84-a8744b484526/export</id>
    <title>2843e5f7-e10d-4044-be84-a8744b484526</title>
    <updated>2026-09-15T14:36:47.191143+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2843e5f7-e10d-4044-be84-a8744b484526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76461", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvknpyeph42l", "content": "CVE-2026-76461: SQLi in Cisco AsyncOS lets unauthenticated attackers execute OS commands as root. In KEV as of Sept. 14\u2026 https://0daynews.com/articles/2026-09-15-cisco-secure-email-gateway-cve-2026-76461-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2082", "creation_timestamp": "2026-09-15T12:45:13.362331Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2843e5f7-e10d-4044-be84-a8744b484526/export"/>
    <published>2026-09-15T12:45:13.362331+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e636c0f4-06f3-442d-95af-eaeb446111e7/export</id>
    <title>e636c0f4-06f3-442d-95af-eaeb446111e7</title>
    <updated>2026-09-15T14:36:47.191409+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e636c0f4-06f3-442d-95af-eaeb446111e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvknfbksc22n", "content": "Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)\n\nwww.helpnetsecurity.com/2026/09/15/c...\n\n#Kyberturvallisuus #Kyber #Tilannekuva", "creation_timestamp": "2026-09-15T12:39:18.282085Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e636c0f4-06f3-442d-95af-eaeb446111e7/export"/>
    <published>2026-09-15T12:39:18.282085+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/04443aec-3253-4155-b245-ddfbb45fc81b/export</id>
    <title>04443aec-3253-4155-b245-ddfbb45fc81b</title>
    <updated>2026-09-15T14:36:47.191684+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "04443aec-3253-4155-b245-ddfbb45fc81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23", "content": "\ud83d\udd17 CVE : CVE-2026-20353, CVE-2026-76440, CVE-2026-76441, CVE-2026-76442, CVE-2026-76443, CVE-2026-76461", "creation_timestamp": "2026-09-15T12:05:07.065705Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/04443aec-3253-4155-b245-ddfbb45fc81b/export"/>
    <published>2026-09-15T12:05:07.065705+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/48cab615-ba7a-4dfb-a145-cb5a93487115/export</id>
    <title>48cab615-ba7a-4dfb-a145-cb5a93487115</title>
    <updated>2026-09-15T14:36:47.191942+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "48cab615-ba7a-4dfb-a145-cb5a93487115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mvkktvplnjut", "content": "Cisco $CSCO warns that CVE-2026-76461 in Secure Email Gateway is being actively exploited. Software updates are available; Cisco says there is no workaround.", "creation_timestamp": "2026-09-15T11:55:08.612230Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/48cab615-ba7a-4dfb-a145-cb5a93487115/export"/>
    <published>2026-09-15T11:55:08.612230+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce8efb66-1abd-46fa-9d19-39f0e770a0b4/export</id>
    <title>ce8efb66-1abd-46fa-9d19-39f0e770a0b4</title>
    <updated>2026-09-15T14:36:47.192181+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce8efb66-1abd-46fa-9d19-39f0e770a0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvkjlv7fnt2n", "content": "Cisco\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u30e1\u30fc\u30eb\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027(CVE-2026-76461)\u3092\u4fee\u6b63\n\nCisco\u306f\u6708\u66dc\u65e5\u3001Secure Email Gateway\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u304c\u30bc\u30ed\u30c7\u30a4\u306e\u30b7\u30fc\u30b1\u30f3\u30b7\u30e3\u30eb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3(SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3)\u8106\u5f31\u6027(CVE-2026-76461)\u306b\u3088\u3063\u3066\u4fb5\u5bb3\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u3068\u767a\u8868\u3057\u307e\u3057\u305f\u3002 Cisco\u306e\u88fd\u54c1\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u5bfe\u5fdc\u30c1\u30fc\u30e0(PSIRT)\u306f20", "creation_timestamp": "2026-09-15T11:31:20.835893Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce8efb66-1abd-46fa-9d19-39f0e770a0b4/export"/>
    <published>2026-09-15T11:31:20.835893+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6ac241b5-a602-4d40-9cf0-d007fb85fa0f/export</id>
    <title>6ac241b5-a602-4d40-9cf0-d007fb85fa0f</title>
    <updated>2026-09-15T14:36:47.192430+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6ac241b5-a602-4d40-9cf0-d007fb85fa0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mvkinfjmkk2z", "content": "Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/09/15/c...\n\n#cybersecurity #cybersecuritynews #0day #emailsecurity #enterprise #SMBs @cisco.com", "creation_timestamp": "2026-09-15T11:14:19.818075Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6ac241b5-a602-4d40-9cf0-d007fb85fa0f/export"/>
    <published>2026-09-15T11:14:19.818075+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c5a8803f-ab7a-4d88-b5c6-ceb4c3015edd/export</id>
    <title>c5a8803f-ab7a-4d88-b5c6-ceb4c3015edd</title>
    <updated>2026-09-15T14:36:47.192690+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c5a8803f-ab7a-4d88-b5c6-ceb4c3015edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvkgzpbd5s27", "content": "Cisco patched CVE-2026-76461, a critical zero-day in Secure Email Gateway actively exploited to run root commands without auth. CISA added it to KEV, and Cisco disclosed more critical flaws. #Cisco #CISA #KEV", "creation_timestamp": "2026-09-15T10:45:22.965134Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c5a8803f-ab7a-4d88-b5c6-ceb4c3015edd/export"/>
    <published>2026-09-15T10:45:22.965134+00:00</published>
  </entry>
</feed>
