https://vulnerability.circl.lu/sightings/feed 2026-09-27T16:32:10.273866+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/62e3d1e0-1134-4421-ae60-7e7576710200/export 2026-09-27T16:32:10.301673+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "62e3d1e0-1134-4421-ae60-7e7576710200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr2jg22vq2w", "content": "CVE-2026-76949 - ash_authentication\nThe ash_authentication component used in your applications can be tricked into swapping a legitimate user\u2019s logged\u2011in session with the attacker\u2019s own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ashauthentication #teamalembic #Hex #CVE #infosec", "creation_timestamp": "2026-09-18T01:50:09.254810Z"} 2026-09-18T01:50:09.254810+00:00 https://vulnerability.circl.lu/sighting/2b6156b0-b63d-48da-89f3-dba2d4c76b10/export 2026-09-27T16:32:10.306063+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2b6156b0-b63d-48da-89f3-dba2d4c76b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquth7w3r2b", "content": "\ud83d\udea8 CVE-2026-76949 \u2014 CVSS 9.1 CRITICAL\n\nAuthentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who c...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76949\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:08:35.123626Z"} 2026-09-18T00:08:35.123626+00:00 https://vulnerability.circl.lu/sighting/515e5a67-0a1e-434e-9c27-2f06b5f3be7d/export 2026-09-27T16:32:10.306438+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "515e5a67-0a1e-434e-9c27-2f06b5f3be7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/coiowlu2wk7hy", "content": "CVE-2026-76949 - Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement\nCVE ID : CVE-2026-76949\n \n Published : Sept. 17, 2026, 10:17 p.m. | 52\u00a0minutes ago\n \n Description : Authentication Bypass by Spoofing vulner...", "creation_timestamp": "2026-09-17T23:52:28.256826Z"} 2026-09-17T23:52:28.256826+00:00 https://vulnerability.circl.lu/sighting/6cfbe8ae-86e5-416b-a098-975b22f735e9/export 2026-09-27T16:32:10.306738+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6cfbe8ae-86e5-416b-a098-975b22f735e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7694", "type": "seen", "source": "https://t.me/shimiscyberworld/1155", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-03\n\n\ud83d\udcca 4 vulnerabilities detected today, 4 \ud83d\udd34 High\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-7694 (7.3) \u2014 Acrel Electrical ECEMS SQLi (CVE-2026-7694) Exposes\u2026\n \u2022 CVE-2026-7695 (7.3) \u2014 Acrel Electrical EEMS Platform Hit by High-Severity SQL\u2026\n \u2022 CVE-2026-7698 (7.3) \u2014 Tiandy Easy7 RCE: Unauthenticated OS Command Injection via\u2026\n \u2022 CVE-2026-7703 (7.3) \u2014 AV Stumpfl Pixera Two Media Server Websocket API Code\u2026\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:18.502717Z"} 2026-09-12T10:00:18.502717+00:00 https://vulnerability.circl.lu/sighting/8f400c5f-8cd6-40a9-bd36-9ab40e7a9059/export 2026-09-27T16:32:10.307037+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8f400c5f-8cd6-40a9-bd36-9ab40e7a9059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7yuhyg4o2p", "content": "CVE-2026-76943\nThe administrative interface on the Xiiaozet LK100Wt device does not properly verify who is accessing it. An attacker could skip the normal login steps and gain the ability to run commands as an administrator,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T13:40:05.465070Z"} 2026-08-29T13:40:05.465070+00:00 https://vulnerability.circl.lu/sighting/8514fc7d-c7df-4e24-bf7f-46f721661b57/export 2026-09-27T16:32:10.307296+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8514fc7d-c7df-4e24-bf7f-46f721661b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xirxzad2v", "content": "~Cisa~\nThree flaws enable unauthenticated access, authentication bypass, and command execution; update to 2.1.240.\n-\nIOCs: CVE-2026-78239, CVE-2026-76943, CVE-2026-78037\n-\n#CVE #ICS #ThreatIntel", "creation_timestamp": "2026-08-29T13:15:39.969701Z"} 2026-08-29T13:15:39.969701+00:00 https://vulnerability.circl.lu/sighting/704b3c4c-5edd-472f-99b7-709117e6fbce/export 2026-09-27T16:32:10.307560+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "704b3c4c-5edd-472f-99b7-709117e6fbce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76945", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4saylscr2t", "content": "\ud83d\udfe0 CVE-2026-76945 - High (7.5)\n\nThe affected Ebyte device relies on client-managed authentication tokens\n without sufficient serv...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76945/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T07:03:51.081486Z"} 2026-08-28T07:03:51.081486+00:00 https://vulnerability.circl.lu/sighting/74dd9922-ad90-4d2c-aa2a-f8d564a05af6/export 2026-09-27T16:32:10.307721+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "74dd9922-ad90-4d2c-aa2a-f8d564a05af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4or2cz6w27", "content": "\ud83d\udd34 CVE-2026-76943 - Critical (9.8)\n\nXiiaozet LK100Wt contains an authentication weakness within an \nadministrative service that may a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76943/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T06:01:19.026879Z"} 2026-08-28T06:01:19.026879+00:00 https://vulnerability.circl.lu/sighting/d0952c16-3ad4-4c8c-b1dd-408e0ba8119c/export 2026-09-27T16:32:10.307830+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d0952c16-3ad4-4c8c-b1dd-408e0ba8119c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4br44ew72f", "content": "\ud83d\udea8 CVE-2026-76943 \u2014 CVSS 9.3 CRITICAL\n\nXiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76943\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T02:08:37.049259Z"} 2026-08-28T02:08:37.049259+00:00 https://vulnerability.circl.lu/sighting/3947a09c-949d-4135-817b-0fce422180c5/export 2026-09-27T16:32:10.307938+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3947a09c-949d-4135-817b-0fce422180c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4bdixola26", "content": "\ud83d\udfe0 CVE-2026-76940 - High (7.5)\n\nThe affected Ebyte device does not restrict repeated authentication \nattempts through rate limiti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76940/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T02:01:01.565520Z"} 2026-08-28T02:01:01.565520+00:00