https://vulnerability.circl.lu/sightings/feed 2026-10-09T20:59:54.167966+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2043096d-df3c-4a86-ac54-965ff714c937/export 2026-10-09T20:59:54.191231+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2043096d-df3c-4a86-ac54-965ff714c937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.295328Z"} 2026-10-09T14:47:00.295328+00:00 https://vulnerability.circl.lu/sighting/5cb73e17-4d05-4ec8-a772-7908ab687ea4/export 2026-10-09T20:59:54.193377+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5cb73e17-4d05-4ec8-a772-7908ab687ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77900", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxg5bfurif2y", "content": "CRITICAL: CVE-2026-77900 in Azure App Service for Linux lets attackers run code remotely with no auth (CVSS 9.8). Official fix available \u2014 apply immediately. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c...", "creation_timestamp": "2026-10-09T04:30:29.145748Z"} 2026-10-09T04:30:29.145748+00:00 https://vulnerability.circl.lu/sighting/dfdb7d11-1b95-4d4f-a132-ce758135505f/export 2026-10-09T20:59:54.193462+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dfdb7d11-1b95-4d4f-a132-ce758135505f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77900", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117409069502341938", "content": "Microsoft Azure App Service for Linux hit by CVE-2026-77900 (CRITICAL, CVSS 9.8): missing authentication enables unauthenticated remote code execution. Patch released \u2014 update now. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c7a8fa62ffe41 #OffSeq #Azure #CVE202677900 #Infosec #CloudSecurity", "creation_timestamp": "2026-10-09T04:30:26.414795Z"} 2026-10-09T04:30:26.414795+00:00 https://vulnerability.circl.lu/sighting/33e35e91-340c-4636-a10a-e4e5a1b03a0b/export 2026-10-09T20:59:54.193531+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "33e35e91-340c-4636-a10a-e4e5a1b03a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfooty26k2o", "content": "\ud83d\udea8 CVE-2026-77900 \u2014 CVSS 9.8 CRITICAL\n\nMissing authentication for critical function in Azure App Service allows an unauthorized attacker to execut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:32.766531Z"} 2026-10-09T00:09:32.766531+00:00 https://vulnerability.circl.lu/sighting/614d3525-007d-4764-a057-7c7efd044891/export 2026-10-09T20:59:54.193601+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "614d3525-007d-4764-a057-7c7efd044891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfleirgee2o", "content": "CVE-2026-77900 - azure app service for linux\nA function in Azure App Service for Linux does not require authentication, so an attacker on the network could run their own code on the service. This could let them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:10:04.299797Z"} 2026-10-08T23:10:04.299797+00:00