<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-09T14:34:20.640603+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/46e6351f-366f-4d57-8472-addc7ffe3b1d/export</id>
    <title>46e6351f-366f-4d57-8472-addc7ffe3b1d</title>
    <updated>2026-10-09T14:34:20.666931+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "46e6351f-366f-4d57-8472-addc7ffe3b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88131", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117410643224355428", "content": "CVE-2026-88131 - Critical RCE in Microsoft Dataverse via insecure deserialization. CVSS 9.8. Unpatched vulnerability. Mitigate immediately. #CVE #Microsoft #infosec\nhttps://www.valtersit.com/cve/CVE-2026-88131/", "creation_timestamp": "2026-10-09T11:10:39.468195Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/46e6351f-366f-4d57-8472-addc7ffe3b1d/export"/>
    <published>2026-10-09T11:10:39.468195+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aa27f45d-b80e-4622-b722-9f80a1f6a873/export</id>
    <title>aa27f45d-b80e-4622-b722-9f80a1f6a873</title>
    <updated>2026-10-09T14:34:20.668634+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aa27f45d-b80e-4622-b722-9f80a1f6a873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88131", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxfyahh7uy2x", "content": "CVE-2026-88131: Microsoft Dataverse deserialization bug (CRITICAL, CVSS 9.8) enables unauthenticated RCE. Patch immediately using Microsoft\u2019s fix: https://radar.offseq.com/threat/cve-2026-88131-cwe-502-deserialization-of-untrusted-data-in-microsoft-microsoft-dataverse-eba5097c3e4671bb #OffSeq #Mi...", "creation_timestamp": "2026-10-09T03:00:27.949394Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aa27f45d-b80e-4622-b722-9f80a1f6a873/export"/>
    <published>2026-10-09T03:00:27.949394+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/22cb1da9-355b-47dd-8c33-2482915b7d5c/export</id>
    <title>22cb1da9-355b-47dd-8c33-2482915b7d5c</title>
    <updated>2026-10-09T14:34:20.668773+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "22cb1da9-355b-47dd-8c33-2482915b7d5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88131", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117408715560166560", "content": "Microsoft Dataverse is affected by CVE-2026-88131 (CRITICAL, CVSS 9.8): deserialization of untrusted data allows unauthenticated RCE. Patch available \u2014 apply ASAP! https://radar.offseq.com/threat/cve-2026-88131-cwe-502-deserialization-of-untrusted-data-in-microsoft-microsoft-dataverse-eba5097c3e4671bb #OffSeq #CVE202688131 #Microsoft #RCE #Infosec", "creation_timestamp": "2026-10-09T03:00:25.691600Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/22cb1da9-355b-47dd-8c33-2482915b7d5c/export"/>
    <published>2026-10-09T03:00:25.691600+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65c523fa-8468-4bd1-ba36-9ccdc39b64f9/export</id>
    <title>65c523fa-8468-4bd1-ba36-9ccdc39b64f9</title>
    <updated>2026-10-09T14:34:20.668876+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65c523fa-8468-4bd1-ba36-9ccdc39b64f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88131", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfop3to2e2l", "content": "\ud83d\udea8 CVE-2026-88131 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code ov...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88131\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:40.878834Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65c523fa-8468-4bd1-ba36-9ccdc39b64f9/export"/>
    <published>2026-10-09T00:09:40.878834+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5e8c10c6-4fe2-481b-830e-6dc9a2ae0609/export</id>
    <title>5e8c10c6-4fe2-481b-830e-6dc9a2ae0609</title>
    <updated>2026-10-09T14:34:20.668974+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5e8c10c6-4fe2-481b-830e-6dc9a2ae0609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88131", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxfnwvcsdp2u", "content": "Correction: Microsoft says CVE-2026-88131 in Dataverse is already fully mitigated on its side, so customers don't need to take any action. We've updated the story: https://thecircuitry.to/article/critical-cve-2026-88131-hits-microsoft-dataverse-with-remote-code-execution-mv06keod", "creation_timestamp": "2026-10-08T23:56:08.686669Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5e8c10c6-4fe2-481b-830e-6dc9a2ae0609/export"/>
    <published>2026-10-08T23:56:08.686669+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b1adb14a-0074-4700-a172-c0257422adc3/export</id>
    <title>b1adb14a-0074-4700-a172-c0257422adc3</title>
    <updated>2026-10-09T14:34:20.669073+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b1adb14a-0074-4700-a172-c0257422adc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88131", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxfn7afj6f2o", "content": "CVE-2026-88131 scores 9.8 critical in Microsoft Dataverse.\n\u2022 Remote code execution\n\u2022 No auth or user interaction needed\n\u2022 Network attack vector\nCheck the MSRC advisory now.\n\nhttps://thecircuitry.to/article/critical-cve-2026-88131-hits-microsoft-dataverse-with-remote-code-execution-mv06keod", "creation_timestamp": "2026-10-08T23:42:55.747021Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b1adb14a-0074-4700-a172-c0257422adc3/export"/>
    <published>2026-10-08T23:42:55.747021+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cb7de88b-262e-4ac8-807d-e230756a1a06/export</id>
    <title>cb7de88b-262e-4ac8-807d-e230756a1a06</title>
    <updated>2026-10-09T14:34:20.669169+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cb7de88b-262e-4ac8-807d-e230756a1a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88131", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxflek76pe2q", "content": "CVE-2026-88131 - microsoft dataverse\nMicrosoft Dataverse can be tricked into running malicious code sent over a network. This means an attacker could take control of the system that hosts your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftdataverse #microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:10:05.651262Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cb7de88b-262e-4ac8-807d-e230756a1a06/export"/>
    <published>2026-10-08T23:10:05.651262+00:00</published>
  </entry>
</feed>
