https://vulnerability.circl.lu/sightings/feed 2026-09-16T22:49:22.343771+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/834e244b-1140-4dcb-8375-a7c06924960a/export 2026-09-16T22:49:22.379916+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "834e244b-1140-4dcb-8375-a7c06924960a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90894", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvnoxooz6c2n", "content": "JFrog disclosed CVE-2026-90894, a Parallels Desktop flaw on Apple ARM Macs that lets any local user escalate to root via argument injection in appliance extraction. Fixed in v27.0.0. #ParaShells #ParallelsDesktop #Alludo", "creation_timestamp": "2026-09-16T17:45:24.571369Z"} 2026-09-16T17:45:24.571369+00:00 https://vulnerability.circl.lu/sighting/08c8787e-84d3-4c2f-bdc8-43b31160d32f/export 2026-09-16T22:49:22.382566+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "08c8787e-84d3-4c2f-bdc8-43b31160d32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90894", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvnjch2wgw23", "content": "New 'ParaShells' flaw (CVE-2026-90894) in Parallels Desktop for Mac allows any local user to gain root access on the host macOS. Patched in v27.0.0 - update now! #macOS #Parallels #LPE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-16T16:04:03.678467Z"} 2026-09-16T16:04:03.678467+00:00 https://vulnerability.circl.lu/sighting/71311f41-665c-47da-aebd-7b29c9f41952/export 2026-09-16T22:49:22.382822+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "71311f41-665c-47da-aebd-7b29c9f41952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90894", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10072", "content": "\ud83d\uded1 A Parallels Desktop flaw lets non-admin Mac users gain root, but Intel Macs can\u2019t install the version containing the fix.\n\nTracked as CVE-2026-90894, JFrog demonstrated the flaw on Parallels Desktop 26.4.0 and reports no attacks.\n\nHow the root escalation works \u2192 https://thehackernews.com/2026/09/parallels-desktop-flaw-lets-non-admin.html", "creation_timestamp": "2026-09-16T16:00:03.893321Z"} 2026-09-16T16:00:03.893321+00:00 https://vulnerability.circl.lu/sighting/484bba65-52fe-4158-a201-109435fc2a94/export 2026-09-16T22:49:22.383031+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "484bba65-52fe-4158-a201-109435fc2a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90894", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvnbmi7hps2m", "content": "Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)\n\nwww.helpnetsecurity.com/2026/09/16/p...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-16T13:46:35.175901Z"} 2026-09-16T13:46:35.175901+00:00 https://vulnerability.circl.lu/sighting/eeb61461-3762-45d3-8027-45c5e1126c3a/export 2026-09-16T22:49:22.383281+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eeb61461-3762-45d3-8027-45c5e1126c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90894", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvn6k75hbj2u", "content": "Parallels Desktop\u306e\u8106\u5f31\u6027\u3001Mac\u306e\u30ed\u30fc\u30ab\u30eb\u30e6\u30fc\u30b6\u30fc\u304c\u8ab0\u3067\u3082root\u6a29\u9650\u3092\u53d6\u5f97\u53ef\u80fd\u306b\uff08CVE-2026-90894\uff09\n\n\u65b0\u305f\u306b\u516c\u8868\u3055\u308c\u305f\u8106\u5f31\u6027\u306f\u3001CVE-2026-90894\u3068\u3057\u3066\u8ffd\u8de1\u756a\u53f7\u304c\u5272\u308a\u5f53\u3066\u3089\u308c\u300cParaShells\u300d\u3068\u540d\u4ed8\u3051\u3089\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3068\u3001Mac\u4e0a\u306e\u30ed\u30fc\u30ab\u30eb\u30e6\u30fc\u30b6\u30fc\u3067\u3042\u308c\u3070\u8ab0\u3067\u3082\u30db\u30b9\u30c8\u30b7\u30b9\u30c6\u30e0\u306eroot\u6a29\u9650\u3092\u53d6\u5f97\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002 ParaShells\u306ePoC\u304c\u5b9f\u884c\u3055\u308c\u308b\u69d8\u5b50\uff08\u63d0\u4f9b:", "creation_timestamp": "2026-09-16T12:51:32.558559Z"} 2026-09-16T12:51:32.558559+00:00 https://vulnerability.circl.lu/sighting/2d570a7b-b96b-4cca-b3f7-05d635a78169/export 2026-09-16T22:49:22.383481+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2d570a7b-b96b-4cca-b3f7-05d635a78169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90894", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mvn64l5tms2h", "content": "Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/09/16/p...\n\n#exploit #macOS #cybersecurity", "creation_timestamp": "2026-09-16T12:43:57.653469Z"} 2026-09-16T12:43:57.653469+00:00 https://vulnerability.circl.lu/sighting/16857d83-2610-496a-802b-83e8c3c818d9/export 2026-09-16T22:49:22.383682+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "16857d83-2610-496a-802b-83e8c3c818d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90894", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mvmtcore2t2y", "content": "Parallels Desktop kwetsbaarheid laat root-toegang toe op Macs met Apple Silicon\n\nEen ernstige beveiligingskwetsbaarheid, gedoopt tot CVE-2026-90894 of ParaShells, is ontdekt in Parallels Desktop voor Mac, specifiek in versie 26.4.0 build 57513 op Macs met Apple Silicon. Deze kwetsbaarheid s...", "creation_timestamp": "2026-09-16T09:30:28.670044Z"} 2026-09-16T09:30:28.670044+00:00