<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T12:56:20.468985+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1985d3f8-2fa4-41a0-b0eb-8531eedf4b56/export</id>
    <title>1985d3f8-2fa4-41a0-b0eb-8531eedf4b56</title>
    <updated>2026-10-10T12:56:20.494321+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1985d3f8-2fa4-41a0-b0eb-8531eedf4b56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96207", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxhetpxr2z2v", "content": "CVE-2026-96207 is trending. Hype score 10, currently #5 on cvemon.\n\nImproper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-96207", "creation_timestamp": "2026-10-09T16:18:38.609114Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1985d3f8-2fa4-41a0-b0eb-8531eedf4b56/export"/>
    <published>2026-10-09T16:18:38.609114+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/196db450-31a9-46a7-92e1-613556316e05/export</id>
    <title>196db450-31a9-46a7-92e1-613556316e05</title>
    <updated>2026-10-10T12:56:20.496630+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "196db450-31a9-46a7-92e1-613556316e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96207", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.244512Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/196db450-31a9-46a7-92e1-613556316e05/export"/>
    <published>2026-10-09T14:47:00.244512+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dafb6bdd-3d49-49d7-9238-5038f37e747d/export</id>
    <title>dafb6bdd-3d49-49d7-9238-5038f37e747d</title>
    <updated>2026-10-10T12:56:20.496792+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dafb6bdd-3d49-49d7-9238-5038f37e747d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96207", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfopleqqr2w", "content": "\ud83d\udea8 CVE-2026-96207 \u2014 CVSS 10 CRITICAL\n\nImproper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate priv...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96207\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:57.020039Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dafb6bdd-3d49-49d7-9238-5038f37e747d/export"/>
    <published>2026-10-09T00:09:57.020039+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/148e1db1-bc24-47a9-ae24-a04ff2f637f2/export</id>
    <title>148e1db1-bc24-47a9-ae24-a04ff2f637f2</title>
    <updated>2026-10-10T12:56:20.496902+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "148e1db1-bc24-47a9-ae24-a04ff2f637f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96207", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxfo7356wy2j", "content": "CRITICAL: CVE-2026-96207 in Microsoft Partner Center (CVSS 10). Improper certificate validation enables privilege escalation. Patch from Microsoft is available \u2014 update now: https://radar.offseq.com/threat/cve-2026-96207-cwe-295-improper-certificate-validation-in-microsoft-microsoft-partner-cente...", "creation_timestamp": "2026-10-09T00:00:43.802532Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/148e1db1-bc24-47a9-ae24-a04ff2f637f2/export"/>
    <published>2026-10-09T00:00:43.802532+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5fb52d05-6224-4ab0-9414-3cc28b5ef36c/export</id>
    <title>5fb52d05-6224-4ab0-9414-3cc28b5ef36c</title>
    <updated>2026-10-10T12:56:20.497003+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5fb52d05-6224-4ab0-9414-3cc28b5ef36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96207", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117408008833843570", "content": "CVE-2026-96207 (CRITICAL, CVSS 10) affects Microsoft Partner Center: improper certificate validation (CWE-295) allows remote privilege escalation. Patch available \u2014 apply ASAP. No public exploits seen. https://radar.offseq.com/threat/cve-2026-96207-cwe-295-improper-certificate-validation-in-microsoft-microsoft-partner-center-0f13dc5f1a15e1f3 #OffSeq #Microsoft #CVE202696207 #Infosec", "creation_timestamp": "2026-10-09T00:00:41.942697Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5fb52d05-6224-4ab0-9414-3cc28b5ef36c/export"/>
    <published>2026-10-09T00:00:41.942697+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b788e657-4a1e-4d24-a6c3-12dc944b5308/export</id>
    <title>b788e657-4a1e-4d24-a6c3-12dc944b5308</title>
    <updated>2026-10-10T12:56:20.497102+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b788e657-4a1e-4d24-a6c3-12dc944b5308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxflwgnayw2l", "content": "CVE-2026-96207 - microsoft partner center\nThe Microsoft Partner Center web service does not correctly check digital certificates, so a malicious person could trick the system and increase their access level. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:20:06.225911Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b788e657-4a1e-4d24-a6c3-12dc944b5308/export"/>
    <published>2026-10-08T23:20:06.225911+00:00</published>
  </entry>
</feed>
