<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-16T21:06:10.231788+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/be4f13a2-20a0-4d18-aa50-4821dc2654f0/export</id>
    <title>be4f13a2-20a0-4d18-aa50-4821dc2654f0</title>
    <updated>2026-06-16T21:06:10.633507+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "be4f13a2-20a0-4d18-aa50-4821dc2654f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9862", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3modpfnfc6n2a", "content": "Critical CVE-2026-9862: Fortra BoKS OS command injection (CVSS 9.8) lets remote attackers run commands via boks_autoregisterd. Restrict access &amp;amp; monitor logs until patch info is available. https://radar.offseq.com/threat/cve-2026-9862-cwe-78-improper-neutralization-of-sp-0a9c664a #OffSeq #CVE2026...", "creation_timestamp": "2026-06-15T16:30:14.089583Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/be4f13a2-20a0-4d18-aa50-4821dc2654f0/export"/>
    <published>2026-06-15T16:30:14.089583+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2cde1c2e-658c-4442-92c1-4f148aa22078/export</id>
    <title>2cde1c2e-658c-4442-92c1-4f148aa22078</title>
    <updated>2026-06-16T21:06:10.633405+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2cde1c2e-658c-4442-92c1-4f148aa22078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9862", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116755071710658685", "content": "\ud83d\udea8 CRITICAL: CVE-2026-9862 in Fortra Core Privileged Access Manager (BoKS) allows unauthenticated remote OS command injection via boks_autoregisterd (CVSS 9.8). Restrict network access &amp;amp; monitor activity. No patch yet. https://radar.offseq.com/threat/cve-2026-9862-cwe-78-improper-neutralization-of-sp-0a9c664a #OffSeq #CVE20269862 #Infosec", "creation_timestamp": "2026-06-15T16:30:18.886523Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2cde1c2e-658c-4442-92c1-4f148aa22078/export"/>
    <published>2026-06-15T16:30:18.886523+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a256e90d-eebf-46b9-92c2-2908754fc8eb/export</id>
    <title>a256e90d-eebf-46b9-92c2-2908754fc8eb</title>
    <updated>2026-06-16T21:06:10.633326+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a256e90d-eebf-46b9-92c2-2908754fc8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116755118941669075", "content": "The severity is increased for this new vulnerability affecting Fortra Core Privileged Access Manager (CVE-2026-9862) https://vuldb.com/vuln/370929", "creation_timestamp": "2026-06-15T16:42:13.167415Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a256e90d-eebf-46b9-92c2-2908754fc8eb/export"/>
    <published>2026-06-15T16:42:13.167415+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/41a6f3c0-1038-4125-bc7f-1f76ec494ad6/export</id>
    <title>41a6f3c0-1038-4125-bc7f-1f76ec494ad6</title>
    <updated>2026-06-16T21:06:10.633216+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "41a6f3c0-1038-4125-bc7f-1f76ec494ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mods3eeno72e", "content": "CVE-2026-9862 - Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability\nCVE ID : CVE-2026-9862\n \n Published : June 15, 2026, 4:16 p.m. | 52\u00a0minutes ago\n \n Description : Fortra's\u00a0\nCore Privileged Access Manager (BoKS)\u00a0contains an OS comman...", "creation_timestamp": "2026-06-15T17:18:09.591849Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/41a6f3c0-1038-4125-bc7f-1f76ec494ad6/export"/>
    <published>2026-06-15T17:18:09.591849+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e572ed46-f9e2-4a04-8c1d-a4044aa3490b/export</id>
    <title>e572ed46-f9e2-4a04-8c1d-a4044aa3490b</title>
    <updated>2026-06-16T21:06:10.630725+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e572ed46-f9e2-4a04-8c1d-a4044aa3490b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moduipzzjk2y", "content": "\ud83d\udd34 CVE-2026-9862 - Critical (9.8)\n\nFortra's\u00a0\nCore Privileged Access Manager (BoKS)\u00a0contains an OS command injection vulnerability ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9862/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T18:01:26.980752Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e572ed46-f9e2-4a04-8c1d-a4044aa3490b/export"/>
    <published>2026-06-15T18:01:26.980752+00:00</published>
  </entry>
</feed>
