<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-08T04:53:08.713316+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1337e4f2-ff85-4c74-98d1-9cb310c32a68/export</id>
    <title>1337e4f2-ff85-4c74-98d1-9cb310c32a68</title>
    <updated>2026-06-08T04:53:08.757241+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1337e4f2-ff85-4c74-98d1-9cb310c32a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mi72ygcdxt2l", "content": "", "creation_timestamp": "2026-03-29T11:43:06.661009Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1337e4f2-ff85-4c74-98d1-9cb310c32a68/export"/>
    <published>2026-03-29T11:43:06.661009+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/197d52b6-2413-447e-81f9-9652ea411842/export</id>
    <title>197d52b6-2413-447e-81f9-9652ea411842</title>
    <updated>2026-06-08T04:53:08.757172+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "197d52b6-2413-447e-81f9-9652ea411842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://bsky.app/profile/g0rosato.bsky.social/post/3miz2afb7yr2v", "content": "", "creation_timestamp": "2026-04-08T19:38:53.554436Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/197d52b6-2413-447e-81f9-9652ea411842/export"/>
    <published>2026-04-08T19:38:53.554436+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a04a6df4-8c34-44b0-a4ff-3ed3e2410721/export</id>
    <title>a04a6df4-8c34-44b0-a4ff-3ed3e2410721</title>
    <updated>2026-06-08T04:53:08.757101+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a04a6df4-8c34-44b0-a4ff-3ed3e2410721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "Telegram/yjUnQ6hKYXBxzaCr4Cr42UE0MHqi1VzU3UchLcz_NxtZwAY", "content": "", "creation_timestamp": "2026-04-30T09:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a04a6df4-8c34-44b0-a4ff-3ed3e2410721/export"/>
    <published>2026-04-30T09:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c31c1c7a-6598-4f24-993a-193a82eeeb99/export</id>
    <title>c31c1c7a-6598-4f24-993a-193a82eeeb99</title>
    <updated>2026-06-08T04:53:08.757025+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c31c1c7a-6598-4f24-993a-193a82eeeb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/343", "content": "BYPASSING WINDOWS AUTHENTICATION REFLECTION MITIGATIONS FOR SYSTEM SHELLS - PART \u2461\n\nA new arbitrary Kerberos coercion technique (CVE-2026-26128) that led to a complete bypass of the patch of CVE-2025-33073. This short-lived RCE was then transformed into a universal LPE attack.\n\nBYPASSING WINDOWS AUTHENTICATION REFLECTION MITIGATIONS FOR SYSTEM SHELLS - PART 1\n\nAbuse of a new feature of recent Windows versions, namely the ability to connect to SMB shares on arbitrary TCP ports, to achieve local privilege escalation\u00a0(CVE-2026-24294) on up-to-date Windows Server 2025 machines.", "creation_timestamp": "2026-05-02T06:09:03.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c31c1c7a-6598-4f24-993a-193a82eeeb99/export"/>
    <published>2026-05-02T06:09:03+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ca702bc5-55e5-43b5-b644-3ced397f3640/export</id>
    <title>ca702bc5-55e5-43b5-b644-3ced397f3640</title>
    <updated>2026-06-08T04:53:08.756955+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ca702bc5-55e5-43b5-b644-3ced397f3640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24294", "type": "seen", "source": "Telegram/GBpYOLFByJUZNo27RsDzztksilkUG3XAg7CrsrR5OqI_xQ", "content": "", "creation_timestamp": "2026-05-02T13:21:19.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ca702bc5-55e5-43b5-b644-3ced397f3640/export"/>
    <published>2026-05-02T13:21:19+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/845f17d6-8431-484f-ae1f-d4358535d16d/export</id>
    <title>845f17d6-8431-484f-ae1f-d4358535d16d</title>
    <updated>2026-06-08T04:53:08.756888+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "845f17d6-8431-484f-ae1f-d4358535d16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "Telegram/17cmREU9ZDSDvyz78F9oo9Lr_unjD9vL2ztNU0fhrgd68AR1", "content": "", "creation_timestamp": "2026-05-04T13:15:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/845f17d6-8431-484f-ae1f-d4358535d16d/export"/>
    <published>2026-05-04T13:15:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6e5d0977-6a7b-4022-b269-a027023ae555/export</id>
    <title>6e5d0977-6a7b-4022-b269-a027023ae555</title>
    <updated>2026-06-08T04:53:08.756781+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6e5d0977-6a7b-4022-b269-a027023ae555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mkzxscfe5bu2", "content": "Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/", "creation_timestamp": "2026-05-04T15:21:52.678481Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6e5d0977-6a7b-4022-b269-a027023ae555/export"/>
    <published>2026-05-04T15:21:52.678481+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6babbed5-3900-4140-a7a5-5d847ffbecc4/export</id>
    <title>6babbed5-3900-4140-a7a5-5d847ffbecc4</title>
    <updated>2026-06-08T04:53:08.756571+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6babbed5-3900-4140-a7a5-5d847ffbecc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24299", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3ml4zuqd7f22t", "content": "Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) \u00b7  Embrace The Red embracethered.com/blog/posts/2...", "creation_timestamp": "2026-05-05T20:33:24.740866Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6babbed5-3900-4140-a7a5-5d847ffbecc4/export"/>
    <published>2026-05-05T20:33:24.740866+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/44e2b14e-9858-4392-9122-56abd92c8fc8/export</id>
    <title>44e2b14e-9858-4392-9122-56abd92c8fc8</title>
    <updated>2026-06-08T04:53:08.756245+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "44e2b14e-9858-4392-9122-56abd92c8fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116601532783321868", "content": "Micropatches released  for Windows Accessibility Infrastructure Elevation of Privilege  Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187) https://blog.0patch.com/2026/05/micropatches-released-for-windows.html", "creation_timestamp": "2026-05-19T13:43:15.281244Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/44e2b14e-9858-4392-9122-56abd92c8fc8/export"/>
    <published>2026-05-19T13:43:15.281244+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/81cd9175-b7c7-48d9-845a-5ac991c97690/export</id>
    <title>81cd9175-b7c7-48d9-845a-5ac991c97690</title>
    <updated>2026-06-08T04:53:08.753217+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "81cd9175-b7c7-48d9-845a-5ac991c97690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24291", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mma33thltp25", "content": "Micropatches released for Windows Accessibility Infrastructure Elevation of Privilege Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187)", "creation_timestamp": "2026-05-19T18:58:29.146853Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/81cd9175-b7c7-48d9-845a-5ac991c97690/export"/>
    <published>2026-05-19T18:58:29.146853+00:00</published>
  </entry>
</feed>
