<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-25T05:08:21.834501+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/937034dc-a41c-4453-81e7-251a1b3cbb8f/export</id>
    <title>937034dc-a41c-4453-81e7-251a1b3cbb8f</title>
    <updated>2026-09-25T05:08:21.858654+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "937034dc-a41c-4453-81e7-251a1b3cbb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28324", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwckyplk4g2h", "content": "SolarWinds patches two unauth RCE flaws in Observability Self-Hosted: CVE-2026-28324 (CVSS 9.8) and CVE-2026-28325\u2026 https://0daynews.com/articles/2026-09-24-solarwinds-observability-cve-2026-28324-28325-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-3489", "creation_timestamp": "2026-09-25T01:00:21.178345Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/937034dc-a41c-4453-81e7-251a1b3cbb8f/export"/>
    <published>2026-09-25T01:00:21.178345+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/24609dfd-4fec-4f5f-a2f3-c11edd3c11d0/export</id>
    <title>24609dfd-4fec-4f5f-a2f3-c11edd3c11d0</title>
    <updated>2026-09-25T05:08:21.861518+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "24609dfd-4fec-4f5f-a2f3-c11edd3c11d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://t.me/VulnerabilityNews/44588", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "creation_timestamp": "2026-09-24T23:00:53.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/24609dfd-4fec-4f5f-a2f3-c11edd3c11d0/export"/>
    <published>2026-09-24T23:00:53+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d87b5d7b-f806-465d-9d15-6818859920d3/export</id>
    <title>d87b5d7b-f806-465d-9d15-6818859920d3</title>
    <updated>2026-09-25T05:08:21.861701+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d87b5d7b-f806-465d-9d15-6818859920d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://t.me/information_security_channel/55973", "content": "SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted\nhttps://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/\n\nThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted (https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-24T21:05:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d87b5d7b-f806-465d-9d15-6818859920d3/export"/>
    <published>2026-09-24T21:05:08+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d248a1ab-c3fe-46aa-91cc-e038f0aa61bd/export</id>
    <title>d248a1ab-c3fe-46aa-91cc-e038f0aa61bd</title>
    <updated>2026-09-25T05:08:21.861821+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d248a1ab-c3fe-46aa-91cc-e038f0aa61bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwbcrgsix62r", "content": "SolarWinds patched two critical RCE flaws in Observability Self-Hosted, including CVE-2026-28324 and CVE-2026-28325. No exploitation in the wild has been reported. #SolarWinds #RCE #CVE202628324", "creation_timestamp": "2026-09-24T13:00:24.147337Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d248a1ab-c3fe-46aa-91cc-e038f0aa61bd/export"/>
    <published>2026-09-24T13:00:24.147337+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/231a5a94-2cd4-4065-a4d5-6ae69cf21db6/export</id>
    <title>231a5a94-2cd4-4065-a4d5-6ae69cf21db6</title>
    <updated>2026-09-25T05:08:21.861944+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "231a5a94-2cd4-4065-a4d5-6ae69cf21db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/", "content": "The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.\n\nThe post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.", "creation_timestamp": "2026-09-24T08:40:40.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/231a5a94-2cd4-4065-a4d5-6ae69cf21db6/export"/>
    <published>2026-09-24T08:40:40+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4e8f43fb-ff49-461a-a450-b6737881767b/export</id>
    <title>4e8f43fb-ff49-461a-a450-b6737881767b</title>
    <updated>2026-09-25T05:08:21.862062+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "4e8f43fb-ff49-461a-a450-b6737881767b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-950", "content": "", "creation_timestamp": "2026-09-23T16:15:28.540911Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4e8f43fb-ff49-461a-a450-b6737881767b/export"/>
    <published>2026-09-23T16:15:28.540911+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/93a57f92-6916-464c-9a4e-9a472ee173a8/export</id>
    <title>93a57f92-6916-464c-9a4e-9a472ee173a8</title>
    <updated>2026-09-25T05:08:21.863274+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "93a57f92-6916-464c-9a4e-9a472ee173a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74m6gtgh23", "content": "~Cybergcca~\nWordPress CVE-2026-87902 is exploited in the wild; SolarWinds and HPE also require updates.\n-\nIOCs: CVE-2026-87902, CVE-2026-28325, CVE-2026-28324\n-\n#CVE202687902 #ThreatIntel #WordPress", "creation_timestamp": "2026-09-23T16:04:46.264926Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/93a57f92-6916-464c-9a4e-9a472ee173a8/export"/>
    <published>2026-09-23T16:04:46.264926+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/126bea49-6386-4818-82d6-c8bc731f27ee/export</id>
    <title>126bea49-6386-4818-82d6-c8bc731f27ee</title>
    <updated>2026-09-25T05:08:21.863424+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "126bea49-6386-4818-82d6-c8bc731f27ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6t4ti2wv2r", "content": "\ud83d\udd17 CVE : CVE-2026-28324, CVE-2026-28325", "creation_timestamp": "2026-09-23T13:15:07.085060Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/126bea49-6386-4818-82d6-c8bc731f27ee/export"/>
    <published>2026-09-23T13:15:07.085060+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/87d0f98b-6121-4a3e-ab8f-43789ed21b6f/export</id>
    <title>87d0f98b-6121-4a3e-ab8f-43789ed21b6f</title>
    <updated>2026-09-25T05:08:21.863544+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "87d0f98b-6121-4a3e-ab8f-43789ed21b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw5k6x5qoa2n", "content": "SolarWinds Observability vulnerabilities allow RCE via CVE-2026-28324. Update to version 2026.2.3 to secure your monitoring infrastructure today.\n\n#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec", "creation_timestamp": "2026-09-23T01:02:35.278434Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/87d0f98b-6121-4a3e-ab8f-43789ed21b6f/export"/>
    <published>2026-09-23T01:02:35.278434+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/34c34c3d-f57e-422f-b2d0-568ec99d375c/export</id>
    <title>34c34c3d-f57e-422f-b2d0-568ec99d375c</title>
    <updated>2026-09-25T05:08:21.863668+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "34c34c3d-f57e-422f-b2d0-568ec99d375c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28324", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5akqbdy622", "content": "\ud83d\udea8 CVE-2026-28324 \u2014 CVSS 9.8 CRITICAL\n\nSolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution v...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28324\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:12.625543Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/34c34c3d-f57e-422f-b2d0-568ec99d375c/export"/>
    <published>2026-09-22T22:10:12.625543+00:00</published>
  </entry>
</feed>
