<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-07T05:23:39.444102+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/56854438-f15b-4e18-bbe8-22e7d1789b8e/export</id>
    <title>56854438-f15b-4e18-bbe8-22e7d1789b8e</title>
    <updated>2026-06-07T05:23:39.457876+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "56854438-f15b-4e18-bbe8-22e7d1789b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmmzoauhvs2g", "content": "Microsoft\u3001\u30bc\u30ed\u30c7\u30a4 \u8106\u5f31\u6027\u306eRedSun(CVE-2026-41091)\u3068UnDefend(CVE-2026-45498)\u306e\u7dca\u6025\u30d1\u30c3\u30c1\u3092\u516c\u958b\u30fbYellowKey(CVE-2026-45585)\u306f\u300c\u7de9\u548c\u7b56\u306e\u307f\u300d\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-05-24T22:37:38.959153Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/56854438-f15b-4e18-bbe8-22e7d1789b8e/export"/>
    <published>2026-05-24T22:37:38.959153+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/deb17fe3-5a43-49bd-99c4-d61702404d47/export</id>
    <title>deb17fe3-5a43-49bd-99c4-d61702404d47</title>
    <updated>2026-06-07T05:23:39.457763+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "deb17fe3-5a43-49bd-99c4-d61702404d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45584", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmngpinxe52e", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46333: 24 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-45250: 8 interactions\nCVE-2026-26980: 6 interactions\nCVE-2026-9082: 4 interactions\n", "creation_timestamp": "2026-05-25T02:30:54.739832Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/deb17fe3-5a43-49bd-99c4-d61702404d47/export"/>
    <published>2026-05-25T02:30:54.739832+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c29cfede-67fb-4526-8b27-04adb7a2af3a/export</id>
    <title>c29cfede-67fb-4526-8b27-04adb7a2af3a</title>
    <updated>2026-06-07T05:23:39.457636+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c29cfede-67fb-4526-8b27-04adb7a2af3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/kaijulogic.bsky.social/post/3mmpiurgqxk25", "content": "I was surprised I didn't see more discussion about the YellowKey BitLocker vulnerability (CVE-2026-45585) so I decided to make a short blog post compiling the information I could find about it. Check it out if you are interested in learning more!\ntinyurl.com/mt4k5we4", "creation_timestamp": "2026-05-25T22:15:01.726482Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c29cfede-67fb-4526-8b27-04adb7a2af3a/export"/>
    <published>2026-05-25T22:15:01.726482+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6455a3f6-072c-419d-b1e5-b4bda96336c4/export</id>
    <title>6455a3f6-072c-419d-b1e5-b4bda96336c4</title>
    <updated>2026-06-07T05:23:39.457518+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6455a3f6-072c-419d-b1e5-b4bda96336c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45584", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmpx5qwrnf2j", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-26980: 7 interactions\nCVE-2026-44277: 3 interactions\nCVE-2026-5223: 3 interactions\n", "creation_timestamp": "2026-05-26T02:30:32.542858Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6455a3f6-072c-419d-b1e5-b4bda96336c4/export"/>
    <published>2026-05-26T02:30:32.542858+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/02a65102-4940-42e1-b221-1b19cd44c41f/export</id>
    <title>02a65102-4940-42e1-b221-1b19cd44c41f</title>
    <updated>2026-06-07T05:23:39.457383+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "02a65102-4940-42e1-b221-1b19cd44c41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45584", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmshngckkv2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48710: 11 interactions\nCVE-2026-28952: 3 interactions\nCVE-2026-45659: 3 interactions\n", "creation_timestamp": "2026-05-27T02:30:57.574213Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/02a65102-4940-42e1-b221-1b19cd44c41f/export"/>
    <published>2026-05-27T02:30:57.574213+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/788b1405-ef5f-42a2-a28a-ea28550652d5/export</id>
    <title>788b1405-ef5f-42a2-a28a-ea28550652d5</title>
    <updated>2026-06-07T05:23:39.457199+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "788b1405-ef5f-42a2-a28a-ea28550652d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://t.me/kasperskyb2b/2196", "content": "\ud83d\ude08 \u041a\u043e\u0448\u043c\u0430\u0440 \u043f\u0435\u0440\u0435\u0434 \u0437\u0430\u0442\u043c\u0435\u043d\u0438\u0435\u043c \u0432 \u043e\u0444\u0438\u0441\u0435 Microsoft\n\n\u0421 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u043c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c \u0437\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0432 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f Nightmare Eclipse \u0438 Microsoft, \u0442\u043e\u0447\u043d\u0435\u0435 \u0438\u0445 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, MSRC. \u041f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u043e \u043d\u0451\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u0434\u043b\u044f \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows \u0438 Defender, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 (\u043f\u043e \u0435\u0433\u043e \u0441\u043b\u043e\u0432\u0430\u043c), \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u0432\u0438\u0434\u0435\u043e\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.  \n\n\u041d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0443\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u043b\u043e \u0432 \u043c\u0430\u0435, \u043a\u043e\u0433\u0434\u0430 \u0430\u043a\u043a\u0443\u0440\u0430\u0442 \u043f\u043e\u0441\u043b\u0435 \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Yellowkey  (CVE-2026-45585), \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 BitLocker \u043d\u0430 Windows 11, Windows Server 2022 \u0438 2025. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0430 USB-\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0435\u0433\u043e \u043a \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0443 \u0441 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0438\u0441\u043a\u043e\u043c \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c\u0441\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (Windows Recovery Environment), \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f \u043d\u0430\u0436\u0430\u0442\u043e\u0439 CTRL. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u043a\u0430. \u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u044b, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u044b \u0438\u0441\u0447\u0435\u0437\u0430\u044e\u0442 \u0441 \u0444\u043b\u044d\u0448\u043a\u0438, \u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u0442\u043e \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 apparent backdoor.\n\nMicrosoft \u0432 \u043e\u0442\u0432\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0438\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0432 WinRE \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0444\u0430\u0439\u043b autofstx.exe. \u0411\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u044b \u043d\u0430 \u043f\u043e\u0442\u043e\u043c.\n\u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c PIN-\u043a\u043e\u0434 (PIN+TPM), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Microsoft \u044d\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e PoC \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 WinRE, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u00ab\u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439\u00bb Windows \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0448\u0442\u0440\u0438\u0445\u043e\u0432 \u043d\u0430 \u0434\u0435\u0441\u0435\u0440\u0442. Microsoft \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0438\u043b\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 MSRC \u0438 \u043d\u0430 GitHub, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u0435\u0449\u0430\u043b \u0432\u0437\u044f\u0442\u044c \u043f\u0430\u0443\u0437\u0443 \u0432 \u0438\u044e\u043d\u0435 \u0438 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u0441 \u043d\u043e\u0432\u044b\u043c\u0438 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u043c\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f\u043c\u0438 14 \u0438\u044e\u043b\u044f.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Windows @\u041f2\u0422", "creation_timestamp": "2026-05-27T13:46:59.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/788b1405-ef5f-42a2-a28a-ea28550652d5/export"/>
    <published>2026-05-27T13:46:59+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31bf3fa2-1bf3-4075-bb38-bf04ae939e1b/export</id>
    <title>31bf3fa2-1bf3-4075-bb38-bf04ae939e1b</title>
    <updated>2026-06-07T05:23:39.457079+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31bf3fa2-1bf3-4075-bb38-bf04ae939e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "Telegram/UOEqxw8X8FBF5SdoLVIwOK-ODKVahezuJQZvJqlgU47R468", "content": "", "creation_timestamp": "2026-05-31T21:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31bf3fa2-1bf3-4075-bb38-bf04ae939e1b/export"/>
    <published>2026-05-31T21:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c5f5d844-8fa4-4be6-8f6a-ac0f3afd8adc/export</id>
    <title>c5f5d844-8fa4-4be6-8f6a-ac0f3afd8adc</title>
    <updated>2026-06-07T05:23:39.456952+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c5f5d844-8fa4-4be6-8f6a-ac0f3afd8adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "Telegram/w0GkJHs0a-iOGxRnRQVAJ6txbFx-4W5StLXj-Qhn1zDpC10", "content": "", "creation_timestamp": "2026-06-05T03:00:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c5f5d844-8fa4-4be6-8f6a-ac0f3afd8adc/export"/>
    <published>2026-06-05T03:00:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b8990a3-a736-4d7d-beb9-b42f5e8df9fe/export</id>
    <title>8b8990a3-a736-4d7d-beb9-b42f5e8df9fe</title>
    <updated>2026-06-07T05:23:39.456782+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b8990a3-a736-4d7d-beb9-b42f5e8df9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116699350092887103", "content": "Well, bitskrieg is public.\nWhile Microsoft \"fixed\" YellowKey as CVE-2026-45585 (and by \"fixed\", I mean they have provided manual steps that you can perform if you want to remove autofstx.exe from the WinRE registry BootExecute value), bitskrieg still works on such a system to achieve the same goal.  Though it requires a second computer, or a device that can communicate on a serial port.\n\nBoot into WinRe\nGo to a command prompt, ignoring the prompt to enter a bitlocker recovery key.  (Click Skip this drive)\nEnable the serial port in WinRe:bcdedit /set ems 1bcdedit /set emsport 1\nReboot back into WinRe\nFrom your other computer, connect to the serial port.\nType:cmdesctab-\nEnjoy your cmd.exe prompt (over serial) with a decrypted (assuming it's TPM-only) hard disk.", "creation_timestamp": "2026-06-05T20:19:30.022127Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b8990a3-a736-4d7d-beb9-b42f5e8df9fe/export"/>
    <published>2026-06-05T20:19:30.022127+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08661ddb-cb5f-4340-ad4d-7711240dbd78/export</id>
    <title>08661ddb-cb5f-4340-ad4d-7711240dbd78</title>
    <updated>2026-06-07T05:23:39.454789+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08661ddb-cb5f-4340-ad4d-7711240dbd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45585", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mnkxkgi6zfn2", "content": "Well, bitskrieg is public.\n\nWhile Microsoft \"fixed\" YellowKey as CVE-2026-45585 (and by \"fixed\", I mean they have provided **manual** steps that you can perform if you want to remove `autofstx.exe` from the WinRE registry `BootExecute` value), bitskrieg [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-06-05T20:19:34.908973Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08661ddb-cb5f-4340-ad4d-7711240dbd78/export"/>
    <published>2026-06-05T20:19:34.908973+00:00</published>
  </entry>
</feed>
