https://vulnerability.circl.lu/sightings/feed 2026-09-18T12:25:37.234894+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f5ee2da9-5897-48c6-8c31-fb28bdad6cc1/export 2026-09-18T12:25:37.266987+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f5ee2da9-5897-48c6-8c31-fb28bdad6cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://gist.github.com/ichintu/4bf7ae5351bf31e7fd8a71db957a56bc", "content": "This threat intelligence briefing highlights four key developments:\n\n\u2022 **Iranian Hacktivism:** The Iran-linked Handala Hack group is deploying the HEAVYGRAM Telegram backdoor and CRUDEEXCLUDE utility to execute remote commands, steal credentials, exfiltrate session data, and capture screenshots.\n\u2022 **AI Agent Vulnerabilities:** AI systems using the Model Context Protocol (MCP) are exposed to attacks via untrusted tool descriptions, enabling metadata poisoning and context manipulation. Experts recommend pinning descriptions, treating them as untrusted input, and applying cryptographic hashing.\n\u2022 **Critical CVEs:** Azure Billing (CVE-2026-62874, CVSS 10.0) contains a privilege escalation flaw due to insufficient data verification. WeGIA charity software (CVE-2026-54670, CVSS 9.1) suffers from unauthenticated auth bypass and local file inclusion, allowing data/financial manipulation; patched in v3.8.5.", "creation_timestamp": "2026-09-18T04:01:52.887636Z"} 2026-09-18T04:01:52.887636+00:00 https://vulnerability.circl.lu/sighting/8f673e70-14a7-451e-ab09-b5d599eea525/export 2026-09-18T12:25:37.271030+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8f673e70-14a7-451e-ab09-b5d599eea525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr5unoyvy22", "content": "CVE-2026-62874 - azure billing\nThe Azure Billing service does not properly check that data comes from a trusted source. This weakness could let an outsider pretend to be a legitimate user and obtain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azurebilling #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:50:07.665892Z"} 2026-09-18T02:50:07.665892+00:00 https://vulnerability.circl.lu/sighting/4b0e693f-ae28-454c-bf5a-5bc6e4afdee2/export 2026-09-18T12:25:37.271182+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4b0e693f-ae28-454c-bf5a-5bc6e4afdee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kbgovo2r", "content": "\ud83d\udea8 CVE-2026-62874 \u2014 CVSS 10 CRITICAL\n\nInsufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62874\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:31.841296Z"} 2026-09-18T02:08:31.841296+00:00