<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-23T04:45:02.613499+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b0fca3e4-5d6d-4ef8-a0df-abc1b1b07c5b/export</id>
    <title>b0fca3e4-5d6d-4ef8-a0df-abc1b1b07c5b</title>
    <updated>2026-09-23T04:45:02.639549+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b0fca3e4-5d6d-4ef8-a0df-abc1b1b07c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "seen", "source": "https://t.me/VulnerabilityNews/43855", "content": "New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts\n\nZapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests.\n\nThe flaw is tracked as\u00a0CVE-2026-64561\u00a0and affects KVM/x86's shadow memory management unit (MMU), which manages shadow page\nhttps://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html", "creation_timestamp": "2026-09-19T00:00:26.633794Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b0fca3e4-5d6d-4ef8-a0df-abc1b1b07c5b/export"/>
    <published>2026-09-19T00:00:26.633794+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b8522b47-cc56-4080-9710-e84d2f1f97ec/export</id>
    <title>b8522b47-cc56-4080-9710-e84d2f1f97ec</title>
    <updated>2026-09-23T04:45:02.640914+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b8522b47-cc56-4080-9710-e84d2f1f97ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "published-proof-of-concept", "source": "Telegram/gjwuPtR5g9ZcdGbotbwBtnynac2LUnfJ7OAXHlG_NBqY9Yo", "content": "", "creation_timestamp": "2026-09-19T00:00:23.097762Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b8522b47-cc56-4080-9710-e84d2f1f97ec/export"/>
    <published>2026-09-19T00:00:23.097762+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8836232c-5cbd-434d-bdd1-e0e9bdbfafc4/export</id>
    <title>8836232c-5cbd-434d-bdd1-e0e9bdbfafc4</title>
    <updated>2026-09-23T04:45:02.641005+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8836232c-5cbd-434d-bdd1-e0e9bdbfafc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "seen", "source": "https://t.me/VulnerabilityNews/43855", "content": "New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts\n\nZapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests.\n\nThe flaw is tracked as\u00a0CVE-2026-64561\u00a0and affects KVM/x86's shadow memory management unit (MMU), which manages shadow page\nhttps://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html", "creation_timestamp": "2026-09-18T12:00:07.824456Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8836232c-5cbd-434d-bdd1-e0e9bdbfafc4/export"/>
    <published>2026-09-18T12:00:07.824456+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4ecf9a18-0cfe-45b5-bdcc-054d0c908594/export</id>
    <title>4ecf9a18-0cfe-45b5-bdcc-054d0c908594</title>
    <updated>2026-09-23T04:45:02.641082+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4ecf9a18-0cfe-45b5-bdcc-054d0c908594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "seen", "source": "Telegram/gjwuPtR5g9ZcdGbotbwBtnynac2LUnfJ7OAXHlG_NBqY9Yo", "content": "", "creation_timestamp": "2026-09-18T04:00:12.354812Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4ecf9a18-0cfe-45b5-bdcc-054d0c908594/export"/>
    <published>2026-09-18T04:00:12.354812+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/986e31e0-1232-49ec-b4c9-f0a0ebe6435c/export</id>
    <title>986e31e0-1232-49ec-b4c9-f0a0ebe6435c</title>
    <updated>2026-09-23T04:45:02.641149+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "986e31e0-1232-49ec-b4c9-f0a0ebe6435c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/192754", "content": "Zapscape \u2014 Updated!\n\nGuest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.\nRead more...", "creation_timestamp": "2026-09-07T01:00:13.608530Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/986e31e0-1232-49ec-b4c9-f0a0ebe6435c/export"/>
    <published>2026-09-07T01:00:13.608530+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18bec8a3-e6d1-44fa-b113-2913bbfceb9d/export</id>
    <title>18bec8a3-e6d1-44fa-b113-2913bbfceb9d</title>
    <updated>2026-09-23T04:45:02.641219+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18bec8a3-e6d1-44fa-b113-2913bbfceb9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/192754", "content": "Zapscape \u2014 Updated!\n\nGuest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.\nRead more...", "creation_timestamp": "2026-09-06T14:00:06.013281Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18bec8a3-e6d1-44fa-b113-2913bbfceb9d/export"/>
    <published>2026-09-06T14:00:06.013281+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/663099c5-e04d-4d5c-bb38-7029512576ac/export</id>
    <title>663099c5-e04d-4d5c-bb38-7029512576ac</title>
    <updated>2026-09-23T04:45:02.641284+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "663099c5-e04d-4d5c-bb38-7029512576ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191201", "content": "Zapscape-Fix \u2014 Updated!\nhttps://kitploit.com/en/posts/github-aoripus-ltd-zapscape-fix-6ddb101966d4021f6585a7550b3c716a6d9adbb0be052ff4d62d187783e0af39\n\nGeneric kernel live patch for the KVM/x86 shadow-MMU use-after-free (Zapscape, CVE-2026-64561)", "creation_timestamp": "2026-09-02T01:00:25.842426Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/663099c5-e04d-4d5c-bb38-7029512576ac/export"/>
    <published>2026-09-02T01:00:25.842426+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a21ea9ee-704f-4db1-a2cc-e5f28b3c78eb/export</id>
    <title>a21ea9ee-704f-4db1-a2cc-e5f28b3c78eb</title>
    <updated>2026-09-23T04:45:02.641351+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a21ea9ee-704f-4db1-a2cc-e5f28b3c78eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "seen", "source": "https://t.me/hacking_Attack/191201", "content": "Zapscape-Fix \u2014 Updated!\nhttps://kitploit.com/en/posts/github-aoripus-ltd-zapscape-fix-6ddb101966d4021f6585a7550b3c716a6d9adbb0be052ff4d62d187783e0af39\n\nGeneric kernel live patch for the KVM/x86 shadow-MMU use-after-free (Zapscape, CVE-2026-64561)", "creation_timestamp": "2026-09-01T20:00:05.456911Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a21ea9ee-704f-4db1-a2cc-e5f28b3c78eb/export"/>
    <published>2026-09-01T20:00:05.456911+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9f829756-c48b-48a6-b6ce-24bd8abf0b34/export</id>
    <title>9f829756-c48b-48a6-b6ce-24bd8abf0b34</title>
    <updated>2026-09-23T04:45:02.641417+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9f829756-c48b-48a6-b6ce-24bd8abf0b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "published-proof-of-concept", "source": "Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots", "content": "", "creation_timestamp": "2026-08-28T00:00:47.313912Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9f829756-c48b-48a6-b6ce-24bd8abf0b34/export"/>
    <published>2026-08-28T00:00:47.313912+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/241647e6-0c8b-4c1f-8bc4-c02ed9361890/export</id>
    <title>241647e6-0c8b-4c1f-8bc4-c02ed9361890</title>
    <updated>2026-09-23T04:45:02.641480+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "241647e6-0c8b-4c1f-8bc4-c02ed9361890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64561", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/480", "content": "CVE-2026-64561", "creation_timestamp": "2026-08-28T00:00:38.878506Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/241647e6-0c8b-4c1f-8bc4-c02ed9361890/export"/>
    <published>2026-08-28T00:00:38.878506+00:00</published>
  </entry>
</feed>
