<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-01T19:26:13.329288+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/11ef08f7-b4e5-4cdc-91f4-f79606451d80/export</id>
    <title>11ef08f7-b4e5-4cdc-91f4-f79606451d80</title>
    <updated>2026-09-01T19:26:13.350507+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "11ef08f7-b4e5-4cdc-91f4-f79606451d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtd6vwecqm2y", "content": "A public PoC for CVE-2026-66804 escalates a standard Windows user to SYSTEM through the Cross Device virtual camera COM service.\n\n#CVE202666804 #PrivilegeEscalation #Windows11 #SYSTEMprivileges #EoP #PoCExploit", "creation_timestamp": "2026-08-18T02:41:04.867720Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/11ef08f7-b4e5-4cdc-91f4-f79606451d80/export"/>
    <published>2026-08-18T02:41:04.867720+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/587c789e-ce5b-4bfa-90d8-2f0c7c9558ec/export</id>
    <title>587c789e-ce5b-4bfa-90d8-2f0c7c9558ec</title>
    <updated>2026-09-01T19:26:13.352019+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "587c789e-ce5b-4bfa-90d8-2f0c7c9558ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "published-proof-of-concept", "source": "Telegram/Y-2ocOOZUG_Q4I6n0uIai26cyBcMOGXIwA_f4lLRM3tAv8s", "content": "", "creation_timestamp": "2026-08-16T00:00:45.413642Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/587c789e-ce5b-4bfa-90d8-2f0c7c9558ec/export"/>
    <published>2026-08-16T00:00:45.413642+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6aa96197-e126-46a3-9d55-24d8a53ae05d/export</id>
    <title>6aa96197-e126-46a3-9d55-24d8a53ae05d</title>
    <updated>2026-09-01T19:26:13.352108+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6aa96197-e126-46a3-9d55-24d8a53ae05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "published-proof-of-concept", "source": "Telegram/SWl3UOnLYQiAwRAx4guQU5v4-X5fVTSxBZebQ76HErfrjKY", "content": "", "creation_timestamp": "2026-08-16T00:00:22.545889Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6aa96197-e126-46a3-9d55-24d8a53ae05d/export"/>
    <published>2026-08-16T00:00:22.545889+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cc3d33bf-944b-4a85-8744-c9bf5b93b695/export</id>
    <title>cc3d33bf-944b-4a85-8744-c9bf5b93b695</title>
    <updated>2026-09-01T19:26:13.352175+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cc3d33bf-944b-4a85-8744-c9bf5b93b695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "seen", "source": "Telegram/SWl3UOnLYQiAwRAx4guQU5v4-X5fVTSxBZebQ76HErfrjKY", "content": "", "creation_timestamp": "2026-08-15T08:00:06.443322Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cc3d33bf-944b-4a85-8744-c9bf5b93b695/export"/>
    <published>2026-08-15T08:00:06.443322+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/abf465d0-2440-46bf-b75e-50f8db069608/export</id>
    <title>abf465d0-2440-46bf-b75e-50f8db069608</title>
    <updated>2026-09-01T19:26:13.352239+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "abf465d0-2440-46bf-b75e-50f8db069608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "seen", "source": "Telegram/Y-2ocOOZUG_Q4I6n0uIai26cyBcMOGXIwA_f4lLRM3tAv8s", "content": "", "creation_timestamp": "2026-08-15T08:00:06.020627Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/abf465d0-2440-46bf-b75e-50f8db069608/export"/>
    <published>2026-08-15T08:00:06.020627+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4105c142-6829-4433-b4d3-8ddbee73bb98/export</id>
    <title>4105c142-6829-4433-b4d3-8ddbee73bb98</title>
    <updated>2026-09-01T19:26:13.352303+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4105c142-6829-4433-b4d3-8ddbee73bb98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/117092987896425321", "content": "RE: https://infosec.exchange/@wdormann/117089673520623548\nI wrote some detections for CVE-2026-66804 exploitation:\nhttps://github.com/GossiTheDog/ThreatHunting/blob/master/AdvancedHuntingQueries/CVE-2026-66804.kql", "creation_timestamp": "2026-08-14T08:46:55.160136Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4105c142-6829-4433-b4d3-8ddbee73bb98/export"/>
    <published>2026-08-14T08:46:55.160136+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/253845b0-3c8a-4ce9-86f5-ae2d0d9d317a/export</id>
    <title>253845b0-3c8a-4ce9-86f5-ae2d0d9d317a</title>
    <updated>2026-09-01T19:26:13.352385+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "253845b0-3c8a-4ce9-86f5-ae2d0d9d317a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msycf2mmxif2", "content": "A working exploit to achieve a `SYSTEM` shell with only CVE-2026-66804 has been released.", "creation_timestamp": "2026-08-13T18:43:57.959585Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/253845b0-3c8a-4ce9-86f5-ae2d0d9d317a/export"/>
    <published>2026-08-13T18:43:57.959585+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2d074383-efa1-4b08-88b6-4ece9af9df80/export</id>
    <title>2d074383-efa1-4b08-88b6-4ece9af9df80</title>
    <updated>2026-09-01T19:26:13.352449+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2d074383-efa1-4b08-88b6-4ece9af9df80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117089673520623548", "content": "A working exploit to achieve a SYSTEM shell with only CVE-2026-66804 has been released.", "creation_timestamp": "2026-08-13T18:43:51.077659Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2d074383-efa1-4b08-88b6-4ece9af9df80/export"/>
    <published>2026-08-13T18:43:51.077659+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c602634e-82d6-4074-bedd-5ac687d50c4a/export</id>
    <title>c602634e-82d6-4074-bedd-5ac687d50c4a</title>
    <updated>2026-09-01T19:26:13.352512+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c602634e-82d6-4074-bedd-5ac687d50c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66804", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msxkckomly2m", "content": "CVE-2026-66804 - Windows Cross Device Service LPE - Writeup &amp;amp; PoC\n\nFound another cool one!\n\nhttps://\ngithub.com/Rat5ak/CVE-202\n6-66804-CrossDevice-Service-EoP\n\u2026\n\nNot sure who found it first, but shoutout to t\u2026\n\n\ud83d\udd01 RT @Nadsec11 | reposted by @cyb3rops\nhttps://x.com/Nadsec11/status/2087751567965663686", "creation_timestamp": "2026-08-13T11:33:03.259179Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c602634e-82d6-4074-bedd-5ac687d50c4a/export"/>
    <published>2026-08-13T11:33:03.259179+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a4809763-4f36-49a1-99a9-97f5676f36f2/export</id>
    <title>a4809763-4f36-49a1-99a9-97f5676f36f2</title>
    <updated>2026-09-01T19:26:13.352585+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "a4809763-4f36-49a1-99a9-97f5676f36f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66804", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:21:02.525763Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a4809763-4f36-49a1-99a9-97f5676f36f2/export"/>
    <published>2026-08-13T10:21:02.525763+00:00</published>
  </entry>
</feed>
