https://vulnerability.circl.lu/sightings/feed 2026-10-09T17:06:15.146708+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c474279d-562b-48f3-acd6-281078da203a/export 2026-10-09T17:06:15.168798+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c474279d-562b-48f3-acd6-281078da203a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.346362Z"} 2026-10-09T14:47:00.346362+00:00 https://vulnerability.circl.lu/sighting/326ffb79-142c-4ba9-a7b5-9fe31a5c5f1e/export 2026-10-09T17:06:15.171414+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "326ffb79-142c-4ba9-a7b5-9fe31a5c5f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69435", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxghdafdqf2e", "content": "CRITICAL SSRF flaw (CVSS 9.6) in Microsoft Azure SRE Agent enables privilege escalation by authorized users. Microsoft has released a fix \u2014 ensure your environment is updated. https://radar.offseq.com/threat/cve-2026-69435-cwe-918-server-side-request-forgery-ssrf-in-microsoft-azure-sre-agent-10f6...", "creation_timestamp": "2026-10-09T07:30:27.287938Z"} 2026-10-09T07:30:27.287938+00:00 https://vulnerability.circl.lu/sighting/d50e8d88-cf06-433f-8946-a04c3ef85879/export 2026-10-09T17:06:15.171517+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d50e8d88-cf06-433f-8946-a04c3ef85879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69435", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117409777213968676", "content": "CVE-2026-69435: CRITICAL SSRF (CVSS 9.6) in Microsoft Azure SRE Agent. Missing authorization controls let authorized attackers escalate privileges, risking confidentiality & integrity. Microsoft has issued a fix. https://radar.offseq.com/threat/cve-2026-69435-cwe-918-server-side-request-forgery-ssrf-in-microsoft-azure-sre-agent-10f6e62769899cfe #OffSeq #Azure #SSRF #Infosec", "creation_timestamp": "2026-10-09T07:30:25.346681Z"} 2026-10-09T07:30:25.346681+00:00 https://vulnerability.circl.lu/sighting/365f2479-d363-47a8-9659-af25fa946c23/export 2026-10-09T17:06:15.171591+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "365f2479-d363-47a8-9659-af25fa946c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfoolwdhk2z", "content": "\ud83d\udea8 CVE-2026-69435 \u2014 CVSS 9.6 CRITICAL\n\nMissing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69435\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:24.078589Z"} 2026-10-09T00:09:24.078589+00:00 https://vulnerability.circl.lu/sighting/94be8418-0e6c-4780-8e13-df7cd562c09a/export 2026-10-09T17:06:15.171657+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "94be8418-0e6c-4780-8e13-df7cd562c09a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfksovtzx24", "content": "CVE-2026-69435 - azure sre agent\nThe Azure SRE Agent component can be tricked into giving an attacker more rights than they should have on the network. This could allow the attacker to move laterally, read data, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:00:06.512639Z"} 2026-10-08T23:00:06.512639+00:00