<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-15T17:47:45.637351+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7885aa5-17ae-45f8-a800-16c62af998ac/export</id>
    <title>e7885aa5-17ae-45f8-a800-16c62af998ac</title>
    <updated>2026-09-15T17:47:45.669064+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e7885aa5-17ae-45f8-a800-16c62af998ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvl5zxskm32b", "content": "\ud83d\udccc Critical Zero-Day Vulnerability CVE-2026-76461 in Cisco Secure Email Gateway Under Active Exploitati... https://www.cyberhub.blog/article/32124-critical-zero-day-vulnerability-cve-2026-76461-in-cisco-secure-email-gateway-under-active-exploitation", "creation_timestamp": "2026-09-15T17:37:07.495673Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7885aa5-17ae-45f8-a800-16c62af998ac/export"/>
    <published>2026-09-15T17:37:07.495673+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a7b35af1-bf5a-4713-8464-b364d824869b/export</id>
    <title>a7b35af1-bf5a-4713-8464-b364d824869b</title>
    <updated>2026-09-15T17:47:45.671765+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a7b35af1-bf5a-4713-8464-b364d824869b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvl4p3mdc52f", "content": "Cisco patches critical, actively exploited zero-day (CVE-2026-76461) in Secure Email Gateways. Unauthenticated attackers can compromise devices via a crafted email. CISA has added it to the KEV catalog. #CyberSecurity #ZeroDay #Infosec #Cisco\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-15T17:13:08.960113Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a7b35af1-bf5a-4713-8464-b364d824869b/export"/>
    <published>2026-09-15T17:13:08.960113+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d0026acf-b122-47ea-b300-edf568358750/export</id>
    <title>d0026acf-b122-47ea-b300-edf568358750</title>
    <updated>2026-09-15T17:47:45.672007+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d0026acf-b122-47ea-b300-edf568358750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvl4b26dok2g", "content": "Here we go again with Cisco Secure Email Gateway operators discovering unauthenticated prowlers can grab root privileges via CVE-2026-76461. Our delightful underlying OS environments bear the brunt of these arbitrary command antics whilst being actively exploited in the wild. Shi...\n\nRead full story", "creation_timestamp": "2026-09-15T17:05:18.717123Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d0026acf-b122-47ea-b300-edf568358750/export"/>
    <published>2026-09-15T17:05:18.717123+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5e5da2ae-fa85-45a8-bfe0-e25c738121a6/export</id>
    <title>5e5da2ae-fa85-45a8-bfe0-e25c738121a6</title>
    <updated>2026-09-15T17:47:45.672189+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5e5da2ae-fa85-45a8-bfe0-e25c738121a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvl4axu3md2x", "content": "Cisco's email gateway kindly grants unauthenticated visitors complete root access through CVE-2026-76461. Just another Tuesday in IT.\n\n#CiscoFail #RootAccess", "creation_timestamp": "2026-09-15T17:05:15.384818Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5e5da2ae-fa85-45a8-bfe0-e25c738121a6/export"/>
    <published>2026-09-15T17:05:15.384818+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cbfbad4f-eabf-40b1-8246-74667913b478/export</id>
    <title>cbfbad4f-eabf-40b1-8246-74667913b478</title>
    <updated>2026-09-15T17:47:45.672326+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cbfbad4f-eabf-40b1-8246-74667913b478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvl22ncsvn2l", "content": "Actionable C-Suite threat intelligence and mitigation strategies for CVE-2026-76461, addressing active SQL injection exploitation vectors within enterprise Cisco Secure Email Gateway infrastructures. https://thecybermind.co/r5ry", "creation_timestamp": "2026-09-15T16:25:56.046611Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cbfbad4f-eabf-40b1-8246-74667913b478/export"/>
    <published>2026-09-15T16:25:56.046611+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f442cdbd-fd2c-447e-b639-eca5e162a00d/export</id>
    <title>f442cdbd-fd2c-447e-b639-eca5e162a00d</title>
    <updated>2026-09-15T17:47:45.672437+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f442cdbd-fd2c-447e-b639-eca5e162a00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvkzqmf7rx2o", "content": "@sophossecurity.bsky.social\nCritical SQL injection is under active exploitation, enabling unauthenticated remote root command execution.\n-\nIOCs: CVE-2026-76461\n-\n#CVE202676461 #KEV #ThreatIntel", "creation_timestamp": "2026-09-15T16:20:18.536157Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f442cdbd-fd2c-447e-b639-eca5e162a00d/export"/>
    <published>2026-09-15T16:20:18.536157+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ea70de3f-2d16-4cb4-aa32-08a1a7a3df2c/export</id>
    <title>ea70de3f-2d16-4cb4-aa32-08a1a7a3df2c</title>
    <updated>2026-09-15T17:47:45.672546+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "ea70de3f-2d16-4cb4-aa32-08a1a7a3df2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/9/kritische-sicherheitslucke-in-cisco-secure-email-gateway-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-09-15T16:16:40.976603Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ea70de3f-2d16-4cb4-aa32-08a1a7a3df2c/export"/>
    <published>2026-09-15T16:16:40.976603+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1b9ccdd4-45f6-4021-adeb-9a8901dfb67f/export</id>
    <title>1b9ccdd4-45f6-4021-adeb-9a8901dfb67f</title>
    <updated>2026-09-15T17:47:45.674159+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "1b9ccdd4-45f6-4021-adeb-9a8901dfb67f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.cert.se/2026/09/kritisk-sarbarhet-i-cisco-secure-email-gateway-utnyttjas-aktivt.html", "content": "", "creation_timestamp": "2026-09-15T16:16:34.770410Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1b9ccdd4-45f6-4021-adeb-9a8901dfb67f/export"/>
    <published>2026-09-15T16:16:34.770410+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9480e528-b48e-477a-bfc8-1b1c2cc5c599/export</id>
    <title>9480e528-b48e-477a-bfc8-1b1c2cc5c599</title>
    <updated>2026-09-15T17:47:45.674295+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9480e528-b48e-477a-bfc8-1b1c2cc5c599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvkyv47d6y2m", "content": "Cisco\u3001\u30e1\u30fc\u30eb\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u3067\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u9867\u5ba2\u306b\u8b66\u544a\n\n\u51fa\u6240\u3084\u52d5\u6a5f\u304c\u4e0d\u660e\u306a\u653b\u6483\u8005\u304c\u3001Cisco Secure Email Gateway\u306e\u6df1\u523b\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u3044\u308b\u3068\u3001\u5f53\u5c40\u3068\u7814\u7a76\u8005\u304c\u6708\u66dc\u65e5\u306b\u660e\u3089\u304b\u306b\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u2014\u2014CVE-2026-76461\u2014\u2014\u306f\u3001Cisco\u304c\u6708\u66dc\u65e5\u306b\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u30d1\u30c3\u30c1\u3092\u63d0\u4f9b\u3059\u308b\u4ee5\u524d\u304b\u3089\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001\u8a8d\u8a3c\u3092\u7d4c\u3066\u3044\u306a\u3044\u9060\u9694\u306e\u653b\u6483\u8005\u304c\u8106", "creation_timestamp": "2026-09-15T16:04:55.725206Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9480e528-b48e-477a-bfc8-1b1c2cc5c599/export"/>
    <published>2026-09-15T16:04:55.725206+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bf9c583e-e4ae-4d00-a346-e10457497d97/export</id>
    <title>bf9c583e-e4ae-4d00-a346-e10457497d97</title>
    <updated>2026-09-15T17:47:45.674408+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bf9c583e-e4ae-4d00-a346-e10457497d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mvkyow55r4fd", "content": "Cisco $CSCO reports active exploitation of CVE-2026-76461 in Secure Email Gateway. Updates are available; Cisco says there is no workaround. AI-generated presenter and voice.", "creation_timestamp": "2026-09-15T16:02:24.288234Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bf9c583e-e4ae-4d00-a346-e10457497d97/export"/>
    <published>2026-09-15T16:02:24.288234+00:00</published>
  </entry>
</feed>
