https://vulnerability.circl.lu/sightings/feed 2026-09-13T21:39:20.111756+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ead633a3-da4b-484c-918f-25513b8ff1de/export 2026-09-13T21:39:20.140011+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ead633a3-da4b-484c-918f-25513b8ff1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://gist.github.com/ichintu/8790859bbfbdbc3eff56fbadf683426f", "content": "This threat intelligence digest covers critical vulnerabilities, emerging attack techniques, and enterprise security trends:\n\n* **Actively Exploited & High-Severity Vulnerabilities:** Mikrotik RouterOS and PaperCut face active exploitation requiring immediate patching. New CVEs reveal missing brute-force protection in Kingdom Communication intercoms (CVE-2026-89174) and SAML response tampering in HPE IceWall (CVE-2026-73784).\n* **Advanced Attack Techniques:** Threat actors are bypassing MFA using session/OAuth cookie replay and passkey-themed AiTM phishing to compromise Microsoft 365 accounts, often evading Entra ID detection. The Google Play Early Access program poses enterprise risks due to unvetted, potentially malicious apps that bypass public reviews.\n* **Enterprise & AI Shifts:** ServiceNow is transitioning to consumption-based pricing and integrating AI to unify ITSM and security, bolstered by its $7.75B Armis acquisition to fix flawed CMDBs and expand into OT/IoT.\n* **Research & Guidance:** Security researchers recommend parsing AD CS certificate flags bit-by-bit (rather than using static integers) to accurately identify ESC4\u2192ESC1 attack paths. The CSA also formalizes a continuous Zero Trust microsegmentation framework, emphasizing both topology-defined and connection-defined controls to reduce lateral movement and credential theft.\n\n**Bottom Line:** Immediate patching is critical for Mikrotik, PaperCut, Kingdom, and HPE products. Defenses should prioritize phishing-resistant MFA, strict app governance, and a hybrid segmentation model aligned with Zero Trust principles.", "creation_timestamp": "2026-09-11T12:01:56.694992Z"} 2026-09-11T12:01:56.694992+00:00 https://vulnerability.circl.lu/sighting/662eb18c-8697-4081-850f-6054587dcb86/export 2026-09-13T21:39:20.142335+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "662eb18c-8697-4081-850f-6054587dcb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvag3ckrxd2w", "content": "\ud83d\udfe0 CVE-2026-89178 - High (8.8)\n\nWeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Er...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89178/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:01:46.192329Z"} 2026-09-11T11:01:46.192329+00:00 https://vulnerability.circl.lu/sighting/ce1f1d7f-e66e-4914-bfc4-8d94a3965e23/export 2026-09-13T21:39:20.142470+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ce1f1d7f-e66e-4914-bfc4-8d94a3965e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvag33lpav24", "content": "\ud83d\udfe0 CVE-2026-89177 - High (8.8)\n\nWeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Proto...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89177/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:01:38.679473Z"} 2026-09-11T11:01:38.679473+00:00 https://vulnerability.circl.lu/sighting/b4335de4-9605-49f2-bef4-51b6bc2b2968/export 2026-09-13T21:39:20.142604+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b4335de4-9605-49f2-bef4-51b6bc2b2968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzmq4rs23", "content": "\ud83d\udfe0 CVE-2026-89176 - High (8.8)\n\nWeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Aut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89176/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:49.472211Z"} 2026-09-11T11:00:49.472211+00:00 https://vulnerability.circl.lu/sighting/0f2d4bdb-91ce-4dce-b5bd-276b87579570/export 2026-09-13T21:39:20.142711+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0f2d4bdb-91ce-4dce-b5bd-276b87579570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzfoddg2o", "content": "\ud83d\udfe0 CVE-2026-89174 - High (7.5)\n\nSmart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-for...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89174/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:42.066027Z"} 2026-09-11T11:00:42.066027+00:00 https://vulnerability.circl.lu/sighting/2d6cc98f-ed9a-4af0-86ab-8c9558750d8a/export 2026-09-13T21:39:20.142814+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2d6cc98f-ed9a-4af0-86ab-8c9558750d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m", "content": "CVE-2026-89176 - Howyar\uff5cWeenyGenius - Missing Authentication\nCVE ID : CVE-2026-89176\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerab...", "creation_timestamp": "2026-09-11T09:51:57.264324Z"} 2026-09-11T09:51:57.264324+00:00 https://vulnerability.circl.lu/sighting/33c0fa34-047d-48b2-a5a1-5a1c324bf7b4/export 2026-09-13T21:39:20.142912+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "33c0fa34-047d-48b2-a5a1-5a1c324bf7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bdqk3pzte55i2", "content": "CVE-2026-89177 - Howyar\uff5cWeenyGenius - Use of Insecure Protocol\nCVE ID : CVE-2026-89177\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability....", "creation_timestamp": "2026-09-11T09:45:57.673691Z"} 2026-09-11T09:45:57.673691+00:00 https://vulnerability.circl.lu/sighting/a0815442-ad98-45b2-ba6d-c5f58d0fea62/export 2026-09-13T21:39:20.143009+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a0815442-ad98-45b2-ba6d-c5f58d0fea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eye6iojklzlt4", "content": "CVE-2026-89178 - Howyar\uff5cWeenyGenius - Origin Validation Error\nCVE ID : CVE-2026-89178\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. ...", "creation_timestamp": "2026-09-11T09:39:57.477411Z"} 2026-09-11T09:39:57.477411+00:00 https://vulnerability.circl.lu/sighting/c2efbcc6-0d78-4a4c-b8be-96e28790e283/export 2026-09-13T21:39:20.143111+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "c2efbcc6-0d78-4a4c-b8be-96e28790e283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:30.612880Z"} 2026-09-11T08:45:30.612880+00:00 https://vulnerability.circl.lu/sighting/329b06ad-5013-44c7-b5f5-9220a5a332d1/export 2026-09-13T21:39:20.144841+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "329b06ad-5013-44c7-b5f5-9220a5a332d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:28.412756Z"} 2026-09-11T08:45:28.412756+00:00