<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-23T08:03:08.282093+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc772a6d-b190-432e-a6fe-b8ce5eb283ec/export</id>
    <title>dc772a6d-b190-432e-a6fe-b8ce5eb283ec</title>
    <updated>2026-09-23T08:03:08.307032+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc772a6d-b190-432e-a6fe-b8ce5eb283ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw66tsdg7b2s", "content": "\ud83e\udd16 CVE-2026-93616: Check Point Security Management Server zero-day exploited in targeted attacks since July. Unauthenticated RCE via the management web service; patch released Sep 22.\n\nhttps://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "creation_timestamp": "2026-09-23T07:12:09.032362Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc772a6d-b190-432e-a6fe-b8ce5eb283ec/export"/>
    <published>2026-09-23T07:12:09.032362+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cd7658ff-d631-4cc0-b5ef-eac97d838e70/export</id>
    <title>cd7658ff-d631-4cc0-b5ef-eac97d838e70</title>
    <updated>2026-09-23T08:03:08.310972+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cd7658ff-d631-4cc0-b5ef-eac97d838e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mw64jqxuo22o", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-93616: \u26a0\ufe0f CVE-2026-93616: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-93616-a-directory-traversal-and-file-upload", "creation_timestamp": "2026-09-23T06:30:44.564493Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cd7658ff-d631-4cc0-b5ef-eac97d838e70/export"/>
    <published>2026-09-23T06:30:44.564493+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1e44b957-dd36-48eb-bd73-ae5c2ee7963b/export</id>
    <title>1e44b957-dd36-48eb-bd73-ae5c2ee7963b</title>
    <updated>2026-09-23T08:03:08.311164+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1e44b957-dd36-48eb-bd73-ae5c2ee7963b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mw647golqd2m", "content": "CVE-2026-93616 is a critical, exploited-in-the-wild directory traversal and file upload flaw enabling unauthenticated script execution on Check Point Management Servers.\n", "creation_timestamp": "2026-09-23T06:24:58.941894Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1e44b957-dd36-48eb-bd73-ae5c2ee7963b/export"/>
    <published>2026-09-23T06:24:58.941894+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7c3eff60-a55d-4f31-965f-bfb9169b15c2/export</id>
    <title>7c3eff60-a55d-4f31-965f-bfb9169b15c2</title>
    <updated>2026-09-23T08:03:08.311291+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7c3eff60-a55d-4f31-965f-bfb9169b15c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mw646wp7mf2i", "content": "CVE-2026-93616 is a critical, exploited-in-the-wild directory traversal and file upload flaw enabling unauthenticated script execution on Check Point Management Servers.\n", "creation_timestamp": "2026-09-23T06:24:41.987941Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7c3eff60-a55d-4f31-965f-bfb9169b15c2/export"/>
    <published>2026-09-23T06:24:41.987941+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5f5bbae3-6d8d-4727-a43b-c048659e099c/export</id>
    <title>5f5bbae3-6d8d-4727-a43b-c048659e099c</title>
    <updated>2026-09-23T08:03:08.311403+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5f5bbae3-6d8d-4727-a43b-c048659e099c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mw646vnggd2r", "content": "CVE-2026-93616 is a critical, exploited-in-the-wild directory traversal and file upload flaw enabling unauthenticated script execution on Check Point Management Servers.\n", "creation_timestamp": "2026-09-23T06:24:41.341611Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5f5bbae3-6d8d-4727-a43b-c048659e099c/export"/>
    <published>2026-09-23T06:24:41.341611+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bc5ed51c-b2de-4e5c-8221-74f5a3353f14/export</id>
    <title>bc5ed51c-b2de-4e5c-8221-74f5a3353f14</title>
    <updated>2026-09-23T08:03:08.311525+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bc5ed51c-b2de-4e5c-8221-74f5a3353f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mw635gwclh2q", "content": "\u26a0\ufe0f #CheckPoint signale une faille zero-day (CVE-2026-93616) exploit\u00e9e le 23/07, permettant l'ex\u00e9cution de scripts sans connexion sur son serveur de gestion. Patch dispo depuis le 22/09. #CyberSecurity #Automatisation ", "creation_timestamp": "2026-09-23T06:05:58.308853Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bc5ed51c-b2de-4e5c-8221-74f5a3353f14/export"/>
    <published>2026-09-23T06:05:58.308853+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/80451789-b7ee-4a70-a368-d82dc60ce235/export</id>
    <title>80451789-b7ee-4a70-a368-d82dc60ce235</title>
    <updated>2026-09-23T08:03:08.311664+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "80451789-b7ee-4a70-a368-d82dc60ce235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93616", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mw5zxgdehq2o", "content": "\ud83d\udcf0 Check Point Peringatkan Zero-Day Security Management Server yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/23/check-point-cve-2026-93616-security-management-server-zero-day/\n\n#activeExploitation #checkPoint #checkPointSoftware #cisa #cve-2026-93616 #c", "creation_timestamp": "2026-09-23T05:44:42.037979Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/80451789-b7ee-4a70-a368-d82dc60ce235/export"/>
    <published>2026-09-23T05:44:42.037979+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4eae560e-a620-45b5-9d13-07da7773d86b/export</id>
    <title>4eae560e-a620-45b5-9d13-07da7773d86b</title>
    <updated>2026-09-23T08:03:08.311766+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4eae560e-a620-45b5-9d13-07da7773d86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mw5xlmjm2r2l", "content": "Daily IT Security Digest \u2014 2026-09-23\n## 8. Multiple Notable CVEs and Exploits - **Multer (Node.js)**: 7 unpatched CVEs with an average CVSS of 7.5; all trust score rated D. Audit file upload handling across Node.js applications. - **Check Point CVE-2026-93616**: A critical, exploited RCE in Check", "creation_timestamp": "2026-09-23T05:02:18.128156Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4eae560e-a620-45b5-9d13-07da7773d86b/export"/>
    <published>2026-09-23T05:02:18.128156+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1cfba715-e78e-4a4d-91bb-561ce671f224/export</id>
    <title>1cfba715-e78e-4a4d-91bb-561ce671f224</title>
    <updated>2026-09-23T08:03:08.311875+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1cfba715-e78e-4a4d-91bb-561ce671f224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mw5xliytoj2d", "content": "Daily IT Security Digest \u2014 2026-09-23\nconcerning because attackers now possess proprietary code that could reveal previously unknown vulnerabilities (0-days) in widely deployed F5 appliances. CVE-2026-94127 (RCE) and CVE-2026-93616 (Check Point RCE) are among the newly exposed concerns.", "creation_timestamp": "2026-09-23T05:02:14.539689Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1cfba715-e78e-4a4d-91bb-561ce671f224/export"/>
    <published>2026-09-23T05:02:14.539689+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d7b32445-7bf1-498c-beb8-eaf2943f9add/export</id>
    <title>d7b32445-7bf1-498c-beb8-eaf2943f9add</title>
    <updated>2026-09-23T08:03:08.311991+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d7b32445-7bf1-498c-beb8-eaf2943f9add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "content": "Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23,&amp;nbsp;the company said.\n\nThe flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point", "creation_timestamp": "2026-09-23T01:00:45.030854Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d7b32445-7bf1-498c-beb8-eaf2943f9add/export"/>
    <published>2026-09-23T01:00:45.030854+00:00</published>
  </entry>
</feed>
