https://vulnerability.circl.lu/sightings/feed 2026-09-26T04:33:56.047856+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1af7d916-17a2-4c88-b335-6634ee206760/export 2026-09-26T04:33:56.075288+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1af7d916-17a2-4c88-b335-6634ee206760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97730", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwcyhkytxe2d", "content": "\ud83d\udfe0 CVE-2026-97730 - High (8.5)\n\nIn Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-97730/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-25T05:01:15.851963Z"} 2026-09-25T05:01:15.851963+00:00 https://vulnerability.circl.lu/sighting/2d0b96fc-5a68-4c37-adbd-abb7d2728b7e/export 2026-09-26T04:33:56.077337+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2d0b96fc-5a68-4c37-adbd-abb7d2728b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97730", "type": "seen", "source": "https://gist.github.com/ichintu/cef2c12046d7246fbad5e72900e0d2df", "content": "Today\u2019s threat intelligence digest highlights four notable vulnerabilities:\n\n\u2022 **macOS TCC Bypass:** CDC/ACM serial interfaces can circumvent macOS Transparency, Consent, and Control (TCC) security restrictions, granting unauthorized access to protected resources. \n\u2022 **pfSense LFI (CVE-2026-97730, HIGH/8.5):** A flaw in dashboard widget sequence handling allows local file inclusion, enabling arbitrary PHP execution (requires authentication and dashboard modification privileges). \n\u2022 **Argus Monitor DoS (CVE-2026-79417):** A local IOCTL vulnerability exploits a TOCTOU race condition to disable x86 `MONITOR`/`MWAIT` instructions, triggering `HYPERVISOR_ERROR` bugchecks in Hyper-V and kernel components. \n\u2022 **Root Browser Classic Injection (CVE-2026-85082, HIGH/8.5):** Unsafe passing of SQLite database paths to the OS shell enables command injection due to improper filename/command separation. \n\nAll entries include technical write-ups, CVSS metrics, and proof-of-concept resources for further analysis.", "creation_timestamp": "2026-09-25T04:00:27.000000Z"} 2026-09-25T04:00:27+00:00