<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 09:59:09 +0000</lastBuildDate>
    <item>
      <title>22dd9987-5761-4f6f-a05c-dbcbe6ef6a06</title>
      <link>https://vulnerability.circl.lu/sighting/22dd9987-5761-4f6f-a05c-dbcbe6ef6a06/export</link>
      <description>{"uuid": "22dd9987-5761-4f6f-a05c-dbcbe6ef6a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all\\n          models in the VVX series (VVX 150, VVX 250, VVX 350, and VVX 450), as well as three models from the Trio IP\\n          Conference series (Trio 8800, Trio 8500, and Trio 8300). A remote attacker can leverage CVE-2026-0826 to achieve\\n          unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability is present\\n          in the device's parsing of Session Description Protocol (SDP) attributes for Interactive Connectivity Establishment\\n          (ICE). The ICE feature, which is not enabled by default, must be enabled for the device to be exploitable by a\\n          remote attacker.\", \"disclosure_date\": \"2026-06-01\", \"fullname\": \"exploit/linux/misc/poly_unauth_rce_cve_2026_0826\", \"is_install_path\": true, \"mod_time\": \"2026-06-05 11:39:49 +0000\", \"name\": \"HP Poly Voice Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/misc/poly_unauth_rce_cve_2026_0826\", \"references\": [\"CVE-2026-0826\", \"URL-https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/\"], \"rport\": 5060, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.714885Z"}</description>
      <content:encoded>{"uuid": "22dd9987-5761-4f6f-a05c-dbcbe6ef6a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all\\n          models in the VVX series (VVX 150, VVX 250, VVX 350, and VVX 450), as well as three models from the Trio IP\\n          Conference series (Trio 8800, Trio 8500, and Trio 8300). A remote attacker can leverage CVE-2026-0826 to achieve\\n          unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability is present\\n          in the device's parsing of Session Description Protocol (SDP) attributes for Interactive Connectivity Establishment\\n          (ICE). The ICE feature, which is not enabled by default, must be enabled for the device to be exploitable by a\\n          remote attacker.\", \"disclosure_date\": \"2026-06-01\", \"fullname\": \"exploit/linux/misc/poly_unauth_rce_cve_2026_0826\", \"is_install_path\": true, \"mod_time\": \"2026-06-05 11:39:49 +0000\", \"name\": \"HP Poly Voice Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/misc/poly_unauth_rce_cve_2026_0826\", \"references\": [\"CVE-2026-0826\", \"URL-https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/\"], \"rport\": 5060, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.714885Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/22dd9987-5761-4f6f-a05c-dbcbe6ef6a06/export</guid>
      <pubDate>Tue, 08 Sep 2026 06:49:18 +0000</pubDate>
    </item>
    <item>
      <title>02133b65-e5e8-4fe8-b1ab-cd2ea0073968</title>
      <link>https://vulnerability.circl.lu/sighting/02133b65-e5e8-4fe8-b1ab-cd2ea0073968/export</link>
      <description>{"uuid": "02133b65-e5e8-4fe8-b1ab-cd2ea0073968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:06.306459Z"}</description>
      <content:encoded>{"uuid": "02133b65-e5e8-4fe8-b1ab-cd2ea0073968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:06.306459Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/02133b65-e5e8-4fe8-b1ab-cd2ea0073968/export</guid>
      <pubDate>Fri, 04 Sep 2026 00:01:06 +0000</pubDate>
    </item>
    <item>
      <title>3b5f7bbd-6a38-4ecd-bae5-219c86a6d0ec</title>
      <link>https://vulnerability.circl.lu/sighting/3b5f7bbd-6a38-4ecd-bae5-219c86a6d0ec/export</link>
      <description>{"uuid": "3b5f7bbd-6a38-4ecd-bae5-219c86a6d0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0830", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/177660", "content": "(Write-up) RCE in AWS Kiro IDE\nhttps://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/\n\n  submitted by    /u/SkyFallRobin  (https://www.reddit.com/user/SkyFallRobin) \n [link] (https://medium.com/@dhiraj_mishra/cve-2026-0830-aws-kiro-gitlab-helper-remote-code-execution-1f826469228d)   [comments] (https://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/)", "creation_timestamp": "2026-09-04T00:01:06.192390Z"}</description>
      <content:encoded>{"uuid": "3b5f7bbd-6a38-4ecd-bae5-219c86a6d0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0830", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/177660", "content": "(Write-up) RCE in AWS Kiro IDE\nhttps://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/\n\n  submitted by    /u/SkyFallRobin  (https://www.reddit.com/user/SkyFallRobin) \n [link] (https://medium.com/@dhiraj_mishra/cve-2026-0830-aws-kiro-gitlab-helper-remote-code-execution-1f826469228d)   [comments] (https://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/)", "creation_timestamp": "2026-09-04T00:01:06.192390Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3b5f7bbd-6a38-4ecd-bae5-219c86a6d0ec/export</guid>
      <pubDate>Fri, 04 Sep 2026 00:01:06 +0000</pubDate>
    </item>
    <item>
      <title>347134c9-fdb5-471a-97e1-5de78b8a869d</title>
      <link>https://vulnerability.circl.lu/sighting/347134c9-fdb5-471a-97e1-5de78b8a869d/export</link>
      <description>{"uuid": "347134c9-fdb5-471a-97e1-5de78b8a869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.692297Z"}</description>
      <content:encoded>{"uuid": "347134c9-fdb5-471a-97e1-5de78b8a869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.692297Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/347134c9-fdb5-471a-97e1-5de78b8a869d/export</guid>
      <pubDate>Fri, 04 Sep 2026 00:01:01 +0000</pubDate>
    </item>
    <item>
      <title>15652bbc-4c7d-4de0-b83d-24f834ee1796</title>
      <link>https://vulnerability.circl.lu/sighting/15652bbc-4c7d-4de0-b83d-24f834ee1796/export</link>
      <description>{"uuid": "15652bbc-4c7d-4de0-b83d-24f834ee1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.595157Z"}</description>
      <content:encoded>{"uuid": "15652bbc-4c7d-4de0-b83d-24f834ee1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.595157Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/15652bbc-4c7d-4de0-b83d-24f834ee1796/export</guid>
      <pubDate>Thu, 03 Sep 2026 03:00:05 +0000</pubDate>
    </item>
    <item>
      <title>0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5</title>
      <link>https://vulnerability.circl.lu/sighting/0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5/export</link>
      <description>{"uuid": "0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T02:00:05.267375Z"}</description>
      <content:encoded>{"uuid": "0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0800", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/178534", "content": "CVE-2026\u20130800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin\nhttps://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5\n\nHi, I\u2019m Balamurugan R.\n\u00a0I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium \u00bb (https://balax01.medium.com/cve-2026-0800-unauthenticated-stored-cross-site-scripting-in-user-submitted-posts-wordpress-plugin-303cfeecee1f?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T02:00:05.267375Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0aacaeb8-6ef7-4b43-bac8-0cc7cbb3d1a5/export</guid>
      <pubDate>Thu, 03 Sep 2026 02:00:05 +0000</pubDate>
    </item>
    <item>
      <title>1884d4ec-5be6-4c10-bd13-43fab0662ced</title>
      <link>https://vulnerability.circl.lu/sighting/1884d4ec-5be6-4c10-bd13-43fab0662ced/export</link>
      <description>{"uuid": "1884d4ec-5be6-4c10-bd13-43fab0662ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0830", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/177660", "content": "(Write-up) RCE in AWS Kiro IDE\nhttps://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/\n\n  submitted by    /u/SkyFallRobin  (https://www.reddit.com/user/SkyFallRobin) \n [link] (https://medium.com/@dhiraj_mishra/cve-2026-0830-aws-kiro-gitlab-helper-remote-code-execution-1f826469228d)   [comments] (https://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/)", "creation_timestamp": "2026-09-03T02:00:05.155985Z"}</description>
      <content:encoded>{"uuid": "1884d4ec-5be6-4c10-bd13-43fab0662ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0830", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/177660", "content": "(Write-up) RCE in AWS Kiro IDE\nhttps://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/\n\n  submitted by    /u/SkyFallRobin  (https://www.reddit.com/user/SkyFallRobin) \n [link] (https://medium.com/@dhiraj_mishra/cve-2026-0830-aws-kiro-gitlab-helper-remote-code-execution-1f826469228d)   [comments] (https://www.reddit.com/r/redteamsec/comments/1qa43ho/writeup_rce_in_aws_kiro_ide/)", "creation_timestamp": "2026-09-03T02:00:05.155985Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1884d4ec-5be6-4c10-bd13-43fab0662ced/export</guid>
      <pubDate>Thu, 03 Sep 2026 02:00:05 +0000</pubDate>
    </item>
    <item>
      <title>2d91ced9-838b-4c3b-8627-6c5a3cd52006</title>
      <link>https://vulnerability.circl.lu/sighting/2d91ced9-838b-4c3b-8627-6c5a3cd52006/export</link>
      <description>{"uuid": "2d91ced9-838b-4c3b-8627-6c5a3cd52006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-03T00:00:50.751689Z"}</description>
      <content:encoded>{"uuid": "2d91ced9-838b-4c3b-8627-6c5a3cd52006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-03T00:00:50.751689Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2d91ced9-838b-4c3b-8627-6c5a3cd52006/export</guid>
      <pubDate>Thu, 03 Sep 2026 00:00:50 +0000</pubDate>
    </item>
    <item>
      <title>c2f35e2d-f399-4bef-9333-9d085068de2c</title>
      <link>https://vulnerability.circl.lu/sighting/c2f35e2d-f399-4bef-9333-9d085068de2c/export</link>
      <description>{"uuid": "c2f35e2d-f399-4bef-9333-9d085068de2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44388", "content": "Una vulnerabilidad recientemente revelada, CVE-2026-0828, en el controlador del n\u00facleo de Windows ProcessMonitorDriver.sys pone de manifiesto una capacidad peligrosa: cualquier aplicaci\u00f3n en modo usuario que obtenga un identificador del dispositivo puede finalizar procesos arbitrarios, incluidos los procesos protegidos del sistema, sin que se realicen las comprobaciones de control de acceso adecuadas. Esta falla elude de hecho el modelo de seguridad habitual de Windows que protege los servicios cr\u00edticos del sistema y los componentes de seguridad.\n\nhttps://github.com/oxfemale/KillChain\n\n#maldev #github #killprocess", "creation_timestamp": "2026-09-03T00:00:47.422670Z"}</description>
      <content:encoded>{"uuid": "c2f35e2d-f399-4bef-9333-9d085068de2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44388", "content": "Una vulnerabilidad recientemente revelada, CVE-2026-0828, en el controlador del n\u00facleo de Windows ProcessMonitorDriver.sys pone de manifiesto una capacidad peligrosa: cualquier aplicaci\u00f3n en modo usuario que obtenga un identificador del dispositivo puede finalizar procesos arbitrarios, incluidos los procesos protegidos del sistema, sin que se realicen las comprobaciones de control de acceso adecuadas. Esta falla elude de hecho el modelo de seguridad habitual de Windows que protege los servicios cr\u00edticos del sistema y los componentes de seguridad.\n\nhttps://github.com/oxfemale/KillChain\n\n#maldev #github #killprocess", "creation_timestamp": "2026-09-03T00:00:47.422670Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c2f35e2d-f399-4bef-9333-9d085068de2c/export</guid>
      <pubDate>Thu, 03 Sep 2026 00:00:47 +0000</pubDate>
    </item>
    <item>
      <title>c15c5a87-4977-48eb-9404-2ddb740015bf</title>
      <link>https://vulnerability.circl.lu/sighting/c15c5a87-4977-48eb-9404-2ddb740015bf/export</link>
      <description>{"uuid": "c15c5a87-4977-48eb-9404-2ddb740015bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0848", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44124", "content": "https://unaaldia.hispasec.com/2026/03/como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848.html?utm_source=rss&amp;amp;utm_medium=rss&amp;amp;utm_campaign=como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848", "creation_timestamp": "2026-09-03T00:00:47.165005Z"}</description>
      <content:encoded>{"uuid": "c15c5a87-4977-48eb-9404-2ddb740015bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0848", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/44124", "content": "https://unaaldia.hispasec.com/2026/03/como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848.html?utm_source=rss&amp;amp;utm_medium=rss&amp;amp;utm_campaign=como-un-fallo-en-una-libreria-de-python-puede-comprometer-sistemas-de-ia-cve-2026-0848", "creation_timestamp": "2026-09-03T00:00:47.165005Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c15c5a87-4977-48eb-9404-2ddb740015bf/export</guid>
      <pubDate>Thu, 03 Sep 2026 00:00:47 +0000</pubDate>
    </item>
  </channel>
</rss>
