https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 20 Sep 2026 18:50:12 +0000 https://vulnerability.circl.lu/sighting/750a9b77-73f0-4fac-a7c0-65326009b525/export {"uuid": "750a9b77-73f0-4fac-a7c0-65326009b525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "Telegram/7HGOqCXbKI1hNntvQwnIuknldsLkZaEMStEzyd5S_9lQPYE", "content": "", "creation_timestamp": "2026-09-20T00:00:11.706100Z"} {"uuid": "750a9b77-73f0-4fac-a7c0-65326009b525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "Telegram/7HGOqCXbKI1hNntvQwnIuknldsLkZaEMStEzyd5S_9lQPYE", "content": "", "creation_timestamp": "2026-09-20T00:00:11.706100Z"} https://vulnerability.circl.lu/sighting/750a9b77-73f0-4fac-a7c0-65326009b525/export Sun, 20 Sep 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/5c03c0f5-25f5-4de3-8010-58ae0f7682cc/export {"uuid": "5c03c0f5-25f5-4de3-8010-58ae0f7682cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvtsgmocy62v", "content": "~Cisa~\nLocal users or compromised containers can gain root on affected Edgenius gateways; update to 3.2.4.1.\n-\nIOCs: CVE-2026-31431\n-\n#CVE202631431 #ICS #ThreatIntel", "creation_timestamp": "2026-09-19T04:03:25.226809Z"} {"uuid": "5c03c0f5-25f5-4de3-8010-58ae0f7682cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvtsgmocy62v", "content": "~Cisa~\nLocal users or compromised containers can gain root on affected Edgenius gateways; update to 3.2.4.1.\n-\nIOCs: CVE-2026-31431\n-\n#CVE202631431 #ICS #ThreatIntel", "creation_timestamp": "2026-09-19T04:03:25.226809Z"} https://vulnerability.circl.lu/sighting/5c03c0f5-25f5-4de3-8010-58ae0f7682cc/export Sat, 19 Sep 2026 04:03:25 +0000 https://vulnerability.circl.lu/sighting/92ce10d9-3276-4f55-8bda-95ee03b47409/export {"uuid": "92ce10d9-3276-4f55-8bda-95ee03b47409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "Telegram/7HGOqCXbKI1hNntvQwnIuknldsLkZaEMStEzyd5S_9lQPYE", "content": "", "creation_timestamp": "2026-09-19T02:00:03.985363Z"} {"uuid": "92ce10d9-3276-4f55-8bda-95ee03b47409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "Telegram/7HGOqCXbKI1hNntvQwnIuknldsLkZaEMStEzyd5S_9lQPYE", "content": "", "creation_timestamp": "2026-09-19T02:00:03.985363Z"} https://vulnerability.circl.lu/sighting/92ce10d9-3276-4f55-8bda-95ee03b47409/export Sat, 19 Sep 2026 02:00:03 +0000 https://vulnerability.circl.lu/sighting/df1d6504-fd2f-48d6-a751-352f297fc737/export {"uuid": "df1d6504-fd2f-48d6-a751-352f297fc737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "seen", "source": "https://t.me/VulnerabilityNews/42253", "content": "New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions\n\nCybersecurity researchers have disclosed details of a Linux local privilege escalation (LPE) flaw that could allow an unprivileged local user to obtain root.\nThe high-severity vulnerability tracked as CVE-2026-31431 (CVSS score: 7.8) has been codenamed Copy Fail by Xint.io and Theori.\n\"An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux\nhttps://thehackernews.com/2026/04/new-linux-copy-fail-vulnerability.html", "creation_timestamp": "2026-09-19T00:00:40.957501Z"} {"uuid": "df1d6504-fd2f-48d6-a751-352f297fc737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "seen", "source": "https://t.me/VulnerabilityNews/42253", "content": "New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions\n\nCybersecurity researchers have disclosed details of a Linux local privilege escalation (LPE) flaw that could allow an unprivileged local user to obtain root.\nThe high-severity vulnerability tracked as CVE-2026-31431 (CVSS score: 7.8) has been codenamed Copy Fail by Xint.io and Theori.\n\"An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux\nhttps://thehackernews.com/2026/04/new-linux-copy-fail-vulnerability.html", "creation_timestamp": "2026-09-19T00:00:40.957501Z"} https://vulnerability.circl.lu/sighting/df1d6504-fd2f-48d6-a751-352f297fc737/export Sat, 19 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/8391f38b-1cc3-48a1-85fc-9b7e63ad3919/export {"uuid": "8391f38b-1cc3-48a1-85fc-9b7e63ad3919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42278", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/01/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:40.908050Z"} {"uuid": "8391f38b-1cc3-48a1-85fc-9b7e63ad3919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42278", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/01/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-19T00:00:40.908050Z"} https://vulnerability.circl.lu/sighting/8391f38b-1cc3-48a1-85fc-9b7e63ad3919/export Sat, 19 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/9e392bd7-e1d5-4a82-b88a-4da68b0d6f14/export {"uuid": "9e392bd7-e1d5-4a82-b88a-4da68b0d6f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42287", "content": "CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments\n\nA high-severity Linux vulnerability, \u201cCopy Fail\u201d (CVE-2026-31431), enables root privilege escalation across cloud environments and Kubernetes workloads. With a working exploit already in the wild, organizations should act quickly to detect, mitigate, and reduce risk.\nThe post CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments appeared first on Microsoft Security Blog.\nhttps://www.microsoft.com/en-us/security/blog/2026/05/01/cve-2026-31431-copy-fail-vulnerability-enables-linux-root-privilege-escalation/", "creation_timestamp": "2026-09-19T00:00:40.834408Z"} {"uuid": "9e392bd7-e1d5-4a82-b88a-4da68b0d6f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42287", "content": "CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments\n\nA high-severity Linux vulnerability, \u201cCopy Fail\u201d (CVE-2026-31431), enables root privilege escalation across cloud environments and Kubernetes workloads. With a working exploit already in the wild, organizations should act quickly to detect, mitigate, and reduce risk.\nThe post CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments appeared first on Microsoft Security Blog.\nhttps://www.microsoft.com/en-us/security/blog/2026/05/01/cve-2026-31431-copy-fail-vulnerability-enables-linux-root-privilege-escalation/", "creation_timestamp": "2026-09-19T00:00:40.834408Z"} https://vulnerability.circl.lu/sighting/9e392bd7-e1d5-4a82-b88a-4da68b0d6f14/export Sat, 19 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/5f7f8a6c-2ac6-4f46-9ae0-6fbf405d36d2/export {"uuid": "5f7f8a6c-2ac6-4f46-9ae0-6fbf405d36d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42294", "content": "CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed security flaw impacting various Linux distributions to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe vulnerability, tracked as CVE-2026-31431 (CVSS score: 7.8), is a case of local privilege escalation (LPE) flaw that could allow an\nhttps://thehackernews.com/2026/05/cisa-adds-actively-exploited-linux-root.html", "creation_timestamp": "2026-09-19T00:00:40.769847Z"} {"uuid": "5f7f8a6c-2ac6-4f46-9ae0-6fbf405d36d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42294", "content": "CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed security flaw impacting various Linux distributions to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe vulnerability, tracked as CVE-2026-31431 (CVSS score: 7.8), is a case of local privilege escalation (LPE) flaw that could allow an\nhttps://thehackernews.com/2026/05/cisa-adds-actively-exploited-linux-root.html", "creation_timestamp": "2026-09-19T00:00:40.769847Z"} https://vulnerability.circl.lu/sighting/5f7f8a6c-2ac6-4f46-9ae0-6fbf405d36d2/export Sat, 19 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/79bbc226-2bd5-49e0-92fe-d7f00b6b56f7/export {"uuid": "79bbc226-2bd5-49e0-92fe-d7f00b6b56f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102667", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a copyfail\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Minime794\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-18 10:46:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCopy-Fail-Exploit-CVE-2026-31431\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T00:00:27.148624Z"} {"uuid": "79bbc226-2bd5-49e0-92fe-d7f00b6b56f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102667", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a copyfail\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Minime794\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-18 10:46:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCopy-Fail-Exploit-CVE-2026-31431\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T00:00:27.148624Z"} https://vulnerability.circl.lu/sighting/79bbc226-2bd5-49e0-92fe-d7f00b6b56f7/export Sat, 19 Sep 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/03c91254-a894-4807-8d59-ddfcca9ccfe9/export {"uuid": "03c91254-a894-4807-8d59-ddfcca9ccfe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "Telegram/PLkGA2-WRKbMNSzblaRtTzMSbhZN_fUTM7KCRWp8gyLM2XI", "content": "", "creation_timestamp": "2026-09-19T00:00:24.157561Z"} {"uuid": "03c91254-a894-4807-8d59-ddfcca9ccfe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "Telegram/PLkGA2-WRKbMNSzblaRtTzMSbhZN_fUTM7KCRWp8gyLM2XI", "content": "", "creation_timestamp": "2026-09-19T00:00:24.157561Z"} https://vulnerability.circl.lu/sighting/03c91254-a894-4807-8d59-ddfcca9ccfe9/export Sat, 19 Sep 2026 00:00:24 +0000 https://vulnerability.circl.lu/sighting/ea438df0-94de-44e5-ae0f-0e910b3ecbde/export {"uuid": "ea438df0-94de-44e5-ae0f-0e910b3ecbde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102667", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a copyfail\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Minime794\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-18 10:46:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCopy-Fail-Exploit-CVE-2026-31431\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T15:00:06.379162Z"} {"uuid": "ea438df0-94de-44e5-ae0f-0e910b3ecbde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31431", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102667", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a copyfail\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Minime794\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-18 10:46:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCopy-Fail-Exploit-CVE-2026-31431\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T15:00:06.379162Z"} https://vulnerability.circl.lu/sighting/ea438df0-94de-44e5-ae0f-0e910b3ecbde/export Fri, 18 Sep 2026 15:00:06 +0000