<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 09:59:10 +0000</lastBuildDate>
    <item>
      <title>7247eb91-b3d2-45a4-ba9f-fa9a01810325</title>
      <link>https://vulnerability.circl.lu/sighting/7247eb91-b3d2-45a4-ba9f-fa9a01810325/export</link>
      <description>{"uuid": "7247eb91-b3d2-45a4-ba9f-fa9a01810325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/EnefVat-4pmSVJwsEenGGPQIdPVwU23eA8t3s7zWM6ulnvI", "content": "", "creation_timestamp": "2026-09-17T07:00:03.816633Z"}</description>
      <content:encoded>{"uuid": "7247eb91-b3d2-45a4-ba9f-fa9a01810325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/EnefVat-4pmSVJwsEenGGPQIdPVwU23eA8t3s7zWM6ulnvI", "content": "", "creation_timestamp": "2026-09-17T07:00:03.816633Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7247eb91-b3d2-45a4-ba9f-fa9a01810325/export</guid>
      <pubDate>Thu, 17 Sep 2026 07:00:03 +0000</pubDate>
    </item>
    <item>
      <title>219a2e71-f1cb-4883-a2c9-47404300b482</title>
      <link>https://vulnerability.circl.lu/sighting/219a2e71-f1cb-4883-a2c9-47404300b482/export</link>
      <description>{"uuid": "219a2e71-f1cb-4883-a2c9-47404300b482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40854", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281215010783373", "content": "Vulnerabilities in a 5g router from T-Mobile, the company known for its security?! I'm shocked. Shocked! Well, not that shocked.\nhttps://cert.pl/posts/2026/09/CVE-2026-40854/\n#internetOfShit #miraiWillNeverDie#jobSecurityForSomeone", "creation_timestamp": "2026-09-16T14:35:21.637466Z"}</description>
      <content:encoded>{"uuid": "219a2e71-f1cb-4883-a2c9-47404300b482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40854", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281215010783373", "content": "Vulnerabilities in a 5g router from T-Mobile, the company known for its security?! I'm shocked. Shocked! Well, not that shocked.\nhttps://cert.pl/posts/2026/09/CVE-2026-40854/\n#internetOfShit #miraiWillNeverDie#jobSecurityForSomeone", "creation_timestamp": "2026-09-16T14:35:21.637466Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/219a2e71-f1cb-4883-a2c9-47404300b482/export</guid>
      <pubDate>Wed, 16 Sep 2026 14:35:21 +0000</pubDate>
    </item>
    <item>
      <title>626dc0c9-2bcc-4810-b800-d62fc082078b</title>
      <link>https://vulnerability.circl.lu/sighting/626dc0c9-2bcc-4810-b800-d62fc082078b/export</link>
      <description>{"uuid": "626dc0c9-2bcc-4810-b800-d62fc082078b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvncslrkgs2t", "content": "\ud83d\udea8 CVE-2026-40855 \u2014 CVSS 9.3 CRITICAL\n\nWNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping f...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-40855\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T14:07:48.158437Z"}</description>
      <content:encoded>{"uuid": "626dc0c9-2bcc-4810-b800-d62fc082078b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvncslrkgs2t", "content": "\ud83d\udea8 CVE-2026-40855 \u2014 CVSS 9.3 CRITICAL\n\nWNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping f...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-40855\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T14:07:48.158437Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/626dc0c9-2bcc-4810-b800-d62fc082078b/export</guid>
      <pubDate>Wed, 16 Sep 2026 14:07:48 +0000</pubDate>
    </item>
    <item>
      <title>154d58df-387c-4a6c-af3e-3c82de6f59b4</title>
      <link>https://vulnerability.circl.lu/sighting/154d58df-387c-4a6c-af3e-3c82de6f59b4/export</link>
      <description>{"uuid": "154d58df-387c-4a6c-af3e-3c82de6f59b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i76akdyx2nbvn", "content": "CVE-2026-40857 - CSRF token bypass in T-Mobile 5G Box IDU routers\nCVE ID : CVE-2026-40857\n \n Published : Sept. 16, 2026, 11:21 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal....", "creation_timestamp": "2026-09-16T13:08:05.656002Z"}</description>
      <content:encoded>{"uuid": "154d58df-387c-4a6c-af3e-3c82de6f59b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i76akdyx2nbvn", "content": "CVE-2026-40857 - CSRF token bypass in T-Mobile 5G Box IDU routers\nCVE ID : CVE-2026-40857\n \n Published : Sept. 16, 2026, 11:21 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal....", "creation_timestamp": "2026-09-16T13:08:05.656002Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/154d58df-387c-4a6c-af3e-3c82de6f59b4/export</guid>
      <pubDate>Wed, 16 Sep 2026 13:08:05 +0000</pubDate>
    </item>
    <item>
      <title>393e85ae-a699-43df-a916-54d57a3c6c30</title>
      <link>https://vulnerability.circl.lu/sighting/393e85ae-a699-43df-a916-54d57a3c6c30/export</link>
      <description>{"uuid": "393e85ae-a699-43df-a916-54d57a3c6c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5aebau6pcvdwa", "content": "CVE-2026-40856 - Config disclosure in T-Mobile 5G Box IDU routers\nCVE ID : CVE-2026-40856\n \n Published : Sept. 16, 2026, 11:21 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the...", "creation_timestamp": "2026-09-16T13:02:01.951771Z"}</description>
      <content:encoded>{"uuid": "393e85ae-a699-43df-a916-54d57a3c6c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5aebau6pcvdwa", "content": "CVE-2026-40856 - Config disclosure in T-Mobile 5G Box IDU routers\nCVE ID : CVE-2026-40856\n \n Published : Sept. 16, 2026, 11:21 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the...", "creation_timestamp": "2026-09-16T13:02:01.951771Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/393e85ae-a699-43df-a916-54d57a3c6c30/export</guid>
      <pubDate>Wed, 16 Sep 2026 13:02:01 +0000</pubDate>
    </item>
    <item>
      <title>1bd29b88-cf8f-4b6e-8595-cb9582f94608</title>
      <link>https://vulnerability.circl.lu/sighting/1bd29b88-cf8f-4b6e-8595-cb9582f94608/export</link>
      <description>{"uuid": "1bd29b88-cf8f-4b6e-8595-cb9582f94608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40856", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:45:09.589944Z"}</description>
      <content:encoded>{"uuid": "1bd29b88-cf8f-4b6e-8595-cb9582f94608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40856", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:45:09.589944Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1bd29b88-cf8f-4b6e-8595-cb9582f94608/export</guid>
      <pubDate>Wed, 16 Sep 2026 12:45:09 +0000</pubDate>
    </item>
    <item>
      <title>c1ed5af4-05cf-4fc4-a924-68aa44dea1c6</title>
      <link>https://vulnerability.circl.lu/sighting/c1ed5af4-05cf-4fc4-a924-68aa44dea1c6/export</link>
      <description>{"uuid": "c1ed5af4-05cf-4fc4-a924-68aa44dea1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:45:07.730112Z"}</description>
      <content:encoded>{"uuid": "c1ed5af4-05cf-4fc4-a924-68aa44dea1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:45:07.730112Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c1ed5af4-05cf-4fc4-a924-68aa44dea1c6/export</guid>
      <pubDate>Wed, 16 Sep 2026 12:45:07 +0000</pubDate>
    </item>
    <item>
      <title>4fcb4a89-e074-42a6-9c6e-ba1507f456f4</title>
      <link>https://vulnerability.circl.lu/sighting/4fcb4a89-e074-42a6-9c6e-ba1507f456f4/export</link>
      <description>{"uuid": "4fcb4a89-e074-42a6-9c6e-ba1507f456f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvn5vrq7pl2j", "content": "CVE-2026-40855 - t-mobile 5g box idu\nThe T-Mobile 5G Box IDU router\u2019s ping feature can be tricked into running any command the attacker supplies. An attacker who can log in could gain full control of the device. Upgrade\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wnc #CVE #infosec", "creation_timestamp": "2026-09-16T12:40:07.209508Z"}</description>
      <content:encoded>{"uuid": "4fcb4a89-e074-42a6-9c6e-ba1507f456f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvn5vrq7pl2j", "content": "CVE-2026-40855 - t-mobile 5g box idu\nThe T-Mobile 5G Box IDU router\u2019s ping feature can be tricked into running any command the attacker supplies. An attacker who can log in could gain full control of the device. Upgrade\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wnc #CVE #infosec", "creation_timestamp": "2026-09-16T12:40:07.209508Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4fcb4a89-e074-42a6-9c6e-ba1507f456f4/export</guid>
      <pubDate>Wed, 16 Sep 2026 12:40:07 +0000</pubDate>
    </item>
    <item>
      <title>6c0b2b5c-f699-4bc8-8cb3-04162950a9c1</title>
      <link>https://vulnerability.circl.lu/sighting/6c0b2b5c-f699-4bc8-8cb3-04162950a9c1/export</link>
      <description>{"uuid": "6c0b2b5c-f699-4bc8-8cb3-04162950a9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40857", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:15:08.417114Z"}</description>
      <content:encoded>{"uuid": "6c0b2b5c-f699-4bc8-8cb3-04162950a9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40857", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:15:08.417114Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6c0b2b5c-f699-4bc8-8cb3-04162950a9c1/export</guid>
      <pubDate>Wed, 16 Sep 2026 12:15:08 +0000</pubDate>
    </item>
    <item>
      <title>46e3ab10-20f4-42e9-bb06-28e305bcd8ad</title>
      <link>https://vulnerability.circl.lu/sighting/46e3ab10-20f4-42e9-bb06-28e305bcd8ad/export</link>
      <description>{"uuid": "46e3ab10-20f4-42e9-bb06-28e305bcd8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40854", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:15:06.324015Z"}</description>
      <content:encoded>{"uuid": "46e3ab10-20f4-42e9-bb06-28e305bcd8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40854", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:15:06.324015Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/46e3ab10-20f4-42e9-bb06-28e305bcd8ad/export</guid>
      <pubDate>Wed, 16 Sep 2026 12:15:06 +0000</pubDate>
    </item>
  </channel>
</rss>
