<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 27 Sep 2026 10:11:56 +0000</lastBuildDate>
    <item>
      <title>9f3f395c-90ef-45e5-bcd9-c1aa558dd447</title>
      <link>https://vulnerability.circl.lu/sighting/9f3f395c-90ef-45e5-bcd9-c1aa558dd447/export</link>
      <description>{"uuid": "9f3f395c-90ef-45e5-bcd9-c1aa558dd447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103495", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 05:41:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100740 PoC: D-Link DIR-895L A1_102b07 L2TP Host Name AVP out-of-bounds write in tunnel_set_params (UDP 1701). Device fingerprint + optional OOB trigger packet for authorized lab testing. https://pocbit.org/pocs/cve-2026-100740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T06:00:07.000000Z"}</description>
      <content:encoded>{"uuid": "9f3f395c-90ef-45e5-bcd9-c1aa558dd447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103495", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 05:41:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100740 PoC: D-Link DIR-895L A1_102b07 L2TP Host Name AVP out-of-bounds write in tunnel_set_params (UDP 1701). Device fingerprint + optional OOB trigger packet for authorized lab testing. https://pocbit.org/pocs/cve-2026-100740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T06:00:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9f3f395c-90ef-45e5-bcd9-c1aa558dd447/export</guid>
      <pubDate>Sun, 27 Sep 2026 06:00:07 +0000</pubDate>
    </item>
    <item>
      <title>a22da3d6-98d7-4c76-97e0-da8131706873</title>
      <link>https://vulnerability.circl.lu/sighting/a22da3d6-98d7-4c76-97e0-da8131706873/export</link>
      <description>{"uuid": "a22da3d6-98d7-4c76-97e0-da8131706873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwhzn7i7ke2g", "content": "D-Link DIR-895L A1_102b07\u306etunnel.c L2TP Control Channel Parser\u306b\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u306a\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-100740 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-09-27T05:05:36.788088Z"}</description>
      <content:encoded>{"uuid": "a22da3d6-98d7-4c76-97e0-da8131706873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwhzn7i7ke2g", "content": "D-Link DIR-895L A1_102b07\u306etunnel.c L2TP Control Channel Parser\u306b\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u306a\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-100740 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-09-27T05:05:36.788088Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a22da3d6-98d7-4c76-97e0-da8131706873/export</guid>
      <pubDate>Sun, 27 Sep 2026 05:05:36 +0000</pubDate>
    </item>
    <item>
      <title>1e17e9fd-197b-4270-ae97-710199737d13</title>
      <link>https://vulnerability.circl.lu/sighting/1e17e9fd-197b-4270-ae97-710199737d13/export</link>
      <description>{"uuid": "1e17e9fd-197b-4270-ae97-710199737d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhnpzgsox25", "content": "\ud83d\udd34 CVE-2026-100740 - Critical (9.9)\n\nA vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_pa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100740/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T01:32:27.207842Z"}</description>
      <content:encoded>{"uuid": "1e17e9fd-197b-4270-ae97-710199737d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhnpzgsox25", "content": "\ud83d\udd34 CVE-2026-100740 - Critical (9.9)\n\nA vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_pa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100740/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T01:32:27.207842Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1e17e9fd-197b-4270-ae97-710199737d13/export</guid>
      <pubDate>Sun, 27 Sep 2026 01:32:27 +0000</pubDate>
    </item>
    <item>
      <title>d5b160e5-ca09-478c-b646-ef661d1839af</title>
      <link>https://vulnerability.circl.lu/sighting/d5b160e5-ca09-478c-b646-ef661d1839af/export</link>
      <description>{"uuid": "d5b160e5-ca09-478c-b646-ef661d1839af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100740", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhnmhahk42t", "content": "D-Link DIR-895L faces CRITICAL CVE-2026-100740 (CVSS 9.4): out-of-bounds write enables remote attacks. Exploit code is public. No patch yet \u2014 monitor vendor for updates. https://radar.offseq.com/threat/cve-2026-100740-out-of-bounds-write-in-d-link-dir-895l-73af9e0aee6421f0 #OffSeq #CVE2026100740 ...", "creation_timestamp": "2026-09-27T01:30:27.195130Z"}</description>
      <content:encoded>{"uuid": "d5b160e5-ca09-478c-b646-ef661d1839af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100740", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhnmhahk42t", "content": "D-Link DIR-895L faces CRITICAL CVE-2026-100740 (CVSS 9.4): out-of-bounds write enables remote attacks. Exploit code is public. No patch yet \u2014 monitor vendor for updates. https://radar.offseq.com/threat/cve-2026-100740-out-of-bounds-write-in-d-link-dir-895l-73af9e0aee6421f0 #OffSeq #CVE2026100740 ...", "creation_timestamp": "2026-09-27T01:30:27.195130Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d5b160e5-ca09-478c-b646-ef661d1839af/export</guid>
      <pubDate>Sun, 27 Sep 2026 01:30:27 +0000</pubDate>
    </item>
    <item>
      <title>d0489a17-cabe-4cb7-9d88-89af8dad7eef</title>
      <link>https://vulnerability.circl.lu/sighting/d0489a17-cabe-4cb7-9d88-89af8dad7eef/export</link>
      <description>{"uuid": "d0489a17-cabe-4cb7-9d88-89af8dad7eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100740", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340413888976993", "content": "D-Link DIR-895L hit by CRITICAL vuln: CVE-2026-100740 (CVSS 9.4) in tunnel_set_params \u2014 public exploit code enables remote RCE or DoS via out-of-bounds write. No patch yet. Monitor for updates: https://radar.offseq.com/threat/cve-2026-100740-out-of-bounds-write-in-d-link-dir-895l-73af9e0aee6421f0 #OffSeq #CVE2026100740 #infosec #RouterSecurity", "creation_timestamp": "2026-09-27T01:30:25.341218Z"}</description>
      <content:encoded>{"uuid": "d0489a17-cabe-4cb7-9d88-89af8dad7eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100740", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340413888976993", "content": "D-Link DIR-895L hit by CRITICAL vuln: CVE-2026-100740 (CVSS 9.4) in tunnel_set_params \u2014 public exploit code enables remote RCE or DoS via out-of-bounds write. No patch yet. Monitor for updates: https://radar.offseq.com/threat/cve-2026-100740-out-of-bounds-write-in-d-link-dir-895l-73af9e0aee6421f0 #OffSeq #CVE2026100740 #infosec #RouterSecurity", "creation_timestamp": "2026-09-27T01:30:25.341218Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d0489a17-cabe-4cb7-9d88-89af8dad7eef/export</guid>
      <pubDate>Sun, 27 Sep 2026 01:30:25 +0000</pubDate>
    </item>
    <item>
      <title>086471e2-4763-40cc-9e8f-5429b9ddf57e</title>
      <link>https://vulnerability.circl.lu/sighting/086471e2-4763-40cc-9e8f-5429b9ddf57e/export</link>
      <description>{"uuid": "086471e2-4763-40cc-9e8f-5429b9ddf57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhmzwuddt26", "content": "CVE-2026-100740 - dir-895l\nThe D-Link DIR-895L router contains a flaw in its L2TP control channel code that lets an attacker send specially crafted data and write outside the intended memory area. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir895l #dlink #CVE #infosec", "creation_timestamp": "2026-09-27T01:20:05.239416Z"}</description>
      <content:encoded>{"uuid": "086471e2-4763-40cc-9e8f-5429b9ddf57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhmzwuddt26", "content": "CVE-2026-100740 - dir-895l\nThe D-Link DIR-895L router contains a flaw in its L2TP control channel code that lets an attacker send specially crafted data and write outside the intended memory area. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir895l #dlink #CVE #infosec", "creation_timestamp": "2026-09-27T01:20:05.239416Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/086471e2-4763-40cc-9e8f-5429b9ddf57e/export</guid>
      <pubDate>Sun, 27 Sep 2026 01:20:05 +0000</pubDate>
    </item>
    <item>
      <title>48a18d6f-9141-4544-aac7-198b1388778d</title>
      <link>https://vulnerability.circl.lu/sighting/48a18d6f-9141-4544-aac7-198b1388778d/export</link>
      <description>{"uuid": "48a18d6f-9141-4544-aac7-198b1388778d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117337830743628893", "content": "The severity is increased for this new vulnerability affecting D-Link DIR-895L (CVE-2026-100740) https://vuldb.com/vuln/410614", "creation_timestamp": "2026-09-26T14:33:31.089885Z"}</description>
      <content:encoded>{"uuid": "48a18d6f-9141-4544-aac7-198b1388778d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100740", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117337830743628893", "content": "The severity is increased for this new vulnerability affecting D-Link DIR-895L (CVE-2026-100740) https://vuldb.com/vuln/410614", "creation_timestamp": "2026-09-26T14:33:31.089885Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/48a18d6f-9141-4544-aac7-198b1388778d/export</guid>
      <pubDate>Sat, 26 Sep 2026 14:33:31 +0000</pubDate>
    </item>
  </channel>
</rss>
