<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 17:35:30 +0000</lastBuildDate>
    <item>
      <title>3185af97-037b-411c-a85f-6decdb102bd7</title>
      <link>https://vulnerability.circl.lu/sighting/3185af97-037b-411c-a85f-6decdb102bd7/export</link>
      <description>{"uuid": "3185af97-037b-411c-a85f-6decdb102bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ctyisjmolbrf7", "content": "CVE-2026-100886 - Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication\nCVE ID : CVE-2026-100886\n \n Published : Sept. 27, 2026, 11:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4...", "creation_timestamp": "2026-09-28T00:47:19.378128Z"}</description>
      <content:encoded>{"uuid": "3185af97-037b-411c-a85f-6decdb102bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ctyisjmolbrf7", "content": "CVE-2026-100886 - Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication\nCVE ID : CVE-2026-100886\n \n Published : Sept. 27, 2026, 11:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4...", "creation_timestamp": "2026-09-28T00:47:19.378128Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3185af97-037b-411c-a85f-6decdb102bd7/export</guid>
      <pubDate>Mon, 28 Sep 2026 00:47:19 +0000</pubDate>
    </item>
    <item>
      <title>14299cee-2927-4ae9-9eb8-a5363af57415</title>
      <link>https://vulnerability.circl.lu/sighting/14299cee-2927-4ae9-9eb8-a5363af57415/export</link>
      <description>{"uuid": "14299cee-2927-4ae9-9eb8-a5363af57415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwk25kijk22u", "content": "CVE-2026-100886\nThe Seetong T8108, T8108P, T8116 and T8232 units contain a flaw in their troubleshooting (debug) service that can let an attacker skip the normal login check from anywhere on the network. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-28T00:20:04.563321Z"}</description>
      <content:encoded>{"uuid": "14299cee-2927-4ae9-9eb8-a5363af57415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwk25kijk22u", "content": "CVE-2026-100886\nThe Seetong T8108, T8108P, T8116 and T8232 units contain a flaw in their troubleshooting (debug) service that can let an attacker skip the normal login check from anywhere on the network. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-28T00:20:04.563321Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/14299cee-2927-4ae9-9eb8-a5363af57415/export</guid>
      <pubDate>Mon, 28 Sep 2026 00:20:04 +0000</pubDate>
    </item>
    <item>
      <title>bc962866-d6c5-4926-917b-e2056a4b0ae1</title>
      <link>https://vulnerability.circl.lu/sighting/bc962866-d6c5-4926-917b-e2056a4b0ae1/export</link>
      <description>{"uuid": "bc962866-d6c5-4926-917b-e2056a4b0ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwjzgpjkv62u", "content": "\ud83d\udea8 CVE-2026-100886 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The aff...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100886\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T00:07:18.595460Z"}</description>
      <content:encoded>{"uuid": "bc962866-d6c5-4926-917b-e2056a4b0ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwjzgpjkv62u", "content": "\ud83d\udea8 CVE-2026-100886 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The aff...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100886\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T00:07:18.595460Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bc962866-d6c5-4926-917b-e2056a4b0ae1/export</guid>
      <pubDate>Mon, 28 Sep 2026 00:07:18 +0000</pubDate>
    </item>
    <item>
      <title>c8befd3b-b8b3-44c7-94f0-dfd61ce870f4</title>
      <link>https://vulnerability.circl.lu/sighting/c8befd3b-b8b3-44c7-94f0-dfd61ce870f4/export</link>
      <description>{"uuid": "c8befd3b-b8b3-44c7-94f0-dfd61ce870f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjz3ypojc27", "content": "\ud83d\udd34 CVE-2026-100886 - Critical (10)\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build20260424101...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100886/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:01:20.453069Z"}</description>
      <content:encoded>{"uuid": "c8befd3b-b8b3-44c7-94f0-dfd61ce870f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjz3ypojc27", "content": "\ud83d\udd34 CVE-2026-100886 - Critical (10)\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build20260424101...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100886/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:01:20.453069Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c8befd3b-b8b3-44c7-94f0-dfd61ce870f4/export</guid>
      <pubDate>Mon, 28 Sep 2026 00:01:20 +0000</pubDate>
    </item>
    <item>
      <title>0e477d9b-b53e-4335-a2d3-678464e066d2</title>
      <link>https://vulnerability.circl.lu/sighting/0e477d9b-b53e-4335-a2d3-678464e066d2/export</link>
      <description>{"uuid": "0e477d9b-b53e-4335-a2d3-678464e066d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwjz2sebua2b", "content": "Seetong T8108 series faces CRITICAL CVE-2026-100886: remote unauthenticated access possible due to improper authentication (v4.6.1.4). No patch \u2014 restrict device access immediately. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #...", "creation_timestamp": "2026-09-28T00:00:38.878702Z"}</description>
      <content:encoded>{"uuid": "0e477d9b-b53e-4335-a2d3-678464e066d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwjz2sebua2b", "content": "Seetong T8108 series faces CRITICAL CVE-2026-100886: remote unauthenticated access possible due to improper authentication (v4.6.1.4). No patch \u2014 restrict device access immediately. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #...", "creation_timestamp": "2026-09-28T00:00:38.878702Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0e477d9b-b53e-4335-a2d3-678464e066d2/export</guid>
      <pubDate>Mon, 28 Sep 2026 00:00:38 +0000</pubDate>
    </item>
    <item>
      <title>d8793f45-a161-4541-963c-6776defb78fe</title>
      <link>https://vulnerability.circl.lu/sighting/d8793f45-a161-4541-963c-6776defb78fe/export</link>
      <description>{"uuid": "d8793f45-a161-4541-963c-6776defb78fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117345723098081984", "content": "Seetong T8108 series (v4.6.1.4-build202604241011) hit by CRITICAL CVE-2026-100886: improper authentication in Debug Service. Exploitable remotely \u2014 public exploit code available. No patch. Restrict network access ASAP. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #CVE2026100886 #IoTSecurity #Vuln", "creation_timestamp": "2026-09-28T00:00:37.025968Z"}</description>
      <content:encoded>{"uuid": "d8793f45-a161-4541-963c-6776defb78fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117345723098081984", "content": "Seetong T8108 series (v4.6.1.4-build202604241011) hit by CRITICAL CVE-2026-100886: improper authentication in Debug Service. Exploitable remotely \u2014 public exploit code available. No patch. Restrict network access ASAP. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #CVE2026100886 #IoTSecurity #Vuln", "creation_timestamp": "2026-09-28T00:00:37.025968Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d8793f45-a161-4541-963c-6776defb78fe/export</guid>
      <pubDate>Mon, 28 Sep 2026 00:00:37 +0000</pubDate>
    </item>
    <item>
      <title>261fe31c-07eb-41ae-ac71-8ba9c6a44a3c</title>
      <link>https://vulnerability.circl.lu/sighting/261fe31c-07eb-41ae-ac71-8ba9c6a44a3c/export</link>
      <description>{"uuid": "261fe31c-07eb-41ae-ac71-8ba9c6a44a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://gist.github.com/ichintu/0739db6c0846cb8d7c608bff5afb2d43", "content": "This September 27, 2026 threat intelligence briefing covers four newly disclosed vulnerabilities and a community security discussion:\n\n\u2022 **Seetong T8108 Series (CVE-2026-100886):** Critical (10.0) remote debug service improper authentication flaw. Exploit is public and the vendor remains unresponsive.\n\u2022 **Nezha \u22642.2.3 (CVE-2026-101090):** Critical (9.8) OAuth2 host header injection that reflects attacker-controlled URLs, enabling account takeover. No patch currently available.\n\u2022 **Obot \u2264v0.22.1 (4 CVEs):** Four high-to-critical (8.3\u20139.8) vulnerabilities, including unauthenticated admin access via Docker quickstart misconfiguration, OAuth/authorization bypasses, and SSRF via MCP registration. Remediation involves updating to v0.23.0 or explicitly enabling authentication.\n\u2022 **Community Discussion:** A Reddit thread explores budget-friendly (~$300) strategies for building a highly private, secure digital workspace from scratch.", "creation_timestamp": "2026-09-28T00:00:34.000000Z"}</description>
      <content:encoded>{"uuid": "261fe31c-07eb-41ae-ac71-8ba9c6a44a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://gist.github.com/ichintu/0739db6c0846cb8d7c608bff5afb2d43", "content": "This September 27, 2026 threat intelligence briefing covers four newly disclosed vulnerabilities and a community security discussion:\n\n\u2022 **Seetong T8108 Series (CVE-2026-100886):** Critical (10.0) remote debug service improper authentication flaw. Exploit is public and the vendor remains unresponsive.\n\u2022 **Nezha \u22642.2.3 (CVE-2026-101090):** Critical (9.8) OAuth2 host header injection that reflects attacker-controlled URLs, enabling account takeover. No patch currently available.\n\u2022 **Obot \u2264v0.22.1 (4 CVEs):** Four high-to-critical (8.3\u20139.8) vulnerabilities, including unauthenticated admin access via Docker quickstart misconfiguration, OAuth/authorization bypasses, and SSRF via MCP registration. Remediation involves updating to v0.23.0 or explicitly enabling authentication.\n\u2022 **Community Discussion:** A Reddit thread explores budget-friendly (~$300) strategies for building a highly private, secure digital workspace from scratch.", "creation_timestamp": "2026-09-28T00:00:34.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/261fe31c-07eb-41ae-ac71-8ba9c6a44a3c/export</guid>
      <pubDate>Mon, 28 Sep 2026 00:00:34 +0000</pubDate>
    </item>
  </channel>
</rss>
