https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 02 Sep 2026 21:34:05 +0000 https://vulnerability.circl.lu/sighting/480b3d0d-e73e-40c7-8fa5-7b245be1cf58/export {"uuid": "480b3d0d-e73e-40c7-8fa5-7b245be1cf58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-23T00:00:47.755803Z"} {"uuid": "480b3d0d-e73e-40c7-8fa5-7b245be1cf58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-23T00:00:47.755803Z"} https://vulnerability.circl.lu/sighting/480b3d0d-e73e-40c7-8fa5-7b245be1cf58/export Sun, 23 Aug 2026 00:00:47 +0000 https://vulnerability.circl.lu/sighting/f314625c-b338-4a4a-809f-b98ab23f87e5/export {"uuid": "f314625c-b338-4a4a-809f-b98ab23f87e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-22T00:00:10.026759Z"} {"uuid": "f314625c-b338-4a4a-809f-b98ab23f87e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-22T00:00:10.026759Z"} https://vulnerability.circl.lu/sighting/f314625c-b338-4a4a-809f-b98ab23f87e5/export Sat, 22 Aug 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/1015f52b-56cd-4fa6-aa7f-67af18a53e83/export {"uuid": "1015f52b-56cd-4fa6-aa7f-67af18a53e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-21T23:00:06.284451Z"} {"uuid": "1015f52b-56cd-4fa6-aa7f-67af18a53e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-21T23:00:06.284451Z"} https://vulnerability.circl.lu/sighting/1015f52b-56cd-4fa6-aa7f-67af18a53e83/export Fri, 21 Aug 2026 23:00:06 +0000 https://vulnerability.circl.lu/sighting/9e384b5a-5046-4b4c-adb1-22b823d0b49d/export {"uuid": "9e384b5a-5046-4b4c-adb1-22b823d0b49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2014", "content": "", "creation_timestamp": "2026-08-13T10:21:33.773610Z"} {"uuid": "9e384b5a-5046-4b4c-adb1-22b823d0b49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2014", "content": "", "creation_timestamp": "2026-08-13T10:21:33.773610Z"} https://vulnerability.circl.lu/sighting/9e384b5a-5046-4b4c-adb1-22b823d0b49d/export Thu, 13 Aug 2026 10:21:33 +0000 https://vulnerability.circl.lu/sighting/5d26d970-19dc-4970-adc2-8b2bb6059da9/export {"uuid": "5d26d970-19dc-4970-adc2-8b2bb6059da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1007", "content": "", "creation_timestamp": "2026-08-13T09:48:11.920187Z"} {"uuid": "5d26d970-19dc-4970-adc2-8b2bb6059da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1007", "content": "", "creation_timestamp": "2026-08-13T09:48:11.920187Z"} https://vulnerability.circl.lu/sighting/5d26d970-19dc-4970-adc2-8b2bb6059da9/export Thu, 13 Aug 2026 09:48:11 +0000 https://vulnerability.circl.lu/sighting/b9b02627-e979-4f41-987d-bfea519502fe/export {"uuid": "b9b02627-e979-4f41-987d-bfea519502fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4rb7ba72o", "content": "\ud83d\udd17 CVE : CVE-2026-18125, CVE-2026-18127, CVE-2026-18129", "creation_timestamp": "2026-08-12T12:25:23.859214Z"} {"uuid": "b9b02627-e979-4f41-987d-bfea519502fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4rb7ba72o", "content": "\ud83d\udd17 CVE : CVE-2026-18125, CVE-2026-18127, CVE-2026-18129", "creation_timestamp": "2026-08-12T12:25:23.859214Z"} https://vulnerability.circl.lu/sighting/b9b02627-e979-4f41-987d-bfea519502fe/export Wed, 12 Aug 2026 12:25:23 +0000 https://vulnerability.circl.lu/sighting/75d6c265-1d31-4cdb-bcda-275a0a0ef8f9/export {"uuid": "75d6c265-1d31-4cdb-bcda-275a0a0ef8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msujt4lqup2r", "content": "CVE-2026-18125 is trending. Hype score 4, currently #7 on cvemon.\n\nAn out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-18125", "creation_timestamp": "2026-08-12T06:46:25.131584Z"} {"uuid": "75d6c265-1d31-4cdb-bcda-275a0a0ef8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msujt4lqup2r", "content": "CVE-2026-18125 is trending. Hype score 4, currently #7 on cvemon.\n\nAn out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-18125", "creation_timestamp": "2026-08-12T06:46:25.131584Z"} https://vulnerability.circl.lu/sighting/75d6c265-1d31-4cdb-bcda-275a0a0ef8f9/export Wed, 12 Aug 2026 06:46:25 +0000