https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 18 Sep 2026 08:06:19 +0000 https://vulnerability.circl.lu/sighting/f5ee2da9-5897-48c6-8c31-fb28bdad6cc1/export {"uuid": "f5ee2da9-5897-48c6-8c31-fb28bdad6cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://gist.github.com/ichintu/4bf7ae5351bf31e7fd8a71db957a56bc", "content": "This threat intelligence briefing highlights four key developments:\n\n\u2022 **Iranian Hacktivism:** The Iran-linked Handala Hack group is deploying the HEAVYGRAM Telegram backdoor and CRUDEEXCLUDE utility to execute remote commands, steal credentials, exfiltrate session data, and capture screenshots.\n\u2022 **AI Agent Vulnerabilities:** AI systems using the Model Context Protocol (MCP) are exposed to attacks via untrusted tool descriptions, enabling metadata poisoning and context manipulation. Experts recommend pinning descriptions, treating them as untrusted input, and applying cryptographic hashing.\n\u2022 **Critical CVEs:** Azure Billing (CVE-2026-62874, CVSS 10.0) contains a privilege escalation flaw due to insufficient data verification. WeGIA charity software (CVE-2026-54670, CVSS 9.1) suffers from unauthenticated auth bypass and local file inclusion, allowing data/financial manipulation; patched in v3.8.5.", "creation_timestamp": "2026-09-18T04:01:52.887636Z"} {"uuid": "f5ee2da9-5897-48c6-8c31-fb28bdad6cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://gist.github.com/ichintu/4bf7ae5351bf31e7fd8a71db957a56bc", "content": "This threat intelligence briefing highlights four key developments:\n\n\u2022 **Iranian Hacktivism:** The Iran-linked Handala Hack group is deploying the HEAVYGRAM Telegram backdoor and CRUDEEXCLUDE utility to execute remote commands, steal credentials, exfiltrate session data, and capture screenshots.\n\u2022 **AI Agent Vulnerabilities:** AI systems using the Model Context Protocol (MCP) are exposed to attacks via untrusted tool descriptions, enabling metadata poisoning and context manipulation. Experts recommend pinning descriptions, treating them as untrusted input, and applying cryptographic hashing.\n\u2022 **Critical CVEs:** Azure Billing (CVE-2026-62874, CVSS 10.0) contains a privilege escalation flaw due to insufficient data verification. WeGIA charity software (CVE-2026-54670, CVSS 9.1) suffers from unauthenticated auth bypass and local file inclusion, allowing data/financial manipulation; patched in v3.8.5.", "creation_timestamp": "2026-09-18T04:01:52.887636Z"} https://vulnerability.circl.lu/sighting/f5ee2da9-5897-48c6-8c31-fb28bdad6cc1/export Fri, 18 Sep 2026 04:01:52 +0000 https://vulnerability.circl.lu/sighting/8f673e70-14a7-451e-ab09-b5d599eea525/export {"uuid": "8f673e70-14a7-451e-ab09-b5d599eea525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr5unoyvy22", "content": "CVE-2026-62874 - azure billing\nThe Azure Billing service does not properly check that data comes from a trusted source. This weakness could let an outsider pretend to be a legitimate user and obtain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azurebilling #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:50:07.665892Z"} {"uuid": "8f673e70-14a7-451e-ab09-b5d599eea525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr5unoyvy22", "content": "CVE-2026-62874 - azure billing\nThe Azure Billing service does not properly check that data comes from a trusted source. This weakness could let an outsider pretend to be a legitimate user and obtain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azurebilling #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:50:07.665892Z"} https://vulnerability.circl.lu/sighting/8f673e70-14a7-451e-ab09-b5d599eea525/export Fri, 18 Sep 2026 02:50:07 +0000 https://vulnerability.circl.lu/sighting/4b0e693f-ae28-454c-bf5a-5bc6e4afdee2/export {"uuid": "4b0e693f-ae28-454c-bf5a-5bc6e4afdee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kbgovo2r", "content": "\ud83d\udea8 CVE-2026-62874 \u2014 CVSS 10 CRITICAL\n\nInsufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62874\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:31.841296Z"} {"uuid": "4b0e693f-ae28-454c-bf5a-5bc6e4afdee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kbgovo2r", "content": "\ud83d\udea8 CVE-2026-62874 \u2014 CVSS 10 CRITICAL\n\nInsufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62874\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:31.841296Z"} https://vulnerability.circl.lu/sighting/4b0e693f-ae28-454c-bf5a-5bc6e4afdee2/export Fri, 18 Sep 2026 02:08:31 +0000