https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 05 Sep 2026 04:54:52 +0000 https://vulnerability.circl.lu/sighting/48f2b733-cf15-42ab-b9c0-1cf8af4c80d2/export {"uuid": "48f2b733-cf15-42ab-b9c0-1cf8af4c80d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-04T00:00:55.673527Z"} {"uuid": "48f2b733-cf15-42ab-b9c0-1cf8af4c80d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-04T00:00:55.673527Z"} https://vulnerability.circl.lu/sighting/48f2b733-cf15-42ab-b9c0-1cf8af4c80d2/export Fri, 04 Sep 2026 00:00:55 +0000 https://vulnerability.circl.lu/sighting/e3a95433-6431-43ba-a2e4-80533e2d788a/export {"uuid": "e3a95433-6431-43ba-a2e4-80533e2d788a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-03T08:00:04.016401Z"} {"uuid": "e3a95433-6431-43ba-a2e4-80533e2d788a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-03T08:00:04.016401Z"} https://vulnerability.circl.lu/sighting/e3a95433-6431-43ba-a2e4-80533e2d788a/export Thu, 03 Sep 2026 08:00:04 +0000 https://vulnerability.circl.lu/sighting/21feee7f-baeb-4305-8bf7-c8b658c1e31d/export {"uuid": "21feee7f-baeb-4305-8bf7-c8b658c1e31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117190957574523212", "content": "Microsoft UFO Vulnerability Allows Remote Android Device Takeover\nMicrosoft patched a critical vulnerability in its UFO automation framework (CVE-2026-73296) that allows unauthenticated attackers to remotely control Android devices and steal sensitive screen data. The flaw affects versions prior to 3.0.8 when configured for remote access.\n**If you use Microsoft's UFO automation framework, update it to version 3.0.8 or later ASAP and turn on the required API key authentication. Older versions let anyone on the network fully control your connected Android devices. If you can't update immediately, change the setting back to `localhost` and block incoming traffic to ports 8020 and 8021 at your firewall.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/microsoft-ufo-vulnerability-allows-remote-android-device-takeover-i-v-r-8-e/gD2P6Ple2L", "creation_timestamp": "2026-08-31T16:43:54.352825Z"} {"uuid": "21feee7f-baeb-4305-8bf7-c8b658c1e31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117190957574523212", "content": "Microsoft UFO Vulnerability Allows Remote Android Device Takeover\nMicrosoft patched a critical vulnerability in its UFO automation framework (CVE-2026-73296) that allows unauthenticated attackers to remotely control Android devices and steal sensitive screen data. The flaw affects versions prior to 3.0.8 when configured for remote access.\n**If you use Microsoft's UFO automation framework, update it to version 3.0.8 or later ASAP and turn on the required API key authentication. Older versions let anyone on the network fully control your connected Android devices. If you can't update immediately, change the setting back to `localhost` and block incoming traffic to ports 8020 and 8021 at your firewall.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/microsoft-ufo-vulnerability-allows-remote-android-device-takeover-i-v-r-8-e/gD2P6Ple2L", "creation_timestamp": "2026-08-31T16:43:54.352825Z"} https://vulnerability.circl.lu/sighting/21feee7f-baeb-4305-8bf7-c8b658c1e31d/export Mon, 31 Aug 2026 16:43:54 +0000 https://vulnerability.circl.lu/sighting/1ae3b81b-f613-47af-97a3-ac940a7e00e9/export {"uuid": "1ae3b81b-f613-47af-97a3-ac940a7e00e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3muegt3vg6y25", "content": "Nieuwe kwetsbaarheid in Microsoft UFO opent de deur voor volledige controle over\n\nEen ernstige kwetsbaarheid, bekend als CVE-2026-73296, is ontdekt in Microsoft's open-source UFO automatiseringsframework, met een CVSS-score van 9.4. Deze kwetsbaarheid, geclassificeerd als CWE-306 en CWE-862,...", "creation_timestamp": "2026-08-31T08:00:31.304696Z"} {"uuid": "1ae3b81b-f613-47af-97a3-ac940a7e00e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3muegt3vg6y25", "content": "Nieuwe kwetsbaarheid in Microsoft UFO opent de deur voor volledige controle over\n\nEen ernstige kwetsbaarheid, bekend als CVE-2026-73296, is ontdekt in Microsoft's open-source UFO automatiseringsframework, met een CVSS-score van 9.4. Deze kwetsbaarheid, geclassificeerd als CWE-306 en CWE-862,...", "creation_timestamp": "2026-08-31T08:00:31.304696Z"} https://vulnerability.circl.lu/sighting/1ae3b81b-f613-47af-97a3-ac940a7e00e9/export Mon, 31 Aug 2026 08:00:31 +0000 https://vulnerability.circl.lu/sighting/d0f62d62-2c79-455d-9aa2-d5bb761b394f/export {"uuid": "d0f62d62-2c79-455d-9aa2-d5bb761b394f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvphqwo4x2u", "content": "CVE-2026-73296\nThe Microsoft UFO framework for automating devices had a security flaw that allowed an attacker to access sensitive information on an Android device connected to it without being authorized. This could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-12T18:00:05.908527Z"} {"uuid": "d0f62d62-2c79-455d-9aa2-d5bb761b394f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvphqwo4x2u", "content": "CVE-2026-73296\nThe Microsoft UFO framework for automating devices had a security flaw that allowed an attacker to access sensitive information on an Android device connected to it without being authorized. This could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-12T18:00:05.908527Z"} https://vulnerability.circl.lu/sighting/d0f62d62-2c79-455d-9aa2-d5bb761b394f/export Wed, 12 Aug 2026 18:00:05 +0000