https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 01:29:21 +0000 https://vulnerability.circl.lu/sighting/bc6c77ec-76d3-47f5-ab28-660d31a3680f/export {"uuid": "bc6c77ec-76d3-47f5-ab28-660d31a3680f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwfea2munn2e", "content": "\ud83d\udccc CVE-2026-76708 - A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded creden... https://www.cyberhub.blog/cves/CVE-2026-76708", "creation_timestamp": "2026-09-26T03:37:07.410524Z"} {"uuid": "bc6c77ec-76d3-47f5-ab28-660d31a3680f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwfea2munn2e", "content": "\ud83d\udccc CVE-2026-76708 - A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded creden... https://www.cyberhub.blog/cves/CVE-2026-76708", "creation_timestamp": "2026-09-26T03:37:07.410524Z"} https://vulnerability.circl.lu/sighting/bc6c77ec-76d3-47f5-ab28-660d31a3680f/export Sat, 26 Sep 2026 03:37:07 +0000 https://vulnerability.circl.lu/sighting/22989eb0-43e0-4e32-816d-d7f2b1248867/export {"uuid": "22989eb0-43e0-4e32-816d-d7f2b1248867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76709", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6suhh44n23", "content": "\ud83d\udd17 CVE : CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-76711, CVE-2026-76712, CVE-2026-76713, CVE-2026-76714, CVE-2026-76715, CVE-2026-76716, CVE-2026-76717", "creation_timestamp": "2026-09-23T13:10:25.900365Z"} {"uuid": "22989eb0-43e0-4e32-816d-d7f2b1248867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76709", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6suhh44n23", "content": "\ud83d\udd17 CVE : CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-76711, CVE-2026-76712, CVE-2026-76713, CVE-2026-76714, CVE-2026-76715, CVE-2026-76716, CVE-2026-76717", "creation_timestamp": "2026-09-23T13:10:25.900365Z"} https://vulnerability.circl.lu/sighting/22989eb0-43e0-4e32-816d-d7f2b1248867/export Wed, 23 Sep 2026 13:10:25 +0000 https://vulnerability.circl.lu/sighting/a2674509-1f43-45f3-8884-e4237cb562d4/export {"uuid": "a2674509-1f43-45f3-8884-e4237cb562d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6suhh44n23", "content": "\ud83d\udd17 CVE : CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-76711, CVE-2026-76712, CVE-2026-76713, CVE-2026-76714, CVE-2026-76715, CVE-2026-76716, CVE-2026-76717", "creation_timestamp": "2026-09-23T13:10:25.868074Z"} {"uuid": "a2674509-1f43-45f3-8884-e4237cb562d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6suhh44n23", "content": "\ud83d\udd17 CVE : CVE-2026-76708, CVE-2026-76709, CVE-2026-76710, CVE-2026-76711, CVE-2026-76712, CVE-2026-76713, CVE-2026-76714, CVE-2026-76715, CVE-2026-76716, CVE-2026-76717", "creation_timestamp": "2026-09-23T13:10:25.868074Z"} https://vulnerability.circl.lu/sighting/a2674509-1f43-45f3-8884-e4237cb562d4/export Wed, 23 Sep 2026 13:10:25 +0000 https://vulnerability.circl.lu/sighting/e07d5789-cfd4-4064-afa2-8b10e0852118/export {"uuid": "e07d5789-cfd4-4064-afa2-8b10e0852118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76709", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5alj4kkn2b", "content": "\ud83d\udea8 CVE-2026-76709 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Suc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76709\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:38.725432Z"} {"uuid": "e07d5789-cfd4-4064-afa2-8b10e0852118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76709", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5alj4kkn2b", "content": "\ud83d\udea8 CVE-2026-76709 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Suc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76709\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:38.725432Z"} https://vulnerability.circl.lu/sighting/e07d5789-cfd4-4064-afa2-8b10e0852118/export Tue, 22 Sep 2026 22:10:38 +0000 https://vulnerability.circl.lu/sighting/371ec4d0-0621-4ca1-a0dc-8d42d7846abe/export {"uuid": "371ec4d0-0621-4ca1-a0dc-8d42d7846abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5alauy6j2y", "content": "\ud83d\udea8 CVE-2026-76708 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying oper...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76708\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:29.869802Z"} {"uuid": "371ec4d0-0621-4ca1-a0dc-8d42d7846abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5alauy6j2y", "content": "\ud83d\udea8 CVE-2026-76708 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying oper...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76708\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:29.869802Z"} https://vulnerability.circl.lu/sighting/371ec4d0-0621-4ca1-a0dc-8d42d7846abe/export Tue, 22 Sep 2026 22:10:29 +0000 https://vulnerability.circl.lu/sighting/153feede-cb46-4221-b602-62197fa654a5/export {"uuid": "153feede-cb46-4221-b602-62197fa654a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76709", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw57grgb362r", "content": "CVE-2026-76709\nThe internal admin area of Analytics and Location Engine can be accessed without a login. An attacker could use this to write files to the server with higher privileges, which could lead to full system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T21:50:06.066277Z"} {"uuid": "153feede-cb46-4221-b602-62197fa654a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76709", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw57grgb362r", "content": "CVE-2026-76709\nThe internal admin area of Analytics and Location Engine can be accessed without a login. An attacker could use this to write files to the server with higher privileges, which could lead to full system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T21:50:06.066277Z"} https://vulnerability.circl.lu/sighting/153feede-cb46-4221-b602-62197fa654a5/export Tue, 22 Sep 2026 21:50:06 +0000 https://vulnerability.circl.lu/sighting/0cffe36a-2ade-47ef-bb38-effc54ae1d16/export {"uuid": "0cffe36a-2ade-47ef-bb38-effc54ae1d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw56uvqjng2f", "content": "CVE-2026-76708\nThe Analytics and Location Engine uses built-in usernames and passwords that are the same for every installation. Because these credentials are known, anyone on the internet can try to log in and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T21:40:06.343358Z"} {"uuid": "0cffe36a-2ade-47ef-bb38-effc54ae1d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw56uvqjng2f", "content": "CVE-2026-76708\nThe Analytics and Location Engine uses built-in usernames and passwords that are the same for every installation. Because these credentials are known, anyone on the internet can try to log in and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-22T21:40:06.343358Z"} https://vulnerability.circl.lu/sighting/0cffe36a-2ade-47ef-bb38-effc54ae1d16/export Tue, 22 Sep 2026 21:40:06 +0000 https://vulnerability.circl.lu/sighting/515efeab-0376-4b4c-86ee-50ad7418ce37/export {"uuid": "515efeab-0376-4b4c-86ee-50ad7418ce37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://gist.github.com/ichintu/36aaaecfd03b65cd834e3e2ec1b2ba36", "content": "This daily cyber threat intelligence digest highlights critical vulnerabilities, active exploits, and emerging security guidance. Key advisories include default credential exposure in HPE ALE (CVE-2026-76708, CVSS 9.8), an actively exploited heap overflow in F5 BIG-IP APM (CVE-2026-94127), and a DoS flaw in Vector/Logstash (CVE-2026-77620). Additional affected platforms include Erlang OTP and MikroTik RouterOS, with patches and hotfixes available. On the threat actor front, a malicious npm package disguised as a Twilio tool is harvesting credentials, while a new zero-day PoC (BigDiskBuster) disrupts Microsoft Defender updates by exhausting disk space. The digest also features technical analysis of MikroTik disclosures, an open-source architecture for offline clinic ID verification, and a practical guide on avoiding false-positive RCE reports by validating delays with control requests and computed outputs rather than relying on time-based checks. Organizations are urged to apply vendor updates, monitor for credential exfiltration, and strengthen vulnerability validation practices.", "creation_timestamp": "2026-09-22T20:01:40.668723Z"} {"uuid": "515efeab-0376-4b4c-86ee-50ad7418ce37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76708", "type": "seen", "source": "https://gist.github.com/ichintu/36aaaecfd03b65cd834e3e2ec1b2ba36", "content": "This daily cyber threat intelligence digest highlights critical vulnerabilities, active exploits, and emerging security guidance. Key advisories include default credential exposure in HPE ALE (CVE-2026-76708, CVSS 9.8), an actively exploited heap overflow in F5 BIG-IP APM (CVE-2026-94127), and a DoS flaw in Vector/Logstash (CVE-2026-77620). Additional affected platforms include Erlang OTP and MikroTik RouterOS, with patches and hotfixes available. On the threat actor front, a malicious npm package disguised as a Twilio tool is harvesting credentials, while a new zero-day PoC (BigDiskBuster) disrupts Microsoft Defender updates by exhausting disk space. The digest also features technical analysis of MikroTik disclosures, an open-source architecture for offline clinic ID verification, and a practical guide on avoiding false-positive RCE reports by validating delays with control requests and computed outputs rather than relying on time-based checks. Organizations are urged to apply vendor updates, monitor for credential exfiltration, and strengthen vulnerability validation practices.", "creation_timestamp": "2026-09-22T20:01:40.668723Z"} https://vulnerability.circl.lu/sighting/515efeab-0376-4b4c-86ee-50ad7418ce37/export Tue, 22 Sep 2026 20:01:40 +0000 https://vulnerability.circl.lu/sighting/5da49dd6-ea93-4759-8ad9-c08bbb7f8c6f/export {"uuid": "5da49dd6-ea93-4759-8ad9-c08bbb7f8c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7670", "type": "seen", "source": "https://t.me/shimiscyberworld/1141", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7670 \u2014 CVSS 7.3\nJinher OA 1.0 SQL Injection (CVE-2026-7670) Exposes Data Remotely\n\nCVE-2026-7670 \u2014 A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/UserSel.aspx. This manipulation of the argument DeptIDList causes sql\u2026\n\n\ud83d\udfe1 Medium\n\n#cve #high_severity #sql_injection\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7670 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:18.576281Z"} {"uuid": "5da49dd6-ea93-4759-8ad9-c08bbb7f8c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7670", "type": "seen", "source": "https://t.me/shimiscyberworld/1141", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7670 \u2014 CVSS 7.3\nJinher OA 1.0 SQL Injection (CVE-2026-7670) Exposes Data Remotely\n\nCVE-2026-7670 \u2014 A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/UserSel.aspx. This manipulation of the argument DeptIDList causes sql\u2026\n\n\ud83d\udfe1 Medium\n\n#cve #high_severity #sql_injection\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7670 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:18.576281Z"} https://vulnerability.circl.lu/sighting/5da49dd6-ea93-4759-8ad9-c08bbb7f8c6f/export Sat, 12 Sep 2026 10:00:18 +0000