<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 20:59:55 +0000</lastBuildDate>
    <item>
      <title>2043096d-df3c-4a86-ac54-965ff714c937</title>
      <link>https://vulnerability.circl.lu/sighting/2043096d-df3c-4a86-ac54-965ff714c937/export</link>
      <description>{"uuid": "2043096d-df3c-4a86-ac54-965ff714c937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.295328Z"}</description>
      <content:encoded>{"uuid": "2043096d-df3c-4a86-ac54-965ff714c937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.295328Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2043096d-df3c-4a86-ac54-965ff714c937/export</guid>
      <pubDate>Fri, 09 Oct 2026 14:47:00 +0000</pubDate>
    </item>
    <item>
      <title>5cb73e17-4d05-4ec8-a772-7908ab687ea4</title>
      <link>https://vulnerability.circl.lu/sighting/5cb73e17-4d05-4ec8-a772-7908ab687ea4/export</link>
      <description>{"uuid": "5cb73e17-4d05-4ec8-a772-7908ab687ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77900", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxg5bfurif2y", "content": "CRITICAL: CVE-2026-77900 in Azure App Service for Linux lets attackers run code remotely with no auth (CVSS 9.8). Official fix available \u2014 apply immediately. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c...", "creation_timestamp": "2026-10-09T04:30:29.145748Z"}</description>
      <content:encoded>{"uuid": "5cb73e17-4d05-4ec8-a772-7908ab687ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77900", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxg5bfurif2y", "content": "CRITICAL: CVE-2026-77900 in Azure App Service for Linux lets attackers run code remotely with no auth (CVSS 9.8). Official fix available \u2014 apply immediately. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c...", "creation_timestamp": "2026-10-09T04:30:29.145748Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5cb73e17-4d05-4ec8-a772-7908ab687ea4/export</guid>
      <pubDate>Fri, 09 Oct 2026 04:30:29 +0000</pubDate>
    </item>
    <item>
      <title>dfdb7d11-1b95-4d4f-a132-ce758135505f</title>
      <link>https://vulnerability.circl.lu/sighting/dfdb7d11-1b95-4d4f-a132-ce758135505f/export</link>
      <description>{"uuid": "dfdb7d11-1b95-4d4f-a132-ce758135505f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77900", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117409069502341938", "content": "Microsoft Azure App Service for Linux hit by CVE-2026-77900 (CRITICAL, CVSS 9.8): missing authentication enables unauthenticated remote code execution. Patch released \u2014 update now. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c7a8fa62ffe41 #OffSeq #Azure #CVE202677900 #Infosec #CloudSecurity", "creation_timestamp": "2026-10-09T04:30:26.414795Z"}</description>
      <content:encoded>{"uuid": "dfdb7d11-1b95-4d4f-a132-ce758135505f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77900", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117409069502341938", "content": "Microsoft Azure App Service for Linux hit by CVE-2026-77900 (CRITICAL, CVSS 9.8): missing authentication enables unauthenticated remote code execution. Patch released \u2014 update now. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c7a8fa62ffe41 #OffSeq #Azure #CVE202677900 #Infosec #CloudSecurity", "creation_timestamp": "2026-10-09T04:30:26.414795Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dfdb7d11-1b95-4d4f-a132-ce758135505f/export</guid>
      <pubDate>Fri, 09 Oct 2026 04:30:26 +0000</pubDate>
    </item>
    <item>
      <title>33e35e91-340c-4636-a10a-e4e5a1b03a0b</title>
      <link>https://vulnerability.circl.lu/sighting/33e35e91-340c-4636-a10a-e4e5a1b03a0b/export</link>
      <description>{"uuid": "33e35e91-340c-4636-a10a-e4e5a1b03a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfooty26k2o", "content": "\ud83d\udea8 CVE-2026-77900 \u2014 CVSS 9.8 CRITICAL\n\nMissing authentication for critical function in Azure App Service allows an unauthorized attacker to execut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:32.766531Z"}</description>
      <content:encoded>{"uuid": "33e35e91-340c-4636-a10a-e4e5a1b03a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfooty26k2o", "content": "\ud83d\udea8 CVE-2026-77900 \u2014 CVSS 9.8 CRITICAL\n\nMissing authentication for critical function in Azure App Service allows an unauthorized attacker to execut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:32.766531Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/33e35e91-340c-4636-a10a-e4e5a1b03a0b/export</guid>
      <pubDate>Fri, 09 Oct 2026 00:09:32 +0000</pubDate>
    </item>
    <item>
      <title>614d3525-007d-4764-a057-7c7efd044891</title>
      <link>https://vulnerability.circl.lu/sighting/614d3525-007d-4764-a057-7c7efd044891/export</link>
      <description>{"uuid": "614d3525-007d-4764-a057-7c7efd044891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfleirgee2o", "content": "CVE-2026-77900 - azure app service for linux\nA function in Azure App Service for Linux does not require authentication, so an attacker on the network could run their own code on the service. This could let them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:10:04.299797Z"}</description>
      <content:encoded>{"uuid": "614d3525-007d-4764-a057-7c7efd044891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfleirgee2o", "content": "CVE-2026-77900 - azure app service for linux\nA function in Azure App Service for Linux does not require authentication, so an attacker on the network could run their own code on the service. This could let them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:10:04.299797Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/614d3525-007d-4764-a057-7c7efd044891/export</guid>
      <pubDate>Thu, 08 Oct 2026 23:10:04 +0000</pubDate>
    </item>
  </channel>
</rss>
