https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 10 Sep 2026 20:42:52 +0000 https://vulnerability.circl.lu/sighting/9959841d-b46a-47dc-b43e-e28363fd64cb/export {"uuid": "9959841d-b46a-47dc-b43e-e28363fd64cb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c0c15ad-9774-4257-a684-261787a40b66", "content": "", "creation_timestamp": "2026-09-10T08:00:31.876974Z"} {"uuid": "9959841d-b46a-47dc-b43e-e28363fd64cb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c0c15ad-9774-4257-a684-261787a40b66", "content": "", "creation_timestamp": "2026-09-10T08:00:31.876974Z"} https://vulnerability.circl.lu/sighting/9959841d-b46a-47dc-b43e-e28363fd64cb/export Thu, 10 Sep 2026 08:00:31 +0000 https://vulnerability.circl.lu/sighting/9c42f8ce-45cb-4367-a076-ede1a4f5f379/export {"uuid": "9c42f8ce-45cb-4367-a076-ede1a4f5f379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117243001688271781", "content": "ConnectWise ScreenConnect #zeroday CVE-2026-84869 \nHuntress article: https://www.huntress.com/blog/rogue-screenconnect-installations\nCanadian Centre for Cyber Security: https://www.cyber.gc.ca/en/alerts-advisories/connectwise-security-advisory-av26-903\n\nOpen-source reporting indicates that CVE-2026-84869 is being exploited in the wild.\nConnectWise is silent on exploitation status: https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin\n#connectwise #screenconnect #cve", "creation_timestamp": "2026-09-09T20:37:31.973107Z"} {"uuid": "9c42f8ce-45cb-4367-a076-ede1a4f5f379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117243001688271781", "content": "ConnectWise ScreenConnect #zeroday CVE-2026-84869 \nHuntress article: https://www.huntress.com/blog/rogue-screenconnect-installations\nCanadian Centre for Cyber Security: https://www.cyber.gc.ca/en/alerts-advisories/connectwise-security-advisory-av26-903\n\nOpen-source reporting indicates that CVE-2026-84869 is being exploited in the wild.\nConnectWise is silent on exploitation status: https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin\n#connectwise #screenconnect #cve", "creation_timestamp": "2026-09-09T20:37:31.973107Z"} https://vulnerability.circl.lu/sighting/9c42f8ce-45cb-4367-a076-ede1a4f5f379/export Wed, 09 Sep 2026 20:37:31 +0000 https://vulnerability.circl.lu/sighting/b87fce68-3eba-445d-8d80-db9679507fba/export {"uuid": "b87fce68-3eba-445d-8d80-db9679507fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/connectwise-security-advisory-av26-903", "content": "", "creation_timestamp": "2026-09-09T20:15:09.303846Z"} {"uuid": "b87fce68-3eba-445d-8d80-db9679507fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/connectwise-security-advisory-av26-903", "content": "", "creation_timestamp": "2026-09-09T20:15:09.303846Z"} https://vulnerability.circl.lu/sighting/b87fce68-3eba-445d-8d80-db9679507fba/export Wed, 09 Sep 2026 20:15:09 +0000 https://vulnerability.circl.lu/sighting/d75f527c-d53d-417a-8c4a-f14a4a53bd08/export {"uuid": "d75f527c-d53d-417a-8c4a-f14a4a53bd08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://gist.github.com/ichintu/e8546fe463f1a1319bf313dd9ed691b9", "content": "**September 9, 2026 Cyber Threat Intelligence Summary**\n\nThis briefing highlights multiple critical vulnerabilities with active exploitation, state-sponsored espionage activity, and a major data breach:\n\n* **Actively Exploited Vulnerabilities:** Google Chrome (CVE-2026-87491), ConnectWise ScreenConnect (CVE-2026-84869), and N-able N-central (CVE-2026-86218/86207) are confirmed active in the wild. Chrome and N-able are now listed on CISA\u2019s KEV database. Immediate updates are strongly advised.\n* **Critical & High-Risk Flaws:** Check Point gateways face authentication bypass and RCE; SkillTree has a critical (9.6) stored XSS enabling admin takeover; Fast-DDS suffers a critical out-of-bounds read risking heap memory disclosure and ASLR bypass; Ansible\u2019s memcached plugin allows RCE via insecure deserialization.\n* **Espionage Activity:** The undocumented BlueMoon exploit kit, chaining Chrome and Windows vulnerabilities, is actively deployed by multiple espionage groups, with initial attribution to China-aligned APT31.\n* **Data Breach:** The FBI is investigating the dark web sale of 153 million driver\u2019s license records.\n* **Other Advisories:** MISP requires an immediate patch to fix a sharing group authorization flaw.\n\n**Recommendation:** Prioritize patching Chrome, ConnectWise, N-able, and Check Point systems, remediate exposed critical flaws, and enhance detection for BlueMoon/APT31 activity.", "creation_timestamp": "2026-09-09T20:03:03.858089Z"} {"uuid": "d75f527c-d53d-417a-8c4a-f14a4a53bd08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://gist.github.com/ichintu/e8546fe463f1a1319bf313dd9ed691b9", "content": "**September 9, 2026 Cyber Threat Intelligence Summary**\n\nThis briefing highlights multiple critical vulnerabilities with active exploitation, state-sponsored espionage activity, and a major data breach:\n\n* **Actively Exploited Vulnerabilities:** Google Chrome (CVE-2026-87491), ConnectWise ScreenConnect (CVE-2026-84869), and N-able N-central (CVE-2026-86218/86207) are confirmed active in the wild. Chrome and N-able are now listed on CISA\u2019s KEV database. Immediate updates are strongly advised.\n* **Critical & High-Risk Flaws:** Check Point gateways face authentication bypass and RCE; SkillTree has a critical (9.6) stored XSS enabling admin takeover; Fast-DDS suffers a critical out-of-bounds read risking heap memory disclosure and ASLR bypass; Ansible\u2019s memcached plugin allows RCE via insecure deserialization.\n* **Espionage Activity:** The undocumented BlueMoon exploit kit, chaining Chrome and Windows vulnerabilities, is actively deployed by multiple espionage groups, with initial attribution to China-aligned APT31.\n* **Data Breach:** The FBI is investigating the dark web sale of 153 million driver\u2019s license records.\n* **Other Advisories:** MISP requires an immediate patch to fix a sharing group authorization flaw.\n\n**Recommendation:** Prioritize patching Chrome, ConnectWise, N-able, and Check Point systems, remediate exposed critical flaws, and enhance detection for BlueMoon/APT31 activity.", "creation_timestamp": "2026-09-09T20:03:03.858089Z"} https://vulnerability.circl.lu/sighting/d75f527c-d53d-417a-8c4a-f14a4a53bd08/export Wed, 09 Sep 2026 20:03:03 +0000 https://vulnerability.circl.lu/sighting/ad077c48-2574-400b-a062-f5340db080fb/export {"uuid": "ad077c48-2574-400b-a062-f5340db080fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hbzdtkk2r", "content": "CVE-2026-84869 - screenconnect\nThe ScreenConnect remote\u2011support program on a user's computer may automatically execute files that are sent during a remote session, even if the user didn't approve\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#screenconnect #connectwise #CVE #infosec", "creation_timestamp": "2026-09-09T11:40:05.293965Z"} {"uuid": "ad077c48-2574-400b-a062-f5340db080fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hbzdtkk2r", "content": "CVE-2026-84869 - screenconnect\nThe ScreenConnect remote\u2011support program on a user's computer may automatically execute files that are sent during a remote session, even if the user didn't approve\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#screenconnect #connectwise #CVE #infosec", "creation_timestamp": "2026-09-09T11:40:05.293965Z"} https://vulnerability.circl.lu/sighting/ad077c48-2574-400b-a062-f5340db080fb/export Wed, 09 Sep 2026 11:40:05 +0000 https://vulnerability.circl.lu/sighting/650a781f-f76b-4dbd-9e0b-e9d53ac83695/export {"uuid": "650a781f-f76b-4dbd-9e0b-e9d53ac83695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv224t5pgy2r", "content": "\ud83d\udea8 CVE-2026-84869 \u2014 CVSS 9.9 CRITICAL\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an active re...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84869\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:52.476375Z"} {"uuid": "650a781f-f76b-4dbd-9e0b-e9d53ac83695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv224t5pgy2r", "content": "\ud83d\udea8 CVE-2026-84869 \u2014 CVSS 9.9 CRITICAL\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an active re...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84869\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:52.476375Z"} https://vulnerability.circl.lu/sighting/650a781f-f76b-4dbd-9e0b-e9d53ac83695/export Tue, 08 Sep 2026 22:11:52 +0000 https://vulnerability.circl.lu/sighting/79d830ca-2793-4de5-9e2e-5c53ee676492/export {"uuid": "79d830ca-2793-4de5-9e2e-5c53ee676492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117237579021510633", "content": "WTF\nhttps://github.com/ConnectWise-Advisories/Disclosures/blob/main/CVE-2026-84869/README.md\n\nEarlier versions of ScreenConnect Client Support and Access sessions contained a client-side file-transfer handling condition in which file-transfer actions could be processed through an active remote session without proper authorization or Host confirmation. Under certain circumstances, this could allow files to be transferred to and executed on the Host client system, including through elevated execution actions. ScreenConnect servers are not impacted. Disabling file-transfer permissions for affected sessions may reduce exposure until the update is applied.", "creation_timestamp": "2026-09-08T21:38:09.459599Z"} {"uuid": "79d830ca-2793-4de5-9e2e-5c53ee676492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117237579021510633", "content": "WTF\nhttps://github.com/ConnectWise-Advisories/Disclosures/blob/main/CVE-2026-84869/README.md\n\nEarlier versions of ScreenConnect Client Support and Access sessions contained a client-side file-transfer handling condition in which file-transfer actions could be processed through an active remote session without proper authorization or Host confirmation. Under certain circumstances, this could allow files to be transferred to and executed on the Host client system, including through elevated execution actions. ScreenConnect servers are not impacted. Disabling file-transfer permissions for affected sessions may reduce exposure until the update is applied.", "creation_timestamp": "2026-09-08T21:38:09.459599Z"} https://vulnerability.circl.lu/sighting/79d830ca-2793-4de5-9e2e-5c53ee676492/export Tue, 08 Sep 2026 21:38:09 +0000 https://vulnerability.circl.lu/sighting/704b5398-de11-4b7e-b553-b53263b303e9/export {"uuid": "704b5398-de11-4b7e-b553-b53263b303e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ekpovibyjv2y5", "content": "CVE-2026-84869 - ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions\nCVE ID : CVE-2026-84869\n \n Published : Sept. 8, 2026, 8:18 p.m. | 39\u00a0minutes ago\n \n Description : A condition in the ScreenConnect client may allow files to be transferred and execute...", "creation_timestamp": "2026-09-08T21:16:47.142470Z"} {"uuid": "704b5398-de11-4b7e-b553-b53263b303e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ekpovibyjv2y5", "content": "CVE-2026-84869 - ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions\nCVE ID : CVE-2026-84869\n \n Published : Sept. 8, 2026, 8:18 p.m. | 39\u00a0minutes ago\n \n Description : A condition in the ScreenConnect client may allow files to be transferred and execute...", "creation_timestamp": "2026-09-08T21:16:47.142470Z"} https://vulnerability.circl.lu/sighting/704b5398-de11-4b7e-b553-b53263b303e9/export Tue, 08 Sep 2026 21:16:47 +0000 https://vulnerability.circl.lu/sighting/6fe39d1f-e0ff-447b-8ec7-96c01caec426/export {"uuid": "6fe39d1f-e0ff-447b-8ec7-96c01caec426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muzw57uceu2k", "content": "\ud83d\udd34 CVE-2026-84869 - Critical (9.9)\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84869/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T21:00:32.026388Z"} {"uuid": "6fe39d1f-e0ff-447b-8ec7-96c01caec426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84869", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muzw57uceu2k", "content": "\ud83d\udd34 CVE-2026-84869 - Critical (9.9)\n\nA condition in the ScreenConnect client may allow files to be transferred and executed through an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84869/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T21:00:32.026388Z"} https://vulnerability.circl.lu/sighting/6fe39d1f-e0ff-447b-8ec7-96c01caec426/export Tue, 08 Sep 2026 21:00:32 +0000