<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 07 Sep 2026 15:16:44 +0000</lastBuildDate>
    <item>
      <title>444f410c-2c78-45f9-9cda-ec10320e59fe</title>
      <link>https://vulnerability.circl.lu/sighting/444f410c-2c78-45f9-9cda-ec10320e59fe/export</link>
      <description>{"uuid": "444f410c-2c78-45f9-9cda-ec10320e59fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.774404Z"}</description>
      <content:encoded>{"uuid": "444f410c-2c78-45f9-9cda-ec10320e59fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.774404Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/444f410c-2c78-45f9-9cda-ec10320e59fe/export</guid>
      <pubDate>Mon, 07 Sep 2026 13:38:41 +0000</pubDate>
    </item>
    <item>
      <title>9e1801e4-5a2b-4a86-9f2c-616e698b212d</title>
      <link>https://vulnerability.circl.lu/sighting/9e1801e4-5a2b-4a86-9f2c-616e698b212d/export</link>
      <description>{"uuid": "9e1801e4-5a2b-4a86-9f2c-616e698b212d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muvpl7o4yt2v", "content": "CVE-2026-86060 is trending. Hype score 5, currently #8 on cvemon.\n\nRouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-86060", "creation_timestamp": "2026-09-07T04:52:25.646317Z"}</description>
      <content:encoded>{"uuid": "9e1801e4-5a2b-4a86-9f2c-616e698b212d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muvpl7o4yt2v", "content": "CVE-2026-86060 is trending. Hype score 5, currently #8 on cvemon.\n\nRouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-86060", "creation_timestamp": "2026-09-07T04:52:25.646317Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9e1801e4-5a2b-4a86-9f2c-616e698b212d/export</guid>
      <pubDate>Mon, 07 Sep 2026 04:52:25 +0000</pubDate>
    </item>
    <item>
      <title>8dfdf6d2-fe85-434d-baad-07041b3e93a1</title>
      <link>https://vulnerability.circl.lu/sighting/8dfdf6d2-fe85-434d-baad-07041b3e93a1/export</link>
      <description>{"uuid": "8dfdf6d2-fe85-434d-baad-07041b3e93a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-07T01:00:33.059595Z"}</description>
      <content:encoded>{"uuid": "8dfdf6d2-fe85-434d-baad-07041b3e93a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-07T01:00:33.059595Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8dfdf6d2-fe85-434d-baad-07041b3e93a1/export</guid>
      <pubDate>Mon, 07 Sep 2026 01:00:33 +0000</pubDate>
    </item>
    <item>
      <title>c60291d1-b5d8-4f71-a727-f65e15cc0f90</title>
      <link>https://vulnerability.circl.lu/sighting/c60291d1-b5d8-4f71-a727-f65e15cc0f90/export</link>
      <description>{"uuid": "c60291d1-b5d8-4f71-a727-f65e15cc0f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "content": "", "creation_timestamp": "2026-09-07T01:00:18.086756Z"}</description>
      <content:encoded>{"uuid": "c60291d1-b5d8-4f71-a727-f65e15cc0f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "content": "", "creation_timestamp": "2026-09-07T01:00:18.086756Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c60291d1-b5d8-4f71-a727-f65e15cc0f90/export</guid>
      <pubDate>Mon, 07 Sep 2026 01:00:18 +0000</pubDate>
    </item>
    <item>
      <title>730badbb-ac6c-4742-a1ed-3996c6fade8d</title>
      <link>https://vulnerability.circl.lu/sighting/730badbb-ac6c-4742-a1ed-3996c6fade8d/export</link>
      <description>{"uuid": "730badbb-ac6c-4742-a1ed-3996c6fade8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbioj4q62r", "content": "MikroTik Routers Bleed Out While Bureaucrats File the Paperwork\nPANIC 84% | Lag 0.0h | GrayZone says attackers are exploiting CVE-2026-67276 and CVE-2026-86060 against Internet-exposed Ro\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-07T00:40:28.188370Z"}</description>
      <content:encoded>{"uuid": "730badbb-ac6c-4742-a1ed-3996c6fade8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbioj4q62r", "content": "MikroTik Routers Bleed Out While Bureaucrats File the Paperwork\nPANIC 84% | Lag 0.0h | GrayZone says attackers are exploiting CVE-2026-67276 and CVE-2026-86060 against Internet-exposed Ro\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-07T00:40:28.188370Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/730badbb-ac6c-4742-a1ed-3996c6fade8d/export</guid>
      <pubDate>Mon, 07 Sep 2026 00:40:28 +0000</pubDate>
    </item>
    <item>
      <title>29a8ee42-2144-4321-8d70-d977831468aa</title>
      <link>https://vulnerability.circl.lu/sighting/29a8ee42-2144-4321-8d70-d977831468aa/export</link>
      <description>{"uuid": "29a8ee42-2144-4321-8d70-d977831468aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv6xcpdk226", "content": "\ud83d\udd34 MikroTrick \u2014 MikroTik routers under active attack\n\nAttackers are exploiting CVE-2026-67276 + CVE-2026-86060 against Internet-exposed RouterOS devices. The chain can bypass normal\n\nstemshop.top/blog/mikroti...\n\n#CVE #CVE202667276 #CVE202686060 #MikroTik #RouterOS #MikroTrick #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T23:55:01.605619Z"}</description>
      <content:encoded>{"uuid": "29a8ee42-2144-4321-8d70-d977831468aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv6xcpdk226", "content": "\ud83d\udd34 MikroTrick \u2014 MikroTik routers under active attack\n\nAttackers are exploiting CVE-2026-67276 + CVE-2026-86060 against Internet-exposed RouterOS devices. The chain can bypass normal\n\nstemshop.top/blog/mikroti...\n\n#CVE #CVE202667276 #CVE202686060 #MikroTik #RouterOS #MikroTrick #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T23:55:01.605619Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/29a8ee42-2144-4321-8d70-d977831468aa/export</guid>
      <pubDate>Sun, 06 Sep 2026 23:55:01 +0000</pubDate>
    </item>
    <item>
      <title>57af3b44-525c-4d9e-81fc-12f3d45244cf</title>
      <link>https://vulnerability.circl.lu/sighting/57af3b44-525c-4d9e-81fc-12f3d45244cf/export</link>
      <description>{"uuid": "57af3b44-525c-4d9e-81fc-12f3d45244cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.cert.si/si-cert-2026-05", "content": "", "creation_timestamp": "2026-09-06T20:45:13.758141Z"}</description>
      <content:encoded>{"uuid": "57af3b44-525c-4d9e-81fc-12f3d45244cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.cert.si/si-cert-2026-05", "content": "", "creation_timestamp": "2026-09-06T20:45:13.758141Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/57af3b44-525c-4d9e-81fc-12f3d45244cf/export</guid>
      <pubDate>Sun, 06 Sep 2026 20:45:13 +0000</pubDate>
    </item>
    <item>
      <title>b3ed4d56-30a7-46b2-a295-7edc1a956d6a</title>
      <link>https://vulnerability.circl.lu/sighting/b3ed4d56-30a7-46b2-a295-7edc1a956d6a/export</link>
      <description>{"uuid": "b3ed4d56-30a7-46b2-a295-7edc1a956d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-06T19:00:45.702112Z"}</description>
      <content:encoded>{"uuid": "b3ed4d56-30a7-46b2-a295-7edc1a956d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-06T19:00:45.702112Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b3ed4d56-30a7-46b2-a295-7edc1a956d6a/export</guid>
      <pubDate>Sun, 06 Sep 2026 19:00:45 +0000</pubDate>
    </item>
    <item>
      <title>754ad416-22de-4c71-9b98-64efa238b341</title>
      <link>https://vulnerability.circl.lu/sighting/754ad416-22de-4c71-9b98-64efa238b341/export</link>
      <description>{"uuid": "754ad416-22de-4c71-9b98-64efa238b341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3muuhza6e3g25", "content": "Just another Tuesday in IT, where exposed MikroTik RouterOS boxes with SSH enabled are currently handing complete administrative control to anyone who asks nicely via CVE-2026-67276 and CVE-2026-86060. We are expected to frantically scramble and patch to RouterOS 7.24.2, 7.23.4, ...\n\nRead full story", "creation_timestamp": "2026-09-06T17:04:26.219591Z"}</description>
      <content:encoded>{"uuid": "754ad416-22de-4c71-9b98-64efa238b341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3muuhza6e3g25", "content": "Just another Tuesday in IT, where exposed MikroTik RouterOS boxes with SSH enabled are currently handing complete administrative control to anyone who asks nicely via CVE-2026-67276 and CVE-2026-86060. We are expected to frantically scramble and patch to RouterOS 7.24.2, 7.23.4, ...\n\nRead full story", "creation_timestamp": "2026-09-06T17:04:26.219591Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/754ad416-22de-4c71-9b98-64efa238b341/export</guid>
      <pubDate>Sun, 06 Sep 2026 17:04:26 +0000</pubDate>
    </item>
    <item>
      <title>fb97659d-cd0b-4043-8a54-11f99be88626</title>
      <link>https://vulnerability.circl.lu/sighting/fb97659d-cd0b-4043-8a54-11f99be88626/export</link>
      <description>{"uuid": "fb97659d-cd0b-4043-8a54-11f99be88626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "content": "", "creation_timestamp": "2026-09-06T11:00:06.456847Z"}</description>
      <content:encoded>{"uuid": "fb97659d-cd0b-4043-8a54-11f99be88626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "content": "", "creation_timestamp": "2026-09-06T11:00:06.456847Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fb97659d-cd0b-4043-8a54-11f99be88626/export</guid>
      <pubDate>Sun, 06 Sep 2026 11:00:06 +0000</pubDate>
    </item>
  </channel>
</rss>
