<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 22 Sep 2026 07:01:33 +0000</lastBuildDate>
    <item>
      <title>2d02e609-111f-4084-941a-06896e3555ca</title>
      <link>https://vulnerability.circl.lu/sighting/2d02e609-111f-4084-941a-06896e3555ca/export</link>
      <description>{"uuid": "2d02e609-111f-4084-941a-06896e3555ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94101", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvzpgnt7e72t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-94101: A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-94101\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-21T12:25:43.093499Z"}</description>
      <content:encoded>{"uuid": "2d02e609-111f-4084-941a-06896e3555ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94101", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvzpgnt7e72t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-94101: A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-94101\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-21T12:25:43.093499Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2d02e609-111f-4084-941a-06896e3555ca/export</guid>
      <pubDate>Mon, 21 Sep 2026 12:25:43 +0000</pubDate>
    </item>
    <item>
      <title>27ef08c8-9915-4946-b0b8-6dbd5f0a1e86</title>
      <link>https://vulnerability.circl.lu/sighting/27ef08c8-9915-4946-b0b8-6dbd5f0a1e86/export</link>
      <description>{"uuid": "27ef08c8-9915-4946-b0b8-6dbd5f0a1e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94101", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvznzjtlda2z", "content": "Netcore NBR200V2 routers (v1.3.241127.071246) face a CRITICAL buffer overflow (CVE-2026-94101). Public exploit, no patch. Restrict remote access or replace device. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #Vulnerability", "creation_timestamp": "2026-09-21T12:00:29.821823Z"}</description>
      <content:encoded>{"uuid": "27ef08c8-9915-4946-b0b8-6dbd5f0a1e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94101", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvznzjtlda2z", "content": "Netcore NBR200V2 routers (v1.3.241127.071246) face a CRITICAL buffer overflow (CVE-2026-94101). Public exploit, no patch. Restrict remote access or replace device. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #Vulnerability", "creation_timestamp": "2026-09-21T12:00:29.821823Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/27ef08c8-9915-4946-b0b8-6dbd5f0a1e86/export</guid>
      <pubDate>Mon, 21 Sep 2026 12:00:29 +0000</pubDate>
    </item>
    <item>
      <title>c0c174bf-1980-4c05-88f5-5f6018f9946c</title>
      <link>https://vulnerability.circl.lu/sighting/c0c174bf-1980-4c05-88f5-5f6018f9946c/export</link>
      <description>{"uuid": "c0c174bf-1980-4c05-88f5-5f6018f9946c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94101", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117308917462367519", "content": "Netcore NBR200V2 (v1.3.241127.071246) hit by CRITICAL CVE-2026-94101 buffer overflow in /usr/bin/routerd. Remote code exec possible. Public exploit, no patch. Restrict remote access ASAP. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #RouterSecurity #Infosec", "creation_timestamp": "2026-09-21T12:00:27.380120Z"}</description>
      <content:encoded>{"uuid": "c0c174bf-1980-4c05-88f5-5f6018f9946c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94101", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117308917462367519", "content": "Netcore NBR200V2 (v1.3.241127.071246) hit by CRITICAL CVE-2026-94101 buffer overflow in /usr/bin/routerd. Remote code exec possible. Public exploit, no patch. Restrict remote access ASAP. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #RouterSecurity #Infosec", "creation_timestamp": "2026-09-21T12:00:27.380120Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c0c174bf-1980-4c05-88f5-5f6018f9946c/export</guid>
      <pubDate>Mon, 21 Sep 2026 12:00:27 +0000</pubDate>
    </item>
    <item>
      <title>b834ffc6-f130-4b99-990a-3a1d496d069f</title>
      <link>https://vulnerability.circl.lu/sighting/b834ffc6-f130-4b99-990a-3a1d496d069f/export</link>
      <description>{"uuid": "b834ffc6-f130-4b99-990a-3a1d496d069f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94101", "type": "seen", "source": "https://gist.github.com/ichintu/c888a270fbf834dd12a0076ed8bbb3e4", "content": "This daily threat intelligence briefing covers three key developments:\n\n\u2022 **Jade Sleet Breach:** North Korean threat group Jade Sleet compromised a small Indian IT firm by specifically targeting developers, deploying FLATROOF and ROOFDECK backdoors (reported by SentinelOne).\n\u2022 **CVE-2026-94142 (High/Local):** A write-what-where vulnerability in the BioStar Temperature Monitor Utility\u2019s driver is publicly exploitable. The vendor has not responded to early notifications.\n\u2022 **CVE-2026-94101 (Critical/Remote):** A buffer overflow in the Netcore NBR200V2 router is publicly available for exploitation, with the vendor also remaining unresponsive.\n\nBoth CVEs were published on September 21, 2026, and pose immediate risk due to publicly disclosed, functional exploits.", "creation_timestamp": "2026-09-21T08:04:42.861722Z"}</description>
      <content:encoded>{"uuid": "b834ffc6-f130-4b99-990a-3a1d496d069f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94101", "type": "seen", "source": "https://gist.github.com/ichintu/c888a270fbf834dd12a0076ed8bbb3e4", "content": "This daily threat intelligence briefing covers three key developments:\n\n\u2022 **Jade Sleet Breach:** North Korean threat group Jade Sleet compromised a small Indian IT firm by specifically targeting developers, deploying FLATROOF and ROOFDECK backdoors (reported by SentinelOne).\n\u2022 **CVE-2026-94142 (High/Local):** A write-what-where vulnerability in the BioStar Temperature Monitor Utility\u2019s driver is publicly exploitable. The vendor has not responded to early notifications.\n\u2022 **CVE-2026-94101 (Critical/Remote):** A buffer overflow in the Netcore NBR200V2 router is publicly available for exploitation, with the vendor also remaining unresponsive.\n\nBoth CVEs were published on September 21, 2026, and pose immediate risk due to publicly disclosed, functional exploits.", "creation_timestamp": "2026-09-21T08:04:42.861722Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b834ffc6-f130-4b99-990a-3a1d496d069f/export</guid>
      <pubDate>Mon, 21 Sep 2026 08:04:42 +0000</pubDate>
    </item>
  </channel>
</rss>
