<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 17:06:14 +0000</lastBuildDate>
    <item>
      <title>c474279d-562b-48f3-acd6-281078da203a</title>
      <link>https://vulnerability.circl.lu/sighting/c474279d-562b-48f3-acd6-281078da203a/export</link>
      <description>{"uuid": "c474279d-562b-48f3-acd6-281078da203a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.346362Z"}</description>
      <content:encoded>{"uuid": "c474279d-562b-48f3-acd6-281078da203a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.346362Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c474279d-562b-48f3-acd6-281078da203a/export</guid>
      <pubDate>Fri, 09 Oct 2026 14:47:00 +0000</pubDate>
    </item>
    <item>
      <title>326ffb79-142c-4ba9-a7b5-9fe31a5c5f1e</title>
      <link>https://vulnerability.circl.lu/sighting/326ffb79-142c-4ba9-a7b5-9fe31a5c5f1e/export</link>
      <description>{"uuid": "326ffb79-142c-4ba9-a7b5-9fe31a5c5f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69435", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxghdafdqf2e", "content": "CRITICAL SSRF flaw (CVSS 9.6) in Microsoft Azure SRE Agent enables privilege escalation by authorized users. Microsoft has released a fix \u2014 ensure your environment is updated. https://radar.offseq.com/threat/cve-2026-69435-cwe-918-server-side-request-forgery-ssrf-in-microsoft-azure-sre-agent-10f6...", "creation_timestamp": "2026-10-09T07:30:27.287938Z"}</description>
      <content:encoded>{"uuid": "326ffb79-142c-4ba9-a7b5-9fe31a5c5f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69435", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxghdafdqf2e", "content": "CRITICAL SSRF flaw (CVSS 9.6) in Microsoft Azure SRE Agent enables privilege escalation by authorized users. Microsoft has released a fix \u2014 ensure your environment is updated. https://radar.offseq.com/threat/cve-2026-69435-cwe-918-server-side-request-forgery-ssrf-in-microsoft-azure-sre-agent-10f6...", "creation_timestamp": "2026-10-09T07:30:27.287938Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/326ffb79-142c-4ba9-a7b5-9fe31a5c5f1e/export</guid>
      <pubDate>Fri, 09 Oct 2026 07:30:27 +0000</pubDate>
    </item>
    <item>
      <title>d50e8d88-cf06-433f-8946-a04c3ef85879</title>
      <link>https://vulnerability.circl.lu/sighting/d50e8d88-cf06-433f-8946-a04c3ef85879/export</link>
      <description>{"uuid": "d50e8d88-cf06-433f-8946-a04c3ef85879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69435", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117409777213968676", "content": "CVE-2026-69435: CRITICAL SSRF (CVSS 9.6) in Microsoft Azure SRE Agent. Missing authorization controls let authorized attackers escalate privileges, risking confidentiality &amp;amp; integrity. Microsoft has issued a fix. https://radar.offseq.com/threat/cve-2026-69435-cwe-918-server-side-request-forgery-ssrf-in-microsoft-azure-sre-agent-10f6e62769899cfe #OffSeq #Azure #SSRF #Infosec", "creation_timestamp": "2026-10-09T07:30:25.346681Z"}</description>
      <content:encoded>{"uuid": "d50e8d88-cf06-433f-8946-a04c3ef85879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69435", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117409777213968676", "content": "CVE-2026-69435: CRITICAL SSRF (CVSS 9.6) in Microsoft Azure SRE Agent. Missing authorization controls let authorized attackers escalate privileges, risking confidentiality &amp;amp; integrity. Microsoft has issued a fix. https://radar.offseq.com/threat/cve-2026-69435-cwe-918-server-side-request-forgery-ssrf-in-microsoft-azure-sre-agent-10f6e62769899cfe #OffSeq #Azure #SSRF #Infosec", "creation_timestamp": "2026-10-09T07:30:25.346681Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d50e8d88-cf06-433f-8946-a04c3ef85879/export</guid>
      <pubDate>Fri, 09 Oct 2026 07:30:25 +0000</pubDate>
    </item>
    <item>
      <title>365f2479-d363-47a8-9659-af25fa946c23</title>
      <link>https://vulnerability.circl.lu/sighting/365f2479-d363-47a8-9659-af25fa946c23/export</link>
      <description>{"uuid": "365f2479-d363-47a8-9659-af25fa946c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfoolwdhk2z", "content": "\ud83d\udea8 CVE-2026-69435 \u2014 CVSS 9.6 CRITICAL\n\nMissing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69435\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:24.078589Z"}</description>
      <content:encoded>{"uuid": "365f2479-d363-47a8-9659-af25fa946c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfoolwdhk2z", "content": "\ud83d\udea8 CVE-2026-69435 \u2014 CVSS 9.6 CRITICAL\n\nMissing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69435\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:24.078589Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/365f2479-d363-47a8-9659-af25fa946c23/export</guid>
      <pubDate>Fri, 09 Oct 2026 00:09:24 +0000</pubDate>
    </item>
    <item>
      <title>94be8418-0e6c-4780-8e13-df7cd562c09a</title>
      <link>https://vulnerability.circl.lu/sighting/94be8418-0e6c-4780-8e13-df7cd562c09a/export</link>
      <description>{"uuid": "94be8418-0e6c-4780-8e13-df7cd562c09a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfksovtzx24", "content": "CVE-2026-69435 - azure sre agent\nThe Azure SRE Agent component can be tricked into giving an attacker more rights than they should have on the network. This could allow the attacker to move laterally, read data, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:00:06.512639Z"}</description>
      <content:encoded>{"uuid": "94be8418-0e6c-4780-8e13-df7cd562c09a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69435", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxfksovtzx24", "content": "CVE-2026-69435 - azure sre agent\nThe Azure SRE Agent component can be tricked into giving an attacker more rights than they should have on the network. This could allow the attacker to move laterally, read data, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:00:06.512639Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/94be8418-0e6c-4780-8e13-df7cd562c09a/export</guid>
      <pubDate>Thu, 08 Oct 2026 23:00:06 +0000</pubDate>
    </item>
  </channel>
</rss>
