https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 13 Sep 2026 21:39:20 +0000 https://vulnerability.circl.lu/sighting/ead633a3-da4b-484c-918f-25513b8ff1de/export {"uuid": "ead633a3-da4b-484c-918f-25513b8ff1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://gist.github.com/ichintu/8790859bbfbdbc3eff56fbadf683426f", "content": "This threat intelligence digest covers critical vulnerabilities, emerging attack techniques, and enterprise security trends:\n\n* **Actively Exploited & High-Severity Vulnerabilities:** Mikrotik RouterOS and PaperCut face active exploitation requiring immediate patching. New CVEs reveal missing brute-force protection in Kingdom Communication intercoms (CVE-2026-89174) and SAML response tampering in HPE IceWall (CVE-2026-73784).\n* **Advanced Attack Techniques:** Threat actors are bypassing MFA using session/OAuth cookie replay and passkey-themed AiTM phishing to compromise Microsoft 365 accounts, often evading Entra ID detection. The Google Play Early Access program poses enterprise risks due to unvetted, potentially malicious apps that bypass public reviews.\n* **Enterprise & AI Shifts:** ServiceNow is transitioning to consumption-based pricing and integrating AI to unify ITSM and security, bolstered by its $7.75B Armis acquisition to fix flawed CMDBs and expand into OT/IoT.\n* **Research & Guidance:** Security researchers recommend parsing AD CS certificate flags bit-by-bit (rather than using static integers) to accurately identify ESC4\u2192ESC1 attack paths. The CSA also formalizes a continuous Zero Trust microsegmentation framework, emphasizing both topology-defined and connection-defined controls to reduce lateral movement and credential theft.\n\n**Bottom Line:** Immediate patching is critical for Mikrotik, PaperCut, Kingdom, and HPE products. Defenses should prioritize phishing-resistant MFA, strict app governance, and a hybrid segmentation model aligned with Zero Trust principles.", "creation_timestamp": "2026-09-11T12:01:56.694992Z"} {"uuid": "ead633a3-da4b-484c-918f-25513b8ff1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://gist.github.com/ichintu/8790859bbfbdbc3eff56fbadf683426f", "content": "This threat intelligence digest covers critical vulnerabilities, emerging attack techniques, and enterprise security trends:\n\n* **Actively Exploited & High-Severity Vulnerabilities:** Mikrotik RouterOS and PaperCut face active exploitation requiring immediate patching. New CVEs reveal missing brute-force protection in Kingdom Communication intercoms (CVE-2026-89174) and SAML response tampering in HPE IceWall (CVE-2026-73784).\n* **Advanced Attack Techniques:** Threat actors are bypassing MFA using session/OAuth cookie replay and passkey-themed AiTM phishing to compromise Microsoft 365 accounts, often evading Entra ID detection. The Google Play Early Access program poses enterprise risks due to unvetted, potentially malicious apps that bypass public reviews.\n* **Enterprise & AI Shifts:** ServiceNow is transitioning to consumption-based pricing and integrating AI to unify ITSM and security, bolstered by its $7.75B Armis acquisition to fix flawed CMDBs and expand into OT/IoT.\n* **Research & Guidance:** Security researchers recommend parsing AD CS certificate flags bit-by-bit (rather than using static integers) to accurately identify ESC4\u2192ESC1 attack paths. The CSA also formalizes a continuous Zero Trust microsegmentation framework, emphasizing both topology-defined and connection-defined controls to reduce lateral movement and credential theft.\n\n**Bottom Line:** Immediate patching is critical for Mikrotik, PaperCut, Kingdom, and HPE products. Defenses should prioritize phishing-resistant MFA, strict app governance, and a hybrid segmentation model aligned with Zero Trust principles.", "creation_timestamp": "2026-09-11T12:01:56.694992Z"} https://vulnerability.circl.lu/sighting/ead633a3-da4b-484c-918f-25513b8ff1de/export Fri, 11 Sep 2026 12:01:56 +0000 https://vulnerability.circl.lu/sighting/662eb18c-8697-4081-850f-6054587dcb86/export {"uuid": "662eb18c-8697-4081-850f-6054587dcb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvag3ckrxd2w", "content": "\ud83d\udfe0 CVE-2026-89178 - High (8.8)\n\nWeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Er...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89178/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:01:46.192329Z"} {"uuid": "662eb18c-8697-4081-850f-6054587dcb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvag3ckrxd2w", "content": "\ud83d\udfe0 CVE-2026-89178 - High (8.8)\n\nWeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Er...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89178/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:01:46.192329Z"} https://vulnerability.circl.lu/sighting/662eb18c-8697-4081-850f-6054587dcb86/export Fri, 11 Sep 2026 11:01:46 +0000 https://vulnerability.circl.lu/sighting/ce1f1d7f-e66e-4914-bfc4-8d94a3965e23/export {"uuid": "ce1f1d7f-e66e-4914-bfc4-8d94a3965e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvag33lpav24", "content": "\ud83d\udfe0 CVE-2026-89177 - High (8.8)\n\nWeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Proto...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89177/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:01:38.679473Z"} {"uuid": "ce1f1d7f-e66e-4914-bfc4-8d94a3965e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvag33lpav24", "content": "\ud83d\udfe0 CVE-2026-89177 - High (8.8)\n\nWeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Proto...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89177/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:01:38.679473Z"} https://vulnerability.circl.lu/sighting/ce1f1d7f-e66e-4914-bfc4-8d94a3965e23/export Fri, 11 Sep 2026 11:01:38 +0000 https://vulnerability.circl.lu/sighting/b4335de4-9605-49f2-bef4-51b6bc2b2968/export {"uuid": "b4335de4-9605-49f2-bef4-51b6bc2b2968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzmq4rs23", "content": "\ud83d\udfe0 CVE-2026-89176 - High (8.8)\n\nWeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Aut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89176/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:49.472211Z"} {"uuid": "b4335de4-9605-49f2-bef4-51b6bc2b2968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzmq4rs23", "content": "\ud83d\udfe0 CVE-2026-89176 - High (8.8)\n\nWeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Aut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89176/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:49.472211Z"} https://vulnerability.circl.lu/sighting/b4335de4-9605-49f2-bef4-51b6bc2b2968/export Fri, 11 Sep 2026 11:00:49 +0000 https://vulnerability.circl.lu/sighting/0f2d4bdb-91ce-4dce-b5bd-276b87579570/export {"uuid": "0f2d4bdb-91ce-4dce-b5bd-276b87579570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzfoddg2o", "content": "\ud83d\udfe0 CVE-2026-89174 - High (7.5)\n\nSmart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-for...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89174/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:42.066027Z"} {"uuid": "0f2d4bdb-91ce-4dce-b5bd-276b87579570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzfoddg2o", "content": "\ud83d\udfe0 CVE-2026-89174 - High (7.5)\n\nSmart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-for...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89174/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:42.066027Z"} https://vulnerability.circl.lu/sighting/0f2d4bdb-91ce-4dce-b5bd-276b87579570/export Fri, 11 Sep 2026 11:00:42 +0000 https://vulnerability.circl.lu/sighting/2d6cc98f-ed9a-4af0-86ab-8c9558750d8a/export {"uuid": "2d6cc98f-ed9a-4af0-86ab-8c9558750d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m", "content": "CVE-2026-89176 - Howyar\uff5cWeenyGenius - Missing Authentication\nCVE ID : CVE-2026-89176\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerab...", "creation_timestamp": "2026-09-11T09:51:57.264324Z"} {"uuid": "2d6cc98f-ed9a-4af0-86ab-8c9558750d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m", "content": "CVE-2026-89176 - Howyar\uff5cWeenyGenius - Missing Authentication\nCVE ID : CVE-2026-89176\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerab...", "creation_timestamp": "2026-09-11T09:51:57.264324Z"} https://vulnerability.circl.lu/sighting/2d6cc98f-ed9a-4af0-86ab-8c9558750d8a/export Fri, 11 Sep 2026 09:51:57 +0000 https://vulnerability.circl.lu/sighting/33c0fa34-047d-48b2-a5a1-5a1c324bf7b4/export {"uuid": "33c0fa34-047d-48b2-a5a1-5a1c324bf7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bdqk3pzte55i2", "content": "CVE-2026-89177 - Howyar\uff5cWeenyGenius - Use of Insecure Protocol\nCVE ID : CVE-2026-89177\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability....", "creation_timestamp": "2026-09-11T09:45:57.673691Z"} {"uuid": "33c0fa34-047d-48b2-a5a1-5a1c324bf7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bdqk3pzte55i2", "content": "CVE-2026-89177 - Howyar\uff5cWeenyGenius - Use of Insecure Protocol\nCVE ID : CVE-2026-89177\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability....", "creation_timestamp": "2026-09-11T09:45:57.673691Z"} https://vulnerability.circl.lu/sighting/33c0fa34-047d-48b2-a5a1-5a1c324bf7b4/export Fri, 11 Sep 2026 09:45:57 +0000 https://vulnerability.circl.lu/sighting/a0815442-ad98-45b2-ba6d-c5f58d0fea62/export {"uuid": "a0815442-ad98-45b2-ba6d-c5f58d0fea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eye6iojklzlt4", "content": "CVE-2026-89178 - Howyar\uff5cWeenyGenius - Origin Validation Error\nCVE ID : CVE-2026-89178\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. ...", "creation_timestamp": "2026-09-11T09:39:57.477411Z"} {"uuid": "a0815442-ad98-45b2-ba6d-c5f58d0fea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eye6iojklzlt4", "content": "CVE-2026-89178 - Howyar\uff5cWeenyGenius - Origin Validation Error\nCVE ID : CVE-2026-89178\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. ...", "creation_timestamp": "2026-09-11T09:39:57.477411Z"} https://vulnerability.circl.lu/sighting/a0815442-ad98-45b2-ba6d-c5f58d0fea62/export Fri, 11 Sep 2026 09:39:57 +0000 https://vulnerability.circl.lu/sighting/c2efbcc6-0d78-4a4c-b8be-96e28790e283/export {"uuid": "c2efbcc6-0d78-4a4c-b8be-96e28790e283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:30.612880Z"} {"uuid": "c2efbcc6-0d78-4a4c-b8be-96e28790e283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:30.612880Z"} https://vulnerability.circl.lu/sighting/c2efbcc6-0d78-4a4c-b8be-96e28790e283/export Fri, 11 Sep 2026 08:45:30 +0000 https://vulnerability.circl.lu/sighting/329b06ad-5013-44c7-b5f5-9220a5a332d1/export {"uuid": "329b06ad-5013-44c7-b5f5-9220a5a332d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:28.412756Z"} {"uuid": "329b06ad-5013-44c7-b5f5-9220a5a332d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:28.412756Z"} https://vulnerability.circl.lu/sighting/329b06ad-5013-44c7-b5f5-9220a5a332d1/export Fri, 11 Sep 2026 08:45:28 +0000