<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 13 Sep 2026 03:52:57 +0000</lastBuildDate>
    <item>
      <title>a4b50951-e77b-4f88-89d1-746c4047daee</title>
      <link>https://vulnerability.circl.lu/sighting/a4b50951-e77b-4f88-89d1-746c4047daee/export</link>
      <description>{"uuid": "a4b50951-e77b-4f88-89d1-746c4047daee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvecgo2p4n2b", "content": "\ud83d\udea8 CVE-2026-90647 \u2014 CVSS 9.1 CRITICAL\n\nASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certifica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-13T00:07:14.246222Z"}</description>
      <content:encoded>{"uuid": "a4b50951-e77b-4f88-89d1-746c4047daee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvecgo2p4n2b", "content": "\ud83d\udea8 CVE-2026-90647 \u2014 CVSS 9.1 CRITICAL\n\nASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certifica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-13T00:07:14.246222Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a4b50951-e77b-4f88-89d1-746c4047daee/export</guid>
      <pubDate>Sun, 13 Sep 2026 00:07:14 +0000</pubDate>
    </item>
    <item>
      <title>cc9bbea0-8448-4157-96ef-83c55c4cec1b</title>
      <link>https://vulnerability.circl.lu/sighting/cc9bbea0-8448-4157-96ef-83c55c4cec1b/export</link>
      <description>{"uuid": "cc9bbea0-8448-4157-96ef-83c55c4cec1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b57a5lyr5756k", "content": "CVE-2026-90647 - Kalkitech ASE2000 Improper Certificate Validation Vulnerability\nCVE ID : CVE-2026-90647\n \n Published : Sept. 12, 2026, 11:17 p.m. | 21\u00a0minutes ago\n \n Description : ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an imprope...", "creation_timestamp": "2026-09-13T00:07:09.465808Z"}</description>
      <content:encoded>{"uuid": "cc9bbea0-8448-4157-96ef-83c55c4cec1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b57a5lyr5756k", "content": "CVE-2026-90647 - Kalkitech ASE2000 Improper Certificate Validation Vulnerability\nCVE ID : CVE-2026-90647\n \n Published : Sept. 12, 2026, 11:17 p.m. | 21\u00a0minutes ago\n \n Description : ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an imprope...", "creation_timestamp": "2026-09-13T00:07:09.465808Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cc9bbea0-8448-4157-96ef-83c55c4cec1b/export</guid>
      <pubDate>Sun, 13 Sep 2026 00:07:09 +0000</pubDate>
    </item>
    <item>
      <title>65687406-7adf-4131-8dfc-e6ddf9db3f1a</title>
      <link>https://vulnerability.circl.lu/sighting/65687406-7adf-4131-8dfc-e6ddf9db3f1a/export</link>
      <description>{"uuid": "65687406-7adf-4131-8dfc-e6ddf9db3f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://gist.github.com/ichintu/22032aad19461863ee27dbdb173d32b1", "content": "Published September 12, 2026, **CVE-2026-90647** is a critical (9.1) vulnerability in the Kalkitech ASE2000 V2 Communication Test Set (Windows v2.35\u20132.37) that allows network attackers to bypass TLS certificate validation, enabling Man-in-the-Middle attacks.", "creation_timestamp": "2026-09-13T00:02:48.767486Z"}</description>
      <content:encoded>{"uuid": "65687406-7adf-4131-8dfc-e6ddf9db3f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://gist.github.com/ichintu/22032aad19461863ee27dbdb173d32b1", "content": "Published September 12, 2026, **CVE-2026-90647** is a critical (9.1) vulnerability in the Kalkitech ASE2000 V2 Communication Test Set (Windows v2.35\u20132.37) that allows network attackers to bypass TLS certificate validation, enabling Man-in-the-Middle attacks.", "creation_timestamp": "2026-09-13T00:02:48.767486Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/65687406-7adf-4131-8dfc-e6ddf9db3f1a/export</guid>
      <pubDate>Sun, 13 Sep 2026 00:02:48 +0000</pubDate>
    </item>
    <item>
      <title>8144dd50-fed3-4fee-ac5a-9ce8200303f2</title>
      <link>https://vulnerability.circl.lu/sighting/8144dd50-fed3-4fee-ac5a-9ce8200303f2/export</link>
      <description>{"uuid": "8144dd50-fed3-4fee-ac5a-9ce8200303f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvec2ydp322e", "content": "Kalkitech ASE2000 V2 (2.35-2.37) faces a CRITICAL TLS flaw (CVE-2026-90647, CVSS 9.1): improper cert validation enables MitM. Restrict access &amp;amp; watch for suspicious activity. Patch status pending. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-...", "creation_timestamp": "2026-09-13T00:00:42.553508Z"}</description>
      <content:encoded>{"uuid": "8144dd50-fed3-4fee-ac5a-9ce8200303f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvec2ydp322e", "content": "Kalkitech ASE2000 V2 (2.35-2.37) faces a CRITICAL TLS flaw (CVE-2026-90647, CVSS 9.1): improper cert validation enables MitM. Restrict access &amp;amp; watch for suspicious activity. Patch status pending. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-...", "creation_timestamp": "2026-09-13T00:00:42.553508Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8144dd50-fed3-4fee-ac5a-9ce8200303f2/export</guid>
      <pubDate>Sun, 13 Sep 2026 00:00:42 +0000</pubDate>
    </item>
    <item>
      <title>e6092d3c-97db-4495-afd6-d3f124b9da20</title>
      <link>https://vulnerability.circl.lu/sighting/e6092d3c-97db-4495-afd6-d3f124b9da20/export</link>
      <description>{"uuid": "e6092d3c-97db-4495-afd6-d3f124b9da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117260788422772028", "content": "CVE-2026-90647 (CRITICAL, CVSS 9.1) affects Kalkitech ASE2000 V2 (2.35 \u2013 2.37): improper TLS certificate validation in IEC 60870-5-104 enables MitM attacks. No patch confirmed. Restrict access &amp;amp; monitor. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-ase2000-v2-communication-test-set-2a292ef0f6b1257f #OffSeq #ICS #CVE202690647 #TLS", "creation_timestamp": "2026-09-13T00:00:36.567431Z"}</description>
      <content:encoded>{"uuid": "e6092d3c-97db-4495-afd6-d3f124b9da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117260788422772028", "content": "CVE-2026-90647 (CRITICAL, CVSS 9.1) affects Kalkitech ASE2000 V2 (2.35 \u2013 2.37): improper TLS certificate validation in IEC 60870-5-104 enables MitM attacks. No patch confirmed. Restrict access &amp;amp; monitor. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-ase2000-v2-communication-test-set-2a292ef0f6b1257f #OffSeq #ICS #CVE202690647 #TLS", "creation_timestamp": "2026-09-13T00:00:36.567431Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e6092d3c-97db-4495-afd6-d3f124b9da20/export</guid>
      <pubDate>Sun, 13 Sep 2026 00:00:36 +0000</pubDate>
    </item>
    <item>
      <title>86211344-0b55-4136-8508-1d970bb25115</title>
      <link>https://vulnerability.circl.lu/sighting/86211344-0b55-4136-8508-1d970bb25115/export</link>
      <description>{"uuid": "86211344-0b55-4136-8508-1d970bb25115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mveaefpgmm2w", "content": "CVE-2026-90647 - ase2000 v2 communication test set\nThe ASE2000 V2 Communication Test Set for Windows does not correctly check security certificates when using its secure TLS connection. This weakness lets someone\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kalkitech #CVE #infosec", "creation_timestamp": "2026-09-12T23:30:08.026562Z"}</description>
      <content:encoded>{"uuid": "86211344-0b55-4136-8508-1d970bb25115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mveaefpgmm2w", "content": "CVE-2026-90647 - ase2000 v2 communication test set\nThe ASE2000 V2 Communication Test Set for Windows does not correctly check security certificates when using its secure TLS connection. This weakness lets someone\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kalkitech #CVE #infosec", "creation_timestamp": "2026-09-12T23:30:08.026562Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/86211344-0b55-4136-8508-1d970bb25115/export</guid>
      <pubDate>Sat, 12 Sep 2026 23:30:08 +0000</pubDate>
    </item>
  </channel>
</rss>
