https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 19 Sep 2026 19:39:36 +0000 https://vulnerability.circl.lu/sighting/61f14328-270e-4032-bfb6-8fa5aeb30313/export {"uuid": "61f14328-270e-4032-bfb6-8fa5aeb30313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvuj4dejlc2e", "content": "Totolink A3002MU Hh-B20211125.1046\u306eformWlWds\u30d5\u30a1\u30a4\u30eb\u306b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u3002\nCVE-2026-93741 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-09-19T10:49:15.404753Z"} {"uuid": "61f14328-270e-4032-bfb6-8fa5aeb30313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvuj4dejlc2e", "content": "Totolink A3002MU Hh-B20211125.1046\u306eformWlWds\u30d5\u30a1\u30a4\u30eb\u306b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u3002\nCVE-2026-93741 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-09-19T10:49:15.404753Z"} https://vulnerability.circl.lu/sighting/61f14328-270e-4032-bfb6-8fa5aeb30313/export Sat, 19 Sep 2026 10:49:15 +0000 https://vulnerability.circl.lu/sighting/ac136148-8044-4eb8-84b3-673e71270e2f/export {"uuid": "ac136148-8044-4eb8-84b3-673e71270e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j366iovx76r3u", "content": "CVE-2026-93741 - Totolink A3002MU formWlWds buffer overflow\nCVE ID : CVE-2026-93741\n \n Published : Sept. 19, 2026, 6:16 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is th...", "creation_timestamp": "2026-09-19T08:07:34.445971Z"} {"uuid": "ac136148-8044-4eb8-84b3-673e71270e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j366iovx76r3u", "content": "CVE-2026-93741 - Totolink A3002MU formWlWds buffer overflow\nCVE ID : CVE-2026-93741\n \n Published : Sept. 19, 2026, 6:16 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is th...", "creation_timestamp": "2026-09-19T08:07:34.445971Z"} https://vulnerability.circl.lu/sighting/ac136148-8044-4eb8-84b3-673e71270e2f/export Sat, 19 Sep 2026 08:07:34 +0000 https://vulnerability.circl.lu/sighting/7193ec7d-b41b-4df4-9107-c399da01e44b/export {"uuid": "7193ec7d-b41b-4df4-9107-c399da01e44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvua2qfolh2t", "content": "\ud83d\udea8 CVE-2026-93741 \u2014 CVSS 9.3 CRITICAL\n\nA security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93741\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T08:07:18.276607Z"} {"uuid": "7193ec7d-b41b-4df4-9107-c399da01e44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvua2qfolh2t", "content": "\ud83d\udea8 CVE-2026-93741 \u2014 CVSS 9.3 CRITICAL\n\nA security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93741\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T08:07:18.276607Z"} https://vulnerability.circl.lu/sighting/7193ec7d-b41b-4df4-9107-c399da01e44b/export Sat, 19 Sep 2026 08:07:18 +0000 https://vulnerability.circl.lu/sighting/5941f760-b05c-47d9-b7fa-3e4eed5453fb/export {"uuid": "5941f760-b05c-47d9-b7fa-3e4eed5453fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://gist.github.com/ichintu/3891ce0c6380cb100014a71d3f634404", "content": "This daily threat intelligence briefing highlights three critical security developments:\n\n- **Supply Chain Breach & Credential Theft:** CrowdSec reported that a May supply chain attack on TanStack npm packages compromised employee credentials. An unrevoked GitHub account belonging to a departed employee was exploited to copy ~170 private repositories.\n- **CISA KEV Catalog Updates:** CISA added three actively exploited Linux kernel vulnerabilities, plus flaws in Acronis Backup and Google Pixel, to its Known Exploited Vulnerabilities catalog.\n- **Critical Public Vulnerabilities:**\n \u2022 **Totolink Routers:** CVE-2026-93741 (CVSS 10.0) is a publicly exploitable remote buffer overflow in A3002MU firmware.\n \u2022 **Docker Desktop:** CVE-2026-77179 details a hypervisor escape vulnerability affecting macOS environments.\n \u2022 **WordPress Gravity Forms:** CVE-2026-84434 (CVSS 9.8) allows unauthenticated attackers to bypass file validation and achieve remote code execution.\n\n**Recommendation:** Organizations should immediately patch affected software, revoke unused or departed-employee credentials, and monitor CISA alerts for active exploitation indicators.", "creation_timestamp": "2026-09-19T08:02:12.286587Z"} {"uuid": "5941f760-b05c-47d9-b7fa-3e4eed5453fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://gist.github.com/ichintu/3891ce0c6380cb100014a71d3f634404", "content": "This daily threat intelligence briefing highlights three critical security developments:\n\n- **Supply Chain Breach & Credential Theft:** CrowdSec reported that a May supply chain attack on TanStack npm packages compromised employee credentials. An unrevoked GitHub account belonging to a departed employee was exploited to copy ~170 private repositories.\n- **CISA KEV Catalog Updates:** CISA added three actively exploited Linux kernel vulnerabilities, plus flaws in Acronis Backup and Google Pixel, to its Known Exploited Vulnerabilities catalog.\n- **Critical Public Vulnerabilities:**\n \u2022 **Totolink Routers:** CVE-2026-93741 (CVSS 10.0) is a publicly exploitable remote buffer overflow in A3002MU firmware.\n \u2022 **Docker Desktop:** CVE-2026-77179 details a hypervisor escape vulnerability affecting macOS environments.\n \u2022 **WordPress Gravity Forms:** CVE-2026-84434 (CVSS 9.8) allows unauthenticated attackers to bypass file validation and achieve remote code execution.\n\n**Recommendation:** Organizations should immediately patch affected software, revoke unused or departed-employee credentials, and monitor CISA alerts for active exploitation indicators.", "creation_timestamp": "2026-09-19T08:02:12.286587Z"} https://vulnerability.circl.lu/sighting/5941f760-b05c-47d9-b7fa-3e4eed5453fb/export Sat, 19 Sep 2026 08:02:12 +0000 https://vulnerability.circl.lu/sighting/9bd2e989-271c-4096-972c-c363b81a1a93/export {"uuid": "9bd2e989-271c-4096-972c-c363b81a1a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4izc7va2w", "content": "\ud83d\udd34 CVE-2026-93741 - Critical (10)\n\nA security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulne...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93741/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:03:43.353011Z"} {"uuid": "9bd2e989-271c-4096-972c-c363b81a1a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4izc7va2w", "content": "\ud83d\udd34 CVE-2026-93741 - Critical (10)\n\nA security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulne...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93741/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:03:43.353011Z"} https://vulnerability.circl.lu/sighting/9bd2e989-271c-4096-972c-c363b81a1a93/export Sat, 19 Sep 2026 07:03:43 +0000 https://vulnerability.circl.lu/sighting/03a24e61-e2d7-405f-8443-b9be6514304f/export {"uuid": "03a24e61-e2d7-405f-8443-b9be6514304f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvu3qntka52t", "content": "CVE-2026-93741 - a3002mu\nThe Totolink A3002MU router can be tricked into overflowing memory when a specially crafted web request is sent to its configuration page. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#a3002mu #totolink #CVE #infosec", "creation_timestamp": "2026-09-19T06:50:05.045326Z"} {"uuid": "03a24e61-e2d7-405f-8443-b9be6514304f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93741", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvu3qntka52t", "content": "CVE-2026-93741 - a3002mu\nThe Totolink A3002MU router can be tricked into overflowing memory when a specially crafted web request is sent to its configuration page. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#a3002mu #totolink #CVE #infosec", "creation_timestamp": "2026-09-19T06:50:05.045326Z"} https://vulnerability.circl.lu/sighting/03a24e61-e2d7-405f-8443-b9be6514304f/export Sat, 19 Sep 2026 06:50:05 +0000