<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 16 Jun 2026 19:49:02 +0000</lastBuildDate>
    <item>
      <title>be4f13a2-20a0-4d18-aa50-4821dc2654f0</title>
      <link>https://vulnerability.circl.lu/sighting/be4f13a2-20a0-4d18-aa50-4821dc2654f0/export</link>
      <description>{"uuid": "be4f13a2-20a0-4d18-aa50-4821dc2654f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9862", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3modpfnfc6n2a", "content": "Critical CVE-2026-9862: Fortra BoKS OS command injection (CVSS 9.8) lets remote attackers run commands via boks_autoregisterd. Restrict access &amp;amp; monitor logs until patch info is available. https://radar.offseq.com/threat/cve-2026-9862-cwe-78-improper-neutralization-of-sp-0a9c664a #OffSeq #CVE2026...", "creation_timestamp": "2026-06-15T16:30:14.089583Z"}</description>
      <content:encoded>{"uuid": "be4f13a2-20a0-4d18-aa50-4821dc2654f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9862", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3modpfnfc6n2a", "content": "Critical CVE-2026-9862: Fortra BoKS OS command injection (CVSS 9.8) lets remote attackers run commands via boks_autoregisterd. Restrict access &amp;amp; monitor logs until patch info is available. https://radar.offseq.com/threat/cve-2026-9862-cwe-78-improper-neutralization-of-sp-0a9c664a #OffSeq #CVE2026...", "creation_timestamp": "2026-06-15T16:30:14.089583Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/be4f13a2-20a0-4d18-aa50-4821dc2654f0/export</guid>
      <pubDate>Mon, 15 Jun 2026 16:30:14 +0000</pubDate>
    </item>
    <item>
      <title>2cde1c2e-658c-4442-92c1-4f148aa22078</title>
      <link>https://vulnerability.circl.lu/sighting/2cde1c2e-658c-4442-92c1-4f148aa22078/export</link>
      <description>{"uuid": "2cde1c2e-658c-4442-92c1-4f148aa22078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9862", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116755071710658685", "content": "\ud83d\udea8 CRITICAL: CVE-2026-9862 in Fortra Core Privileged Access Manager (BoKS) allows unauthenticated remote OS command injection via boks_autoregisterd (CVSS 9.8). Restrict network access &amp;amp; monitor activity. No patch yet. https://radar.offseq.com/threat/cve-2026-9862-cwe-78-improper-neutralization-of-sp-0a9c664a #OffSeq #CVE20269862 #Infosec", "creation_timestamp": "2026-06-15T16:30:18.886523Z"}</description>
      <content:encoded>{"uuid": "2cde1c2e-658c-4442-92c1-4f148aa22078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9862", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116755071710658685", "content": "\ud83d\udea8 CRITICAL: CVE-2026-9862 in Fortra Core Privileged Access Manager (BoKS) allows unauthenticated remote OS command injection via boks_autoregisterd (CVSS 9.8). Restrict network access &amp;amp; monitor activity. No patch yet. https://radar.offseq.com/threat/cve-2026-9862-cwe-78-improper-neutralization-of-sp-0a9c664a #OffSeq #CVE20269862 #Infosec", "creation_timestamp": "2026-06-15T16:30:18.886523Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2cde1c2e-658c-4442-92c1-4f148aa22078/export</guid>
      <pubDate>Mon, 15 Jun 2026 16:30:18 +0000</pubDate>
    </item>
    <item>
      <title>a256e90d-eebf-46b9-92c2-2908754fc8eb</title>
      <link>https://vulnerability.circl.lu/sighting/a256e90d-eebf-46b9-92c2-2908754fc8eb/export</link>
      <description>{"uuid": "a256e90d-eebf-46b9-92c2-2908754fc8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116755118941669075", "content": "The severity is increased for this new vulnerability affecting Fortra Core Privileged Access Manager (CVE-2026-9862) https://vuldb.com/vuln/370929", "creation_timestamp": "2026-06-15T16:42:13.167415Z"}</description>
      <content:encoded>{"uuid": "a256e90d-eebf-46b9-92c2-2908754fc8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116755118941669075", "content": "The severity is increased for this new vulnerability affecting Fortra Core Privileged Access Manager (CVE-2026-9862) https://vuldb.com/vuln/370929", "creation_timestamp": "2026-06-15T16:42:13.167415Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a256e90d-eebf-46b9-92c2-2908754fc8eb/export</guid>
      <pubDate>Mon, 15 Jun 2026 16:42:13 +0000</pubDate>
    </item>
    <item>
      <title>41a6f3c0-1038-4125-bc7f-1f76ec494ad6</title>
      <link>https://vulnerability.circl.lu/sighting/41a6f3c0-1038-4125-bc7f-1f76ec494ad6/export</link>
      <description>{"uuid": "41a6f3c0-1038-4125-bc7f-1f76ec494ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mods3eeno72e", "content": "CVE-2026-9862 - Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability\nCVE ID : CVE-2026-9862\n \n Published : June 15, 2026, 4:16 p.m. | 52\u00a0minutes ago\n \n Description : Fortra's\u00a0\nCore Privileged Access Manager (BoKS)\u00a0contains an OS comman...", "creation_timestamp": "2026-06-15T17:18:09.591849Z"}</description>
      <content:encoded>{"uuid": "41a6f3c0-1038-4125-bc7f-1f76ec494ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mods3eeno72e", "content": "CVE-2026-9862 - Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability\nCVE ID : CVE-2026-9862\n \n Published : June 15, 2026, 4:16 p.m. | 52\u00a0minutes ago\n \n Description : Fortra's\u00a0\nCore Privileged Access Manager (BoKS)\u00a0contains an OS comman...", "creation_timestamp": "2026-06-15T17:18:09.591849Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/41a6f3c0-1038-4125-bc7f-1f76ec494ad6/export</guid>
      <pubDate>Mon, 15 Jun 2026 17:18:09 +0000</pubDate>
    </item>
    <item>
      <title>e572ed46-f9e2-4a04-8c1d-a4044aa3490b</title>
      <link>https://vulnerability.circl.lu/sighting/e572ed46-f9e2-4a04-8c1d-a4044aa3490b/export</link>
      <description>{"uuid": "e572ed46-f9e2-4a04-8c1d-a4044aa3490b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moduipzzjk2y", "content": "\ud83d\udd34 CVE-2026-9862 - Critical (9.8)\n\nFortra's\u00a0\nCore Privileged Access Manager (BoKS)\u00a0contains an OS command injection vulnerability ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9862/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T18:01:26.980752Z"}</description>
      <content:encoded>{"uuid": "e572ed46-f9e2-4a04-8c1d-a4044aa3490b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9862", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moduipzzjk2y", "content": "\ud83d\udd34 CVE-2026-9862 - Critical (9.8)\n\nFortra's\u00a0\nCore Privileged Access Manager (BoKS)\u00a0contains an OS command injection vulnerability ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9862/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T18:01:26.980752Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e572ed46-f9e2-4a04-8c1d-a4044aa3490b/export</guid>
      <pubDate>Mon, 15 Jun 2026 18:01:26 +0000</pubDate>
    </item>
  </channel>
</rss>
