https://vulnerability.circl.lu/sightings/feed 2026-09-18T12:27:26.071770+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/871c001f-eb35-4640-9677-4fae7b976b19/export 2026-09-18T12:27:26.079322+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "871c001f-eb35-4640-9677-4fae7b976b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-17)", "content": "", "creation_timestamp": "2026-09-18T10:15:06.023343Z"} 2026-09-18T10:15:06.023343+00:00 https://vulnerability.circl.lu/sighting/28f9a18a-e408-42d1-a79b-f861f9ae0c18/export 2026-09-18T12:27:26.081208+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "28f9a18a-e408-42d1-a79b-f861f9ae0c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-17)", "content": "", "creation_timestamp": "2026-09-18T10:00:05.099098Z"} 2026-09-18T10:00:05.099098+00:00 https://vulnerability.circl.lu/sighting/a2ccf4f7-88db-440e-80fe-f865553f68be/export 2026-09-18T12:27:26.081338+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a2ccf4f7-88db-440e-80fe-f865553f68be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26980", "type": "seen", "source": "https://t.me/VulnerabilityNews/42658", "content": "Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks\n\nThreat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks.\n\nAccording to QiAnXin XLab, the activity involves the exploitation of CVE-2026-26980 (CVSS score: 9.4), an SQL injection vulnerability in Ghost's Content API that could allow an unauthenticated attacker to read arbitrary data from the\nhttps://thehackernews.com/2026/05/ghost-cms-cve-2026-26980-exploited-to.html", "creation_timestamp": "2026-09-18T05:00:06.843599Z"} 2026-09-18T05:00:06.843599+00:00 https://vulnerability.circl.lu/sighting/582208df-0712-4802-9809-e91adfba2aee/export 2026-09-18T12:27:26.081456+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "582208df-0712-4802-9809-e91adfba2aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26980", "type": "seen", "source": "https://t.me/VulnerabilityNews/42642", "content": "Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign\n\nA large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. [...]\nhttps://www.bleepingcomputer.com/news/security/ghost-cms-sql-injection-flaw-exploited-in-large-scale-clickfix-campaign/", "creation_timestamp": "2026-09-18T05:00:06.793485Z"} 2026-09-18T05:00:06.793485+00:00 https://vulnerability.circl.lu/sighting/5d1e69dc-893c-4f7b-88fa-f4ceb0dc3df6/export 2026-09-18T12:27:26.081576+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5d1e69dc-893c-4f7b-88fa-f4ceb0dc3df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26265", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-26265.yaml", "content": "", "creation_timestamp": "2026-09-18T00:00:13.742646Z"} 2026-09-18T00:00:13.742646+00:00 https://vulnerability.circl.lu/sighting/42dcfab3-e8f3-4d00-a5dd-f6714d9b413b/export 2026-09-18T12:27:26.081671+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "42dcfab3-e8f3-4d00-a5dd-f6714d9b413b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:09.856398Z"} 2026-09-17T10:15:09.856398+00:00 https://vulnerability.circl.lu/sighting/150cbcde-c53f-4452-a892-9011a7ebebac/export 2026-09-18T12:27:26.081765+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "150cbcde-c53f-4452-a892-9011a7ebebac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:09.074386Z"} 2026-09-17T10:15:09.074386+00:00 https://vulnerability.circl.lu/sighting/38eab585-c17f-4338-86bd-3314b09de035/export 2026-09-18T12:27:26.081859+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "38eab585-c17f-4338-86bd-3314b09de035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:00:05.091708Z"} 2026-09-17T10:00:05.091708+00:00 https://vulnerability.circl.lu/sighting/22509ec4-abf6-4c1a-a98a-3ebce5f0ffe5/export 2026-09-18T12:27:26.081955+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "22509ec4-abf6-4c1a-a98a-3ebce5f0ffe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "Telegram/62gcesdJfEiUbIen6VNYpv9Wpfrn8s4bwEeJpK-9Ft26ADg", "content": "", "creation_timestamp": "2026-09-17T01:00:04.998696Z"} 2026-09-17T01:00:04.998696+00:00 https://vulnerability.circl.lu/sighting/a096477f-bf7b-4ad2-afc2-04933fcc2985/export 2026-09-18T12:27:26.082062+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a096477f-bf7b-4ad2-afc2-04933fcc2985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "Telegram/8Is-3SI6bO9GNCJOmvFyQfWUtIzeYjCZZGsfQ4Xpcb-6Qtk", "content": "", "creation_timestamp": "2026-09-17T01:00:04.845507Z"} 2026-09-17T01:00:04.845507+00:00