https://vulnerability.circl.lu/sightings/feed 2026-10-11T17:11:38.571162+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/42f5b188-4261-47f3-8415-05ba0f3c2355/export 2026-10-11T17:11:38.599763+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "42f5b188-4261-47f3-8415-05ba0f3c2355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkc3tx2wh22", "content": "\ud83d\udea8 CVE-2026-106610 \u2014 CVSS 9.8 CRITICAL\n\nIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verif...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-106610\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T20:07:29.089509Z"} 2026-10-10T20:07:29.089509+00:00 https://vulnerability.circl.lu/sighting/cb014cd0-da95-47ea-9bb6-8724dde0b82e/export 2026-10-11T17:11:38.602579+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cb014cd0-da95-47ea-9bb6-8724dde0b82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mxkb5xqvej2o", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-106610: Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-106610\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-10-10T19:50:46.210857Z"} 2026-10-10T19:50:46.210857+00:00 https://vulnerability.circl.lu/sighting/8d1c7a09-c3cc-4f8d-92df-abe0761f6923/export 2026-10-11T17:11:38.602912+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8d1c7a09-c3cc-4f8d-92df-abe0761f6923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxka3pwk642g", "content": "\ud83d\udd34 CVE-2026-106610 - Critical (9.8)\n\nIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-106610/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:31:37.457104Z"} 2026-10-10T19:31:37.457104+00:00 https://vulnerability.circl.lu/sighting/74f0b21f-2fd8-4da4-b7d5-e4d892140389/export 2026-10-11T17:11:38.603142+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "74f0b21f-2fd8-4da4-b7d5-e4d892140389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxk6vajsgp2n", "content": "CVE-2026-106610 - miniorange otp verification\nThe miniOrange OTP Verification plugin for WordPress (up to version 5.5.7) can incorrectly grant higher privileges than intended. This could allow a regular user or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#miniorange #CVE #infosec", "creation_timestamp": "2026-10-10T19:10:05.820082Z"} 2026-10-10T19:10:05.820082+00:00 https://vulnerability.circl.lu/sighting/4a9fd79a-2983-46aa-9c10-983c1a9a39cc/export 2026-10-11T17:11:38.603262+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4a9fd79a-2983-46aa-9c10-983c1a9a39cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418031336779525", "content": "CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106610https://patchstack.com/database/wordpress/plugin/miniorange-otp-verification/vulnerability/wordpress-miniorange-otp-verification-plugin-5-5-7-privilege-escalation-vulnerability?_s_id=cve#miniOrange #miniorangeotpverification#CVE_2026_106610#bot", "creation_timestamp": "2026-10-10T18:29:32.861642Z"} 2026-10-10T18:29:32.861642+00:00 https://vulnerability.circl.lu/sighting/bed6d03c-af85-4e28-943f-36ec7a94073d/export 2026-10-11T17:11:38.603345+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bed6d03c-af85-4e28-943f-36ec7a94073d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "published-proof-of-concept", "source": "Telegram/4hNeHS36zsvExvGlzuednv3uNbGR2hZwdosOZkBARt81j7I", "content": "", "creation_timestamp": "2026-10-09T03:00:05.000000Z"} 2026-10-09T03:00:05+00:00 https://vulnerability.circl.lu/sighting/120cd51b-3645-432a-a913-112afa9c1501/export 2026-10-11T17:11:38.603415+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "120cd51b-3645-432a-a913-112afa9c1501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "Telegram/4hNeHS36zsvExvGlzuednv3uNbGR2hZwdosOZkBARt81j7I", "content": "", "creation_timestamp": "2026-10-09T03:00:05.000000Z"} 2026-10-09T03:00:05+00:00 https://vulnerability.circl.lu/sighting/6d8d659f-bfd2-4ed5-9ecc-caeba4b11021/export 2026-10-11T17:11:38.603484+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6d8d659f-bfd2-4ed5-9ecc-caeba4b11021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104702", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-106610-miniorange-otp-ato\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KevineCharles\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 19:13:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC: miniOrange OTP Verification <=5.5.7 unauthenticated Account Takeover via OTP re-routing (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-08T20:00:07.000000Z"} 2026-10-08T20:00:07+00:00