https://vulnerability.circl.lu/sightings/feed 2026-07-27T21:46:50.945403+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/dcd13163-e0ef-4914-bc70-ced94a2dc9aa/export 2026-07-27T21:46:50.964672+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dcd13163-e0ef-4914-bc70-ced94a2dc9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnf3zxmbj2s", "content": "CVE-2026-16766 - catalyst::view::wkhtmltopdf\nCatalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl can be exploited by attackers to inject malicious code when generating PDFs. This can happen if your application\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rrwo #CVE #infosec", "creation_timestamp": "2026-07-27T17:08:05.714541Z"} 2026-07-27T17:08:05.714541+00:00 https://vulnerability.circl.lu/sighting/eb851439-43f2-4a71-80ae-190f1d2df896/export 2026-07-27T21:46:50.967456+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eb851439-43f2-4a71-80ae-190f1d2df896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrj2wcdbus2g", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-16766](https://github.com/mc7244/Catalyst-View-Wkhtmltopdf/issues/6)\nCatalyst::View::Wk...\nhttps://github.com/mc7244/Catalyst-View-Wkhtmltopdf/issues/6 #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-25T23:55:16.865184Z"} 2026-07-25T23:55:16.865184+00:00 https://vulnerability.circl.lu/sighting/c9bc22a6-e246-48a7-a173-018c49a4695a/export 2026-07-27T21:46:50.967627+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c9bc22a6-e246-48a7-a173-018c49a4695a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mriflkqhw526", "content": "CVE-2026-16766: Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options", "creation_timestamp": "2026-07-25T17:33:28.157881Z"} 2026-07-25T17:33:28.157881+00:00 https://vulnerability.circl.lu/sighting/70e32351-8b56-4d82-9235-8070efa2d920/export 2026-07-27T21:46:50.967748+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "70e32351-8b56-4d82-9235-8070efa2d920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16766", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrhiwcpizo2g", "content": "CVE-2026-16766: Catalyst::View::Wkhtmltopdf (<0.6.1) suffers CRITICAL OS command injection via PDF options. Upgrade to 0.6.1+ or migrate \u2014 no maintained patch. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-i...", "creation_timestamp": "2026-07-25T09:00:30.887845Z"} 2026-07-25T09:00:30.887845+00:00 https://vulnerability.circl.lu/sighting/335e0947-66a8-4f03-9553-87157956d4d1/export 2026-07-27T21:46:50.967871+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "335e0947-66a8-4f03-9553-87157956d4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16766", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116979795764810841", "content": "CVE-2026-16766: CRITICAL OS command injection in Catalyst::View::Wkhtmltopdf (<0.6.1). Exploitable via unsanitized PDF options \u2014 remote code execution possible. No maintained patch; upgrade to 0.6.1+ or migrate. https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-9e7c09567b0712f8 #OffSeq #infosec #perl #vuln", "creation_timestamp": "2026-07-25T09:00:29.001890Z"} 2026-07-25T09:00:29.001890+00:00