https://vulnerability.circl.lu/sightings/feed 2026-09-24T21:43:50.529049+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2428963d-1e36-4354-9f81-c973a2a7ff1b/export 2026-09-24T21:43:50.545303+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2428963d-1e36-4354-9f81-c973a2a7ff1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19125", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwagdzcy5h2g", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cThe EthPress\u300d\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u7f72\u540d\u691c\u8a3c\u5931\u6557\u5f8c\u3082\u30ed\u30b0\u30a4\u30f3\u51e6\u7406\u304c\u5b9f\u884c\u3055\u308c\u3001\u653b\u6483\u8005\u306f\u4efb\u610f\u306e\u30e6\u30fc\u30b6\u30fc\uff08\u7ba1\u7406\u8005\u542b\u3080\uff09\u306b\u306a\u308a\u3059\u307e\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19125 CVSS 8.1 | HIGH", "creation_timestamp": "2026-09-24T04:31:49.054946Z"} 2026-09-24T04:31:49.054946+00:00 https://vulnerability.circl.lu/sighting/08b7d3f1-caff-4f51-b052-2e058c772b37/export 2026-09-24T21:43:50.547164+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "08b7d3f1-caff-4f51-b052-2e058c772b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19125", "type": "seen", "source": "https://gist.github.com/ichintu/2e9991c851b75a7aa99639fafeaa0cae", "content": "This threat intelligence briefing highlights four critical security developments from late September 2026:\n\n\u2022 **Brocade SANnav (CVE-2026-82370, 8.6):** An unauthenticated remote command injection flaw in versions <3.0.1a allows attackers to execute administrative CLI and container commands, risking Fibre Channel fabric manipulation.\n\u2022 **Check Point Zero-Days (CVE-2026-85102 & CVE-2026-93616, both 9.8):** Two actively exploited, pre-authentication vulnerabilities compromise the Spark firewall and management service. With functional exploits reverse-engineered in ~3 days, immediate patching, management console isolation, and proactive threat hunting are strongly advised.\n\u2022 **EthPress WordPress Plugin (CVE-2026-19125, 8.1):** A missing `return` statement in versions \u22642.3.5 causes an unauthenticated authentication bypass, allowing attackers to impersonate any wallet-linked user and achieve full site takeover.\n\u2022 **Loopjacking:** A newly documented attack vector (arXiv) that hijacks human-in-the-loop approval mechanisms, introducing novel risks to manual security workflows.\n\n**Overall:** The current landscape emphasizes urgent remediation of high-severity, unauthenticated flaws in critical infrastructure and web plugins, alongside emerging threats targeting procedural and human-centric security controls.", "creation_timestamp": "2026-09-24T04:01:56.856339Z"} 2026-09-24T04:01:56.856339+00:00 https://vulnerability.circl.lu/sighting/6cffcde3-3c0f-4276-ad17-c9c18af9462d/export 2026-09-24T21:43:50.547284+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6cffcde3-3c0f-4276-ad17-c9c18af9462d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19125", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw7y45lbhn2c", "content": "\ud83d\udfe0 CVE-2026-19125 - High (8.1)\n\nThe EthPress \u2013 Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all ve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19125/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T00:16:53.447252Z"} 2026-09-24T00:16:53.447252+00:00