https://vulnerability.circl.lu/sightings/feed 2026-07-23T23:20:25.688209+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/acc8dca6-6c5a-4cde-8962-b870cf2fd48c/export 2026-07-23T23:20:25.703725+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "acc8dca6-6c5a-4cde-8962-b870cf2fd48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116941397090424685", "content": "CVE-2026-48062 - Unpatched Code Execution in CodeIgniter. MIME validation bypass allows PHP file upload with GIF content. CVSS 9.8. Update to 4.7.3 immediately. #CVE #CodeIgniter #infosec\nhttps://www.valtersit.com/cve/CVE-2026-48062/", "creation_timestamp": "2026-07-18T14:15:11.480005Z"} 2026-07-18T14:15:11.480005+00:00 https://vulnerability.circl.lu/sighting/4f7514f2-9e6a-4cea-a026-50c17d62a32f/export 2026-07-23T23:20:25.705809+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4f7514f2-9e6a-4cea-a026-50c17d62a32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqwha4guu32t", "content": "CVE-2026-48062 - Unpatched Code Execution in CodeIgniter. MIME validation bypass allows PHP file upload with GIF content. CVSS 9.8. Update to 4.7.3 immediately. #CVE #CodeIgniter #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48062/", "creation_timestamp": "2026-07-18T14:14:56.220121Z"} 2026-07-18T14:14:56.220121+00:00 https://vulnerability.circl.lu/sighting/97fad8ff-7f7c-4637-88c5-c328b759298e/export 2026-07-23T23:20:25.705945+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "97fad8ff-7f7c-4637-88c5-c328b759298e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvvoemqk32a", "content": "\ud83d\udd34 CVE-2026-48062 - Critical (9.8)\n\nCodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the ext_in upload validation rule ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48062/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T09:00:47.434271Z"} 2026-07-18T09:00:47.434271+00:00 https://vulnerability.circl.lu/sighting/f0cdd9eb-6c20-48a3-a4df-0a49b133788f/export 2026-07-23T23:20:25.706056+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f0cdd9eb-6c20-48a3-a4df-0a49b133788f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquojfihof2j", "content": "CVE-2026-48062 - framework\nCodeIgniter4, a popular web development framework, has a security issue that allows malicious PHP files to be uploaded. This can happen if your application allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#framework #codeigniter4 #composer #CVE #infosec", "creation_timestamp": "2026-07-17T21:20:04.737105Z"} 2026-07-17T21:20:04.737105+00:00 https://vulnerability.circl.lu/sighting/4d18488c-d9d8-4481-a240-65dadee65405/export 2026-07-23T23:20:25.706160+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4d18488c-d9d8-4481-a240-65dadee65405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116880021750277483", "content": "\u26a0\ufe0f CVE-2026-48062: CodeIgniter4 RCE RiskCodeIgniter4 has a critical ext_in upload validation bypass with a CVSS 9.8 severity score.\nUnder unsafe upload configurations, a malicious file may bypass extension checks and potentially lead to remote code execution.\nFOFA reports 14,862 matching CodeIgniter results over the past year.\nRisk conditions:\n\u2022 User-controlled uploads\u2022 ext_in used for validation\u2022 Original filenames preserved\u2022 Uploads stored in a web-accessible path\u2022 Script execution allowed in that directory\nPatch: upgrade to CodeIgniter4 4.7.3+\nFOFA Query: app=\"CodeIgniter\"\nFOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJDb2RlSWduaXRlciI=\nSearch results are not confirmed vulnerable hosts. Validate before taking action.", "creation_timestamp": "2026-07-07T18:06:56.031469Z"} 2026-07-07T18:06:56.031469+00:00