https://vulnerability.circl.lu/sightings/feed 2026-07-03T21:42:37.007286+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a363f446-8237-4a3c-bdd0-9835bd651a67/export 2026-07-03T21:42:37.028058+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a363f446-8237-4a3c-bdd0-9835bd651a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5524", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpriufaj6y2u", "content": "CVE-2026-5524\nThe Divi Form Builder plugin for WordPress allows hackers to upload malicious files to the website, which can be used to take control of the site. This is a serious security risk that affects all versions of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-03T21:35:39.684753Z"} 2026-07-03T21:35:39.684753+00:00 https://vulnerability.circl.lu/sighting/2a8f223f-352e-4e74-812b-6ecde720ba65/export 2026-07-03T21:42:37.029596+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2a8f223f-352e-4e74-812b-6ecde720ba65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5524", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppnlm5eck2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5524 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Divi Form Builder: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 WordPress\n\n\n\nhttps://kripta.biz/posts/08F7D531-1ECB-4A9B-A0C6-8E8837A63595", "creation_timestamp": "2026-07-03T03:54:54.211492Z"} 2026-07-03T03:54:54.211492+00:00 https://vulnerability.circl.lu/sighting/b879054f-9fa6-4ec3-b1bd-53c36013ed46/export 2026-07-03T21:42:37.029692+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b879054f-9fa6-4ec3-b1bd-53c36013ed46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5524", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mpot3pwt7u2b", "content": "CVE-2026-5524 [CRITICAL] nginx\n\nThe Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8. This is due to insufficient file extension validation in th\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-5524", "creation_timestamp": "2026-07-02T20:00:44.466974Z"} 2026-07-02T20:00:44.466974+00:00 https://vulnerability.circl.lu/sighting/f55c71f3-0d56-4dd7-b44f-15f253abb59d/export 2026-07-03T21:42:37.029763+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f55c71f3-0d56-4dd7-b44f-15f253abb59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5524", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpo5c24aet2x", "content": "Divi Form Builder <=5.1.8 hit by CRITICAL RCE flaw \u2014 unauthenticated attackers can upload executable PHP files due to weak validation. Restrict uploads, monitor for patches. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-5524-cwe-434-unrestricted-upload-of-file--ef397843e92862b0 #OffSeq #WordPress #S...", "creation_timestamp": "2026-07-02T13:30:34.641050Z"} 2026-07-02T13:30:34.641050+00:00 https://vulnerability.circl.lu/sighting/58a625d1-32e9-4303-8ca7-ed18ea338271/export 2026-07-03T21:42:37.029831+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "58a625d1-32e9-4303-8ca7-ed18ea338271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5524", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116850624546842014", "content": "CVE-2026-5524: Divi Form Builder <=5.1.8 has a CRITICAL file upload vuln (CVSS 9.8). Unauth RCE possible via PHP extensions not blocked by .htaccess, esp. on Nginx. Restrict uploads, monitor for patch. https://radar.offseq.com/threat/cve-2026-5524-cwe-434-unrestricted-upload-of-file--ef397843e92862b0 #OffSeq #WordPress #Infosec #CVE2026_5524", "creation_timestamp": "2026-07-02T13:30:32.505483Z"} 2026-07-02T13:30:32.505483+00:00 https://vulnerability.circl.lu/sighting/79b86cb0-66eb-402d-8cdd-5da0a4ba7a64/export 2026-07-03T21:42:37.029898+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "79b86cb0-66eb-402d-8cdd-5da0a4ba7a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55249", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnl5nomc72l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55249 \u0432 @rtk-ai/rtk-rewrite: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/AEF0C20A-FB7C-4FBC-B843-DB2B35CCC1C0", "creation_timestamp": "2026-07-02T08:05:59.588028Z"} 2026-07-02T08:05:59.588028+00:00 https://vulnerability.circl.lu/sighting/e18541a4-118c-448c-bd58-727d17b1d482/export 2026-07-03T21:42:37.029966+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e18541a4-118c-448c-bd58-727d17b1d482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moybmxdeit2j", "content": "CVE-2026-55249 - @rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String\nCVE ID : CVE-2026-55249\n \n Published : June 23, 2026, 6:33 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : @rtk-ai/rtk-rewrite transparently rewrites shell commands exec...", "creation_timestamp": "2026-06-23T20:49:40.723172Z"} 2026-06-23T20:49:40.723172+00:00