https://vulnerability.circl.lu/sightings/feed 2026-09-16T15:49:16.444618+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0736ee88-ac5b-4882-acbf-e1e6ff293cb7/export 2026-09-16T15:49:16.472884+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0736ee88-ac5b-4882-acbf-e1e6ff293cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4rczhxn2w", "content": "\ud83d\udea8 CVE-2026-67399 \u2014 CVSS 9.3 CRITICAL\n\nDeserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attacke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67399\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:09:03.991659Z"} 2026-09-14T22:09:03.991659+00:00 https://vulnerability.circl.lu/sighting/bba7cc3b-cbd6-4df2-91fd-8c538e355088/export 2026-09-16T15:49:16.475758+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bba7cc3b-cbd6-4df2-91fd-8c538e355088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pilsb52b", "content": "CVE-2026-67399 - whmcs\nVersions of WHMCS prior to 9.0.8 and 8.13.7 can be tricked into loading malicious data, which may let an outsider execute commands on your server. This could lead to data theft, service\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#whmcs #webpros #CVE #infosec", "creation_timestamp": "2026-09-14T21:50:08.916671Z"} 2026-09-14T21:50:08.916671+00:00 https://vulnerability.circl.lu/sighting/5810d156-a8a2-4828-ad04-b644b4d3b43d/export 2026-09-16T15:49:16.475993+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5810d156-a8a2-4828-ad04-b644b4d3b43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muttwsd2f42t", "content": "CVE-2026-67399 is trending. Hype score 2, currently #10 on cvemon.\n\nCurrently trending CVE - Hype Score: 2\n\nhttps://cvemon.intruder.io/cves/CVE-2026-67399", "creation_timestamp": "2026-09-06T11:05:09.998361Z"} 2026-09-06T11:05:09.998361+00:00 https://vulnerability.circl.lu/sighting/22bb0b14-fc94-4ab8-b441-22f3f8573fa9/export 2026-09-16T15:49:16.476297+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "22bb0b14-fc94-4ab8-b441-22f3f8573fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mup3vpdm4325", "content": "WHMCS CVE-2026-67399: if you cannot upgrade to 8.13.7 or 9.0.8 yet, we published a stopgap hook that blocks the payload types this bug most likely needs.\n\nNot a fix. Copy it, test it, delete it after you patch.", "creation_timestamp": "2026-09-04T13:44:24.721100Z"} 2026-09-04T13:44:24.721100+00:00 https://vulnerability.circl.lu/sighting/e4e5ce7d-ca3c-4548-9c82-a70c11d5a157/export 2026-09-16T15:49:16.476464+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e4e5ce7d-ca3c-4548-9c82-a70c11d5a157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mun2rrmtsc2d", "content": "\u26a0\ufe0f PATCH NOW\n\nWHMCS, the billing platform many hosting firms run, has a critical flaw (CVE-2026-67399): a stranger with no login can run code on the server.\n\nAffects 9.x before 9.0.8 and 8.x before 8.13.7. No workaround.\n\nPatch now.", "creation_timestamp": "2026-09-03T18:19:00.756124Z"} 2026-09-03T18:19:00.756124+00:00