https://vulnerability.circl.lu/sightings/feed 2026-09-02T02:11:19.928328+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3bf83906-3c2d-419a-aafd-f37c95782d91/export 2026-09-02T02:11:19.958649+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3bf83906-3c2d-419a-aafd-f37c95782d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4anugu6y26", "content": "Attackers exploit CVE-2026-71362, an unauthenticated Adobe Commerce account takeover flaw (CVSS 9.1). Details and PoC are public. Patch now.\n\n#AdobeCommerce #Magento #CVE202671362 #AccountTakeover #ecommerce #InfoSec", "creation_timestamp": "2026-08-28T01:48:55.358150Z"} 2026-08-28T01:48:55.358150+00:00 https://vulnerability.circl.lu/sighting/4513f220-2200-401a-b7a3-20823e7b69ee/export 2026-09-02T02:11:19.960837+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4513f220-2200-401a-b7a3-20823e7b69ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:09.614271Z"} 2026-08-24T00:00:09.614271+00:00 https://vulnerability.circl.lu/sighting/4db61cb0-86f9-4343-984c-f66272090fec/export 2026-09-02T02:11:19.961067+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4db61cb0-86f9-4343-984c-f66272090fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.532067Z"} 2026-08-23T00:00:33.532067+00:00 https://vulnerability.circl.lu/sighting/37fb7ee4-1d91-411c-9183-03ba1d9e1dbe/export 2026-09-02T02:11:19.961249+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "37fb7ee4-1d91-411c-9183-03ba1d9e1dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:10.085657Z"} 2026-08-22T19:00:10.085657+00:00 https://vulnerability.circl.lu/sighting/9ac31bfb-1037-4967-97a2-fcf9db8d9133/export 2026-09-02T02:11:19.961428+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9ac31bfb-1037-4967-97a2-fcf9db8d9133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-22T00:00:12.581628Z"} 2026-08-22T00:00:12.581628+00:00 https://vulnerability.circl.lu/sighting/37fa5d05-c040-4be5-8f01-cb57622ca19e/export 2026-09-02T02:11:19.961597+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "37fa5d05-c040-4be5-8f01-cb57622ca19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/pphm_HackerNews/2623", "content": "\ud83d\udd34 Adobe Commerce Bug Targeted Immediately After Disclosure\n\nHackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports.\n\nTracked as CVE-2026-71362 (CVSS score of 9.1), the security defect is described as an incorrect authorization issue that allows unauthenticated attackers to elevate their privileges.\n\nAdobe resolved the flaw on August 2026 Patch Tuesday, saying it had no evidence of in-the-wild exploitation, but warning that threat actors have targeted Commerce before.", "creation_timestamp": "2026-08-22T00:00:08.607504Z"} 2026-08-22T00:00:08.607504+00:00 https://vulnerability.circl.lu/sighting/14ab632a-ee99-4734-ad96-2d0af3605cfe/export 2026-09-02T02:11:19.961732+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "14ab632a-ee99-4734-ad96-2d0af3605cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/pphm_HackerNews/2623", "content": "\ud83d\udd34 Adobe Commerce Bug Targeted Immediately After Disclosure\n\nHackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports.\n\nTracked as CVE-2026-71362 (CVSS score of 9.1), the security defect is described as an incorrect authorization issue that allows unauthenticated attackers to elevate their privileges.\n\nAdobe resolved the flaw on August 2026 Patch Tuesday, saying it had no evidence of in-the-wild exploitation, but warning that threat actors have targeted Commerce before.", "creation_timestamp": "2026-08-21T23:00:05.857216Z"} 2026-08-21T23:00:05.857216+00:00 https://vulnerability.circl.lu/sighting/bb520dcc-570f-46fc-997b-59326e7522ac/export 2026-09-02T02:11:19.961840+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bb520dcc-570f-46fc-997b-59326e7522ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-21T00:00:09.291061Z"} 2026-08-21T00:00:09.291061+00:00 https://vulnerability.circl.lu/sighting/c65ca7fb-9c72-45c4-82a2-8ee799fad894/export 2026-09-02T02:11:19.961943+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c65ca7fb-9c72-45c4-82a2-8ee799fad894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-20T00:00:11.544283Z"} 2026-08-20T00:00:11.544283+00:00 https://vulnerability.circl.lu/sighting/ef8c1ae2-cd43-44a7-80db-f6ff6b91d590/export 2026-09-02T02:11:19.962045+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "ef8c1ae2-cd43-44a7-80db-f6ff6b91d590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-21", "content": "", "creation_timestamp": "2026-08-19T04:45:03.592158Z"} 2026-08-19T04:45:03.592158+00:00