https://vulnerability.circl.lu/sightings/feed 2026-08-28T03:29:03.969464+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/173bc528-5766-41d8-bb56-ac5911023830/export 2026-08-28T03:29:03.994231+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "173bc528-5766-41d8-bb56-ac5911023830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mtqvvwdls62d", "content": "\ud83d\udea8 \ud83d\udd03 EverShop flaw enables account takeover\n\nCVE-2026-72843 lets attackers overwrite customer email and passwords using an exposed UUID; fixed in 2.2.1.\n\n\ud83d\udd17 read more: securityonline.info/...\n\n#ransomNews #cyberthreats #ecommerce \n", "creation_timestamp": "2026-08-23T13:37:16.729132Z"} 2026-08-23T13:37:16.729132+00:00 https://vulnerability.circl.lu/sighting/183fd915-6bf7-4596-beab-89dc111b20f2/export 2026-08-28T03:29:03.996007+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "183fd915-6bf7-4596-beab-89dc111b20f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtq635nmhs27", "content": "A critical EverShop account takeover flaw, CVE-2026-72843, exposes systems to an eCommerce platform vulnerability. Update to version 2.2.1 immediately.\n\n#EverShop #CyberSecurity #CVE202672843 #Vulnerability #eCommerce", "creation_timestamp": "2026-08-23T06:30:43.012327Z"} 2026-08-23T06:30:43.012327+00:00 https://vulnerability.circl.lu/sighting/227350f2-d847-4b36-9aca-125e30498f7b/export 2026-08-28T03:29:03.996152+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "227350f2-d847-4b36-9aca-125e30498f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtno4wm7fn25", "content": "CVE-2026-72843\nThe update\u2011customer API in EverShop does not require a login, so anyone can send a request with a known customer ID and change that person\u2019s email or password. This lets an attacker take over a customer\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:40:03.932529Z"} 2026-08-22T06:40:03.932529+00:00 https://vulnerability.circl.lu/sighting/a4f01ba5-012c-4470-8e8f-3dc649719752/export 2026-08-28T03:29:03.996261+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a4f01ba5-012c-4470-8e8f-3dc649719752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkjke23od2e", "content": "CVE-2026-72843 - evershop\nEverShop\u2019s API for updating a customer record does not check who is making the request. Anyone who knows a customer\u2019s identifier can send a request that changes the email\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#evershop #evershopcommerce #CVE #infosec", "creation_timestamp": "2026-08-21T00:40:05.034423Z"} 2026-08-21T00:40:05.034423+00:00 https://vulnerability.circl.lu/sighting/4f336a59-1fcd-4caa-b6f2-e8456999791b/export 2026-08-28T03:29:03.996364+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4f336a59-1fcd-4caa-b6f2-e8456999791b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhxja3xh23", "content": "\ud83d\udea8 CVE-2026-72843 \u2014 CVSS 9.3 CRITICAL\n\nThe customer update route in EverShop is declared with \"access\": \"public\" in packages/evershop/src/modules/...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72843\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:11:39.172024Z"} 2026-08-21T00:11:39.172024+00:00 https://vulnerability.circl.lu/sighting/f85a6388-9b62-4582-8dca-7ae46035de0b/export 2026-08-28T03:29:03.996467+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f85a6388-9b62-4582-8dca-7ae46035de0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdymxlgh27", "content": "\ud83d\udd34 CVE-2026-72843 - Critical (9.8)\n\nThe customer update route in EverShop is declared with \"access\": \"public\" in packages/evershop/sr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72843/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T23:00:42.885673Z"} 2026-08-20T23:00:42.885673+00:00