<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-10T18:59:02.592281+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18dd278d-1dcd-4ec0-aec2-ba370a08711a/export</id>
    <title>18dd278d-1dcd-4ec0-aec2-ba370a08711a</title>
    <updated>2026-09-10T18:59:02.612916+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18dd278d-1dcd-4ec0-aec2-ba370a08711a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75650", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv5wefeoqm2b", "content": "CVE-2026-75650: CVSS 10.0 zero-day in Adobe Commerce and Magento, actively exploited via template injection to deploy Rust\u2026 https://0daynews.com/articles/2026-09-09-adobe-stylesmuggler-cve-2026-75650-patch/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-1570", "creation_timestamp": "2026-09-10T11:15:10.809748Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18dd278d-1dcd-4ec0-aec2-ba370a08711a/export"/>
    <published>2026-09-10T11:15:10.809748+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0d28d39f-18f7-431a-a492-3f9da0732407/export</id>
    <title>0d28d39f-18f7-431a-a492-3f9da0732407</title>
    <updated>2026-09-10T18:59:02.615093+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0d28d39f-18f7-431a-a492-3f9da0732407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mv5raafrlv2z", "content": "Executive alert: CVE-2026-75650 actively threatens Adobe Commerce and Magento infrastructure. Review board-ready risk evaluation protocols, asset integrity measures, and strategic remediation steps to protect your enterprise value today.\n\nhttps://thecybermind.co/hip4", "creation_timestamp": "2026-09-10T09:43:23.811669Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0d28d39f-18f7-431a-a492-3f9da0732407/export"/>
    <published>2026-09-10T09:43:23.811669+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f346bbd6-dc61-4825-b282-fc0a65aa6ea9/export</id>
    <title>f346bbd6-dc61-4825-b282-fc0a65aa6ea9</title>
    <updated>2026-09-10T18:59:02.615238+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f346bbd6-dc61-4825-b282-fc0a65aa6ea9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f980a061-7bb8-490b-ab20-3a039e8543cb", "content": "", "creation_timestamp": "2026-09-10T07:10:09.444419Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f346bbd6-dc61-4825-b282-fc0a65aa6ea9/export"/>
    <published>2026-09-10T07:10:09.444419+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7/export</id>
    <title>a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7</title>
    <updated>2026-09-10T18:59:02.615329+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75650", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv557praqc2r", "content": "Adobe emergency patch (Sep 8) fixes CVE-2026-75650, CVSS 10.0 template-injection zero-day in Magento/Commerce. StyleSmuggler\u2026 https://0daynews.com/articles/2026-09-09-adobe-stylesmuggler-cve-2026-75650-patch/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-1569", "creation_timestamp": "2026-09-10T03:45:10.700027Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7/export"/>
    <published>2026-09-10T03:45:10.700027+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e2084e48-af8d-4cac-9d12-5395abc133d1/export</id>
    <title>e2084e48-af8d-4cac-9d12-5395abc133d1</title>
    <updated>2026-09-10T18:59:02.615418+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e2084e48-af8d-4cac-9d12-5395abc133d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mv4txuhoed2y", "content": "Critical CVE-2026-75650 alert for Adobe Commerce and Magento. Active CISA KEV exploitation requires immediate template parsing audits and endpoint hardening. Access our technical forensic brief to secure your enterprise perimeter today.\n\nhttps://thecybermind.co/8in9", "creation_timestamp": "2026-09-10T00:59:43.646576Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e2084e48-af8d-4cac-9d12-5395abc133d1/export"/>
    <published>2026-09-10T00:59:43.646576+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b3de3ce1-47dd-46a5-b675-6be05560b057/export</id>
    <title>b3de3ce1-47dd-46a5-b675-6be05560b057</title>
    <updated>2026-09-10T18:59:02.615509+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b3de3ce1-47dd-46a5-b675-6be05560b057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://t.me/information_security_channel/55868", "content": "Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day\nhttps://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/\n\nTracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code.\nThe post Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day (https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T00:00:55.098300Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b3de3ce1-47dd-46a5-b675-6be05560b057/export"/>
    <published>2026-09-10T00:00:55.098300+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0ec357b5-0220-4d8a-9458-ca1f3b4c55a3/export</id>
    <title>0ec357b5-0220-4d8a-9458-ca1f3b4c55a3</title>
    <updated>2026-09-10T18:59:02.615602+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0ec357b5-0220-4d8a-9458-ca1f3b4c55a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101768", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a stylesmuggler-ioc-toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 05:37:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells, persistence artifacts, and known indicators of compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:44.793995Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0ec357b5-0220-4d8a-9458-ca1f3b4c55a3/export"/>
    <published>2026-09-10T00:00:44.793995+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3617d6ea-f75c-4ad1-ad53-fa40ea161224/export</id>
    <title>3617d6ea-f75c-4ad1-ad53-fa40ea161224</title>
    <updated>2026-09-10T18:59:02.615689+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3617d6ea-f75c-4ad1-ad53-fa40ea161224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "published-proof-of-concept", "source": "Telegram/nMh_3ts5dc8zkSwTaV9m7alIl_ypUPowc3P5Zcio_q1A5ss", "content": "", "creation_timestamp": "2026-09-10T00:00:24.054771Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3617d6ea-f75c-4ad1-ad53-fa40ea161224/export"/>
    <published>2026-09-10T00:00:24.054771+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/43eb7f25-22e4-469b-b2ec-2c337fd29b9f/export</id>
    <title>43eb7f25-22e4-469b-b2ec-2c337fd29b9f</title>
    <updated>2026-09-10T18:59:02.615767+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "43eb7f25-22e4-469b-b2ec-2c337fd29b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "exploited", "source": "https://t.me/HackingTeamGrupoOfficial/48950", "content": "CVE-2026-75650: Adobe Commerce and Magento Open Source RCE vulnerability (StyleSmuggler) exploited in the wild, 10.0 rating \u200d\ud83d\udd25\n\nRecently disclosed vulnerability in Adobe Commerce and Magento Open Source allows an unauthenticated attacker to execute arbitrary code. This vulnerability is being actively exploited in the wild!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bX5dx\n\ud83d\udc49 Dork: tag.name:\"magento\"\n\nRead more :\nhttps://sansec.io/research/stylesmuggler-0day", "creation_timestamp": "2026-09-10T00:00:11.635429Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/43eb7f25-22e4-469b-b2ec-2c337fd29b9f/export"/>
    <published>2026-09-10T00:00:11.635429+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2059f11c-6ddc-470d-bba4-54a8c4dfc22d/export</id>
    <title>2059f11c-6ddc-470d-bba4-54a8c4dfc22d</title>
    <updated>2026-09-10T18:59:02.615855+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2059f11c-6ddc-470d-bba4-54a8c4dfc22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mv4gzlflei22", "content": "\ud83d\udea8 CVE-2026-75650 (critical-severity) affects Magento Open Source 2.4.4 through 2.4.9. Unauthenticated template injection leads to RCE, no user interaction needed. Actively exploited in the wild. Apply the VULN-39341 hotfix via Composer, no version upgrade yet. \nMore: buff.ly/rMKge9t", "creation_timestamp": "2026-09-09T21:08:02.546690Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2059f11c-6ddc-470d-bba4-54a8c4dfc22d/export"/>
    <published>2026-09-09T21:08:02.546690+00:00</published>
  </entry>
</feed>
