<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-11T10:48:31.639610+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eec6e37c-3479-49ad-a956-666a3286eb63/export</id>
    <title>eec6e37c-3479-49ad-a956-666a3286eb63</title>
    <updated>2026-09-11T10:48:31.663115+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eec6e37c-3479-49ad-a956-666a3286eb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv36hko4jm2m", "content": "\ud83d\udfe0 CVE-2026-76009 - High (8.1)\n\nThe Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76009/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T09:02:08.391074Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eec6e37c-3479-49ad-a956-666a3286eb63/export"/>
    <published>2026-09-09T09:02:08.391074+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0/export</id>
    <title>bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0</title>
    <updated>2026-09-11T10:48:31.664398+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6frwvztmdadfn", "content": "CVE-2026-76009 - Next-Cart Store to WooCommerce Migration\nCVE ID : CVE-2026-76009\n \n Published : 9. September 2026 06:17 | 42\u00a0Minuten ago\n \n Description : The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions u...", "creation_timestamp": "2026-09-09T07:05:49.979480Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0/export"/>
    <published>2026-09-09T07:05:49.979480+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/50c9f2ee-3fb0-4a6f-ab84-b457429b79e2/export</id>
    <title>50c9f2ee-3fb0-4a6f-ab84-b457429b79e2</title>
    <updated>2026-09-11T10:48:31.664516+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "50c9f2ee-3fb0-4a6f-ab84-b457429b79e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2ucq2csq2h", "content": "Next-Cart Store to WooCommerce Migration plugin (\u22643.9.8) hit by HIGH severity auth bypass \u2014 enables unauthenticated SQL execution &amp;amp; admin account creation. Check vendor guidance &amp;amp; monitor for patches. https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen19...", "creation_timestamp": "2026-09-09T06:00:28.471008Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/50c9f2ee-3fb0-4a6f-ab84-b457429b79e2/export"/>
    <published>2026-09-09T06:00:28.471008+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a528f2d2-73cf-4e07-a657-ae63ade7deeb/export</id>
    <title>a528f2d2-73cf-4e07-a657-ae63ade7deeb</title>
    <updated>2026-09-11T10:48:31.664615+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a528f2d2-73cf-4e07-a657-ae63ade7deeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239554096140693", "content": "CVE-2026-76009 (HIGH): Next-Cart Store to WooCommerce Migration \u22643.9.8 exposes an auth bypass via REST API. Attackers can execute arbitrary SQL &amp;amp; delete files \u2014 full site compromise possible. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen1990-next-cart-store-to-woocommerce-e35aad4a96ee528d #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-09-09T06:00:26.725303Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a528f2d2-73cf-4e07-a657-ae63ade7deeb/export"/>
    <published>2026-09-09T06:00:26.725303+00:00</published>
  </entry>
</feed>
