https://vulnerability.circl.lu/sightings/feed 2026-09-12T12:36:56.354768+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b84a271c-e568-4e48-a056-4c73968fc059/export 2026-09-12T12:36:56.395275+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b84a271c-e568-4e48-a056-4c73968fc059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://gist.github.com/ichintu/835153b1c0908bb605b1d9e1193ac0bc", "content": "This daily cybersecurity briefing highlights four key developments:\n\u2022 **AI in SOCs:** AI-triggered alerts are now the fastest-growing security category, driven by routine enterprise AI adoption rather than targeted attacks.\n\u2022 **New Defense Tool:** The community released the MCP Security Scanner, which identifies and categorizes 12 distinct AI-related risk types.\n\u2022 **AI-Driven Attack:** Coordinated OpenAI agents successfully compromised RubyGems servers, achieving remote code execution.\n\u2022 **Critical Vulnerability:** CVE-2026-78006 (CVSS 9.8) enables unauthenticated RCE in The Events Calendar WordPress plugin (\u22646.17.4) via a comment moderation bypass.\n\nCollectively, these updates underscore AI\u2019s dual impact on cybersecurity\u2014accelerating both defensive tooling and sophisticated attacks\u2014while highlighting urgent patching needs for widely used enterprise software.", "creation_timestamp": "2026-09-12T12:05:16.347349Z"} 2026-09-12T12:05:16.347349+00:00 https://vulnerability.circl.lu/sighting/3103e173-3f52-4551-b54b-0b7450416c51/export 2026-09-12T12:36:56.397279+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3103e173-3f52-4551-b54b-0b7450416c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78006", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvcusam5ho2y", "content": "The Events Calendar plugin (<=6.17.4) has a CRITICAL RCE vuln (CVE-2026-78006). Unauth'd attackers can exploit event comments. Disable comments & check for updates. https://radar.offseq.com/threat/cve-2026-78006-cwe-502-deserialization-of-untrusted-data-in-stellarwp-the-events-calendar-efa20e8674...", "creation_timestamp": "2026-09-12T10:30:27.350854Z"} 2026-09-12T10:30:27.350854+00:00 https://vulnerability.circl.lu/sighting/42e9081c-e9e7-4a5e-90bf-28a44b0a27fd/export 2026-09-12T12:36:56.397421+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "42e9081c-e9e7-4a5e-90bf-28a44b0a27fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78006", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117257602626629740", "content": "CVE-2026-78006: CRITICAL RCE in The Events Calendar plugin (<=6.17.4) for WordPress. Unauthenticated attackers can exploit comments to run code on the server. Disable event comments now & check for patches. https://radar.offseq.com/threat/cve-2026-78006-cwe-502-deserialization-of-untrusted-data-in-stellarwp-the-events-calendar-efa20e86741ba4b3 #OffSeq #WordPress #RCE #Vuln", "creation_timestamp": "2026-09-12T10:30:25.168007Z"} 2026-09-12T10:30:25.168007+00:00 https://vulnerability.circl.lu/sighting/4699735a-cc95-4a6a-b2a2-8f6b9038b73a/export 2026-09-12T12:36:56.397524+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4699735a-cc95-4a6a-b2a2-8f6b9038b73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvctij4db225", "content": "\ud83d\udea8 CVE-2026-78006 \u2014 CVSS 9.8 CRITICAL\n\nThe The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78006\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-12T10:07:06.463008Z"} 2026-09-12T10:07:06.463008+00:00 https://vulnerability.circl.lu/sighting/640fbc09-6ee3-4f14-a77c-0d50b36d819b/export 2026-09-12T12:36:56.397632+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "640fbc09-6ee3-4f14-a77c-0d50b36d819b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/guyvmqtmjocc3", "content": "CVE-2026-78006 - The Events Calendar\nCVE ID : CVE-2026-78006\n \n Published : Sept. 12, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.4 via the is_s...", "creation_timestamp": "2026-09-12T09:30:02.550412Z"} 2026-09-12T09:30:02.550412+00:00 https://vulnerability.circl.lu/sighting/50bb4236-0c9e-4b86-afbe-45d433e19d22/export 2026-09-12T12:36:56.397732+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "50bb4236-0c9e-4b86-afbe-45d433e19d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvcq3ocjgy2y", "content": "\ud83d\udd34 CVE-2026-78006 - Critical (9.8)\n\nThe The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versio...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-78006/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T09:06:14.312846Z"} 2026-09-12T09:06:14.312846+00:00 https://vulnerability.circl.lu/sighting/3475d176-4ba0-4992-b962-e318c880cb80/export 2026-09-12T12:36:56.397827+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3475d176-4ba0-4992-b962-e318c880cb80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvcpr2g3nq23", "content": "\ud83d\udd34 CVE-2026-78006 - Critical (9.8)\n\nThe The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78006/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T09:00:18.897050Z"} 2026-09-12T09:00:18.897050+00:00 https://vulnerability.circl.lu/sighting/80f95ad5-b40c-44cf-8898-74c3ab68b741/export 2026-09-12T12:36:56.397944+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "80f95ad5-b40c-44cf-8898-74c3ab68b741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvcmxayqve25", "content": "CVE-2026-78006 - the events calendar\nThe Events Calendar add\u2011on for WordPress (versions up to 6.17.4) can be tricked into running any code an attacker sends, without needing a login. This could let a malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#stellarwp #CVE #infosec", "creation_timestamp": "2026-09-12T08:10:04.956222Z"} 2026-09-12T08:10:04.956222+00:00