<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-09T20:30:39.884538+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9e349230-edc3-4706-ab39-3b7c6b7ba913/export</id>
    <title>9e349230-edc3-4706-ab39-3b7c6b7ba913</title>
    <updated>2026-10-09T20:30:39.907110+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9e349230-edc3-4706-ab39-3b7c6b7ba913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxga25eofg24", "content": "CVE-2026-7826 - falkordb\nFalkorDB versions before 4.18.4 may read past the end of its memory when processing specially crafted replication data. An attacker who can send replication commands, such as on an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#falkordb #CVE #infosec", "creation_timestamp": "2026-10-09T05:20:05.248743Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9e349230-edc3-4706-ab39-3b7c6b7ba913/export"/>
    <published>2026-10-09T05:20:05.248743+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/10b97d4d-e268-443f-ba0b-b7ba2ab143bd/export</id>
    <title>10b97d4d-e268-443f-ba0b-b7ba2ab143bd</title>
    <updated>2026-10-09T20:30:39.909005+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "10b97d4d-e268-443f-ba0b-b7ba2ab143bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78260", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4nl73stz23", "content": "CVE-2026-78260 - epayco\nThe Epayco add\u2011on for WordPress (versions up to 8.4.6) can be accessed by anyone on the internet and used to send malicious commands to your website's database. This could let an attacker view,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epayco #CVE #infosec", "creation_timestamp": "2026-08-28T05:40:04.053818Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/10b97d4d-e268-443f-ba0b-b7ba2ab143bd/export"/>
    <published>2026-08-28T05:40:04.053818+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cd144631-4380-4576-a217-252f4a662476/export</id>
    <title>cd144631-4380-4576-a217-252f4a662476</title>
    <updated>2026-10-09T20:30:39.909137+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cd144631-4380-4576-a217-252f4a662476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78260", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2sr3w5dw2p", "content": "\ud83d\udea8 CVE-2026-78260 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Epayco &amp;lt;= 8.4.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78260\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:37.665656Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cd144631-4380-4576-a217-252f4a662476/export"/>
    <published>2026-08-27T12:07:37.665656+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/890e5945-82be-4f61-9008-28e462cc4695/export</id>
    <title>890e5945-82be-4f61-9008-28e462cc4695</title>
    <updated>2026-10-09T20:30:39.909240+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "890e5945-82be-4f61-9008-28e462cc4695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/480", "content": "CVE-2026-78267 - TranslatePress &amp;lt;= 3.3.2 Unauthenticated Privilege Escalation", "creation_timestamp": "2026-08-25T21:00:04.098918Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/890e5945-82be-4f61-9008-28e462cc4695/export"/>
    <published>2026-08-25T21:00:04.098918+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/052fee44-9ce5-44b2-b937-396bbf65fb42/export</id>
    <title>052fee44-9ce5-44b2-b937-396bbf65fb42</title>
    <updated>2026-10-09T20:30:39.909342+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "052fee44-9ce5-44b2-b937-396bbf65fb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/482", "content": "python scanner.py -t https://www.rapidseedbox.com/\n[*] Target: https://www.rapidseedbox.com\n[*] CVE-2026-78267 - TranslatePress &amp;lt;= 3.3.2 Unauthenticated Privilege Escalation\n\n[*] Stage 1: Product/Service Detection...\n[+] Stage 1: TranslatePress/WordPress detected\n\n[*] Stage 2: Version Detection...\n[+] Stage 2: Version 2.6.4 in vulnerable range (&amp;lt;= 3.3.2)\n\n[*] Stage 3: Active Vulnerability Testing...\n[*]   Running method: privilege_escalation\n[*]   Running method: access_check\n\n[NOT VULNERABLE]\nConfidence: 70%\nEvidence: No active privilege escalation indicators detected", "creation_timestamp": "2026-08-25T21:00:04.067685Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/052fee44-9ce5-44b2-b937-396bbf65fb42/export"/>
    <published>2026-08-25T21:00:04.067685+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6111f12b-2032-4eee-8d91-30b198730129/export</id>
    <title>6111f12b-2032-4eee-8d91-30b198730129</title>
    <updated>2026-10-09T20:30:39.909443+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6111f12b-2032-4eee-8d91-30b198730129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117156521289980161", "content": "CVE-2026-78264 - Unauthenticated XSS in Toolset Blocks &amp;lt;= 1.6.26. CVSS 7.1. Update immediately. #CVE #XSS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-78264/", "creation_timestamp": "2026-08-25T14:04:07.070787Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6111f12b-2032-4eee-8d91-30b198730129/export"/>
    <published>2026-08-25T14:04:07.070787+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f2cd4b6b-5da7-4541-be2d-671a4452b0fc/export</id>
    <title>f2cd4b6b-5da7-4541-be2d-671a4452b0fc</title>
    <updated>2026-10-09T20:30:39.909543+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f2cd4b6b-5da7-4541-be2d-671a4452b0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtvydptuwn2i", "content": "CVE-2026-78264 - Unauthenticated XSS in Toolset Blocks &amp;lt;= 1.6.26. CVSS 7.1. Update immediately. #CVE #XSS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-78264/", "creation_timestamp": "2026-08-25T14:04:06.049779Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f2cd4b6b-5da7-4541-be2d-671a4452b0fc/export"/>
    <published>2026-08-25T14:04:06.049779+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2418227b-7ce4-403b-84de-b6c295692fcb/export</id>
    <title>2418227b-7ce4-403b-84de-b6c295692fcb</title>
    <updated>2026-10-09T20:30:39.909665+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2418227b-7ce4-403b-84de-b6c295692fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviagth6v22", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78264](https://patchstack.com/database/wordpress/plugin/toolset-blocks/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/toolset-blocks/vulnerability/wordpress-toolset-blocks-plugin-1-6-26-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2026-08-25T09:15:56.260172Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2418227b-7ce4-403b-84de-b6c295692fcb/export"/>
    <published>2026-08-25T09:15:56.260172+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/afe3ecba-9ef4-49eb-a434-fdd4eea7efd2/export</id>
    <title>afe3ecba-9ef4-49eb-a434-fdd4eea7efd2</title>
    <updated>2026-10-09T20:30:39.909765+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "afe3ecba-9ef4-49eb-a434-fdd4eea7efd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.597687Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/afe3ecba-9ef4-49eb-a434-fdd4eea7efd2/export"/>
    <published>2026-08-25T09:00:04.597687+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/78217c3a-2403-4f64-a6c6-901b489085d1/export</id>
    <title>78217c3a-2403-4f64-a6c6-901b489085d1</title>
    <updated>2026-10-09T20:30:39.909863+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "78217c3a-2403-4f64-a6c6-901b489085d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78262", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.500138Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/78217c3a-2403-4f64-a6c6-901b489085d1/export"/>
    <published>2026-08-25T09:00:04.500138+00:00</published>
  </entry>
</feed>
