<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-11T23:02:22.051516+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/90f607a2-14ff-498c-b314-17f5b01918f1/export</id>
    <title>90f607a2-14ff-498c-b314-17f5b01918f1</title>
    <updated>2026-09-11T23:02:22.077392+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "90f607a2-14ff-498c-b314-17f5b01918f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81286", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mukkeslksq22", "content": "CVE-2026-81286 - wcfm marketplace\nVersions of the WCFM Marketplace plugin up through 3.8.1 allow anyone on the internet to send specially crafted requests that run database commands. This can let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wcfmmarketplace #wclovers #CVE #infosec", "creation_timestamp": "2026-09-02T18:20:04.551595Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/90f607a2-14ff-498c-b314-17f5b01918f1/export"/>
    <published>2026-09-02T18:20:04.551595+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fc91af27-0f13-4cac-b938-41f0d25e1a76/export</id>
    <title>fc91af27-0f13-4cac-b938-41f0d25e1a76</title>
    <updated>2026-09-11T23:02:22.082384+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fc91af27-0f13-4cac-b938-41f0d25e1a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81286", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muk4ahvex52t", "content": "\ud83d\udea8 CVE-2026-81286 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in WCFM Marketplace &amp;lt;= 3.8.1 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81286\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T14:07:06.707889Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fc91af27-0f13-4cac-b938-41f0d25e1a76/export"/>
    <published>2026-09-02T14:07:06.707889+00:00</published>
  </entry>
</feed>
