https://vulnerability.circl.lu/sightings/feed 2026-09-28T19:31:12.788420+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0fb4b54d-eb23-4ede-997f-59de86a1cb1c/export 2026-09-28T19:31:12.814891+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0fb4b54d-eb23-4ede-997f-59de86a1cb1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82384", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mwl2xtynod2b", "content": "\ud83d\udea8 CVE-2026-82384 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82384\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-28T10:07:26.647047Z"} 2026-09-28T10:07:26.647047+00:00 https://vulnerability.circl.lu/sighting/6975af45-1d26-42ea-af73-66d6b20436af/export 2026-09-28T19:31:12.816862+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6975af45-1d26-42ea-af73-66d6b20436af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82384", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwl2xtogrj2r", "content": "\ud83d\udea8 CVE-2026-82384 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82384\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T10:07:26.086579Z"} 2026-09-28T10:07:26.086579+00:00 https://vulnerability.circl.lu/sighting/911e973b-d3fb-4da0-a95a-a75cc6396c6f/export 2026-09-28T19:31:12.816995+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "911e973b-d3fb-4da0-a95a-a75cc6396c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82384", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2yuftt7tesng3", "content": "CVE-2026-82384 - Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint\nCVE ID : CVE-2026-82384\n \n Published : Sept. 28, 2026, 7:47 a.m. | 42\u00a0minutes ago\n \n Description : Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote ...", "creation_timestamp": "2026-09-28T09:04:19.984628Z"} 2026-09-28T09:04:19.984628+00:00 https://vulnerability.circl.lu/sighting/45cec91c-d74b-4286-b325-ddbc0b41f22d/export 2026-09-28T19:31:12.817114+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "45cec91c-d74b-4286-b325-ddbc0b41f22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82384", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwkxa3y7ih2e", "content": "Apache Roller 6.1.5 faces a CRITICAL flaw (CVE-2026-82384, CVSS 9.8): unauthenticated RCE possible via XML-RPC deserialization. Upgrade to 6.1.6+ immediately. https://radar.offseq.com/threat/cve-2026-82384-cwe-502-deserialization-of-untrusted-data-in-apache-software-foundation-apache-roller-9421d...", "creation_timestamp": "2026-09-28T09:00:29.661277Z"} 2026-09-28T09:00:29.661277+00:00 https://vulnerability.circl.lu/sighting/6ba1be3c-2235-401c-a18d-2cefdfccce9e/export 2026-09-28T19:31:12.817218+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6ba1be3c-2235-401c-a18d-2cefdfccce9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82384", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117347845822169869", "content": "Apache Roller 6.1.5 is vulnerable (CVE-2026-82384, CRITICAL, CVSS 9.8): unauthenticated remote deserialization can lead to RCE via XML-RPC \u2014 even if disabled. Upgrade to 6.1.6+ ASAP. https://radar.offseq.com/threat/cve-2026-82384-cwe-502-deserialization-of-untrusted-data-in-apache-software-foundation-apache-roller-9421d51972b16e3c #OffSeq #ApacheRoller #CVE202682384 #infosec", "creation_timestamp": "2026-09-28T09:00:27.040578Z"} 2026-09-28T09:00:27.040578+00:00 https://vulnerability.circl.lu/sighting/5212ad29-d019-4c9c-90a1-efad38fac273/export 2026-09-28T19:31:12.817321+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5212ad29-d019-4c9c-90a1-efad38fac273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82384", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103621", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82384\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 08:26:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82384 PoC: Apache Roller 6.1.5 unauthenticated XML-RPC ex:serializable Java deserialization (pre-auth RCE). Check, ysoserial exploit, mass bulk scanning, colored CLI. PoCbit \u2014 https://pocbit.org/pocs/cve-2026-82384\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T09:00:08.000000Z"} 2026-09-28T09:00:08+00:00 https://vulnerability.circl.lu/sighting/8af3346b-97b6-4732-826a-6e651df9ee2e/export 2026-09-28T19:31:12.817435+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8af3346b-97b6-4732-826a-6e651df9ee2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82384", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkw3mdgu525", "content": "CVE-2026-82384 - apache roller\nApache Roller version 6.1.5 lets anyone send specially crafted XML-RPC messages that are processed before anyone logs in. This can let an attacker make the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheroller #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-28T08:40:04.359722Z"} 2026-09-28T08:40:04.359722+00:00 https://vulnerability.circl.lu/sighting/c7e077d8-e0b8-494e-97a6-c5d48b181627/export 2026-09-28T19:31:12.817538+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c7e077d8-e0b8-494e-97a6-c5d48b181627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82384", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwkvhdvtdc2o", "content": "Apache Roller 6.1.5 has a critical pre-auth flaw (CVE-2026-82384, CVSS 9.8): its XML-RPC endpoint reads attacker data before any login, allowing remote code execution.\n\nDisabling XML-RPC does not help; the endpoint still answers.\n\nFix: upgrade to Roller 6.1.6.", "creation_timestamp": "2026-09-28T08:28:44.912522Z"} 2026-09-28T08:28:44.912522+00:00