https://vulnerability.circl.lu/sightings/feed 2026-09-11T22:41:41.035522+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f690b74f-c08b-49a7-a7cc-5c93a7fc63d3/export 2026-09-11T22:41:41.061297+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f690b74f-c08b-49a7-a7cc-5c93a7fc63d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84795", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mukghostl62b", "content": "CVE-2026-84795 - cms\nVersions of Craft CMS older than 5.10.11 can let a person sign up using the email address of a former administrator and automatically receive admin privileges, but only when public\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-09-02T17:10:06.121665Z"} 2026-09-02T17:10:06.121665+00:00 https://vulnerability.circl.lu/sighting/c14f2131-0907-4bbb-9d07-5c50ea259516/export 2026-09-11T22:41:41.063949+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c14f2131-0907-4bbb-9d07-5c50ea259516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84795", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muk4b32moo22", "content": "\ud83d\udea8 CVE-2026-84795 \u2014 CVSS 9.2 CRITICAL\n\nCraft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84795\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T14:07:26.575547Z"} 2026-09-02T14:07:26.575547+00:00 https://vulnerability.circl.lu/sighting/166f9509-32b1-40ea-a373-f81db7bc9cd1/export 2026-09-11T22:41:41.064133+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "166f9509-32b1-40ea-a373-f81db7bc9cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-84795", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117201815744827307", "content": "https://nvd.nist.gov/vuln/detail/cve-2026-84795\nsev:CRIT 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\nCraft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist from deactivated admin accounts. Attackers can register with a deactivated admin's email address to inherit administrator privileges when public registration and disabled email verification are configured.\nSeems like a pretty limited scope but it's still interesting to see that sev:CRIT in the CVE when the advisory says sev:MED:\nhttps://github.com/craftcms/cms/security/advisories/GHSA-242m-9wq7-vhwq", "creation_timestamp": "2026-09-02T14:03:05.026683Z"} 2026-09-02T14:03:05.026683+00:00