https://vulnerability.circl.lu/sightings/feed 2026-09-24T05:08:43.839044+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/77d272c2-6c5d-4c6a-be20-0802b075f19d/export 2026-09-24T05:08:43.861103+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "77d272c2-6c5d-4c6a-be20-0802b075f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/wordpress-remote-code-execution-vulnerability_20260924", "content": "", "creation_timestamp": "2026-09-24T04:45:01.756957Z"} 2026-09-24T04:45:01.756957+00:00 https://vulnerability.circl.lu/sighting/e90b2bdd-f484-417b-b03a-28cb8c79523a/export 2026-09-24T05:08:43.862615+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e90b2bdd-f484-417b-b03a-28cb8c79523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaeubmwm62y", "content": "\ud83d\udcf0 CVE-2026-87902 Mulai Dieksploitasi, Hacker Targetkan WordPress untuk Eksekusi Kode\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-87902-wordpress-rce/\n\n#cpanel #cve #cybersecurity #php #rce #remoteCodeExecution #vulnerability #webSecurity #wordpress #wordpressSecu", "creation_timestamp": "2026-09-24T04:05:07.431196Z"} 2026-09-24T04:05:07.431196+00:00 https://vulnerability.circl.lu/sighting/b86921a4-e215-4a3a-9d24-d89e4f10edb1/export 2026-09-24T05:08:43.863693+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b86921a4-e215-4a3a-9d24-d89e4f10edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwacqkpmmk2d", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\n\nWordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated loc\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T03:27:15.079925Z"} 2026-09-24T03:27:15.079925+00:00 https://vulnerability.circl.lu/sighting/123ef7c3-65bf-4242-a153-12d213e6c494/export 2026-09-24T05:08:43.863826+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "123ef7c3-65bf-4242-a153-12d213e6c494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwac7jglow2z", "content": "WordPress RCE Vulnerability CVE-2026-87902: Critical Unauthenticated Flaw Exploited in the Wild\uff08WordPress\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u4e0d\u8981RCE\u8106\u5f31\u6027\u3001\u516c\u958b\u76f4\u5f8c\u304b\u3089\u653b\u6483\u3092\u89b3\u6e2c\uff09 #SecurityOnline (Sep 23)\n\nsecurityonline.info/wordpress-rc...", "creation_timestamp": "2026-09-24T03:17:43.475113Z"} 2026-09-24T03:17:43.475113+00:00 https://vulnerability.circl.lu/sighting/ec4dfe10-b633-43e6-8dda-5dbe0dfcc1b4/export 2026-09-24T05:08:43.863930+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ec4dfe10-b633-43e6-8dda-5dbe0dfcc1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwaaxflra42e", "content": "Exploited WordPress RCE Vulnerability: PoC Released for CVE-2026-87902\uff08\u5b9f\u60aa\u7528\u3055\u308c\u308bWordPress\u306e\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3001PoC\u3082\u516c\u958b\uff09 #SecurityOnline (Sep 24)\n\nsecurityonline.info/exploited-wo...", "creation_timestamp": "2026-09-24T02:55:16.919592Z"} 2026-09-24T02:55:16.919592+00:00 https://vulnerability.circl.lu/sighting/be6a10de-280f-4a7a-9c01-200404d2aa89/export 2026-09-24T05:08:43.864029+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "be6a10de-280f-4a7a-9c01-200404d2aa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/cyberkendra.com/post/3mwa6mp3zsk25", "content": "WordPress 7.1.2 fixes CVE-2026-87902, a critical no-login file inclusion flaw in core that can lead to code execution on some servers.\nwww.cyberkendra.com/2026/09/cve-...\n\n#wordpress #webdev #security", "creation_timestamp": "2026-09-24T02:13:34.937774Z"} 2026-09-24T02:13:34.937774+00:00 https://vulnerability.circl.lu/sighting/29c66cc8-566d-4ea2-85ff-9c5b21ab3766/export 2026-09-24T05:08:43.864137+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "29c66cc8-566d-4ea2-85ff-9c5b21ab3766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/news.hada.io/post/3mwa24z64pk2r", "content": "WordPress, \ub85c\uadf8\uc778 \uc5c6\uc774 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \uac00\ub2a5\ud55c \ucde8\uc57d\uc810 \uc218\uc815\n\n\ud14c\ub9c8 \ubc16\uc758 PHP \ud30c\uc77c\uc744 \ubd88\ub7ec\uc62c \uc218 \uc788\ub294 \uacbd\ub85c \uac80\uc99d \ubb38\uc81c\ub85c, \ud2b9\uc815 \ud14c\ub9c8\uc640 \uc11c\ubc84 \uc870\uac74\uc774 \ub9de\uc73c\uba74 \uc778\uc99d \uc5c6\uc774 \uc545\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. CVE-2026-87902, \uc2ec\uac01\ub3c4 9.2 Critical\uc774\uba70 7.1.2\uc5d0\uc11c \uc218\uc815\ub410\uc2b5\ub2c8\ub2e4. 4.7 \uacc4\uc5f4\uae4c\uc9c0 \ud328\uce58\uac00 \uc81c\uacf5\ub429\ub2c8\ub2e4.", "creation_timestamp": "2026-09-24T00:53:09.682653Z"} 2026-09-24T00:53:09.682653+00:00 https://vulnerability.circl.lu/sighting/a9bf4bf7-f1d5-41d1-8ed2-13cc4205d26d/export 2026-09-24T05:08:43.864245+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a9bf4bf7-f1d5-41d1-8ed2-13cc4205d26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mw7yjuuglv2c", "content": "CVE-2026-87902: Attackers Started Probing WordPress Sites Hours After the Patch", "creation_timestamp": "2026-09-24T00:24:33.225905Z"} 2026-09-24T00:24:33.225905+00:00 https://vulnerability.circl.lu/sighting/21d3bb1f-c3c3-445a-b6e8-6aef16b0d6a0/export 2026-09-24T05:08:43.864346+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "21d3bb1f-c3c3-445a-b6e8-6aef16b0d6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/projectdiscovery.bsky.social/post/3mw7vb2aho22f", "content": "\ud83d\udea8 CVE-2026-87902: WordPress remote code execution. Discover every WordPress site you run and see which ones are exploitable.\n\nTry for free with Neo: neo.projectdiscovery.io/sign-up?utm_...\n\n\"Find my WordPress sites and test them for CVE-2026-87902. Ask me for my domains, CIDRs, or ASNs.\"", "creation_timestamp": "2026-09-23T23:25:56.109141Z"} 2026-09-23T23:25:56.109141+00:00 https://vulnerability.circl.lu/sighting/c1bfb5ec-1625-4d16-8e2b-4ea3e721eaeb/export 2026-09-24T05:08:43.864446+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c1bfb5ec-1625-4d16-8e2b-4ea3e721eaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "content": "Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]", "creation_timestamp": "2026-09-23T22:00:43.051895Z"} 2026-09-23T22:00:43.051895+00:00