https://vulnerability.circl.lu/sightings/feed 2026-09-14T10:06:54.762605+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/eabab310-894a-4bb2-b313-0a8fb3f5092e/export 2026-09-14T10:06:54.790482+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eabab310-894a-4bb2-b313-0a8fb3f5092e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90561", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvhjwehwaz2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 26 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 7 interactions\nCVE-2026-90561: 4 interactions\nCVE-2025-59287: 3 interactions\n", "creation_timestamp": "2026-09-14T06:59:12.780017Z"} 2026-09-14T06:59:12.780017+00:00 https://vulnerability.circl.lu/sighting/ba6a98e0-b0cb-4420-9070-0efb67cd1582/export 2026-09-14T10:06:54.793232+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ba6a98e0-b0cb-4420-9070-0efb67cd1582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90561", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvhdgjejaa25", "content": "Daily IT Security Digest \u2014 2026-09-14\nexploits.\n\n3. **Strapi Stored XSS (CVE-2026-90561, CVSS", "creation_timestamp": "2026-09-14T05:02:57.946415Z"} 2026-09-14T05:02:57.946415+00:00 https://vulnerability.circl.lu/sighting/848b5f6f-8023-4b61-a90b-6e6d32bde650/export 2026-09-14T10:06:54.793325+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "848b5f6f-8023-4b61-a90b-6e6d32bde650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90561", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117267511621881553", "content": "Strapi 4.x \u2013 4.26.2 & 5.x<5.48.1: CRITICAL stored XSS (CVE-2026-90561, CVSS 8.7) in WYSIWYG preview lets Author roles execute malicious scripts in higher-privileged sessions. Restrict roles & monitor vendor updates. https://radar.offseq.com/threat/strapi-versions-4x-through-4262-and-5x-before-5481-contain-a-stored-cross-site-scripting-vulnerability-e05bee9fce842336 #OffSeq #Strapi #XSS #Infosec", "creation_timestamp": "2026-09-14T04:30:29.361442Z"} 2026-09-14T04:30:29.361442+00:00 https://vulnerability.circl.lu/sighting/8fbc7029-8f06-4a09-ba70-0c1fded1f7da/export 2026-09-14T10:06:54.793398+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8fbc7029-8f06-4a09-ba70-0c1fded1f7da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90561", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvfpci67k72r", "content": "CVE-2026-90561 - strapi\nStrapi versions up to 4.26.2 and before 5.48.1 allow a user with author rights to save malicious code in rich\u2011text fields. When an editor or super\u2011admin opens the preview pane, that code runs\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#strapi #CVE #infosec", "creation_timestamp": "2026-09-13T13:30:08.726185Z"} 2026-09-13T13:30:08.726185+00:00 https://vulnerability.circl.lu/sighting/375c8ee6-4033-445c-b067-65fd2fc19f4a/export 2026-09-14T10:06:54.793462+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "375c8ee6-4033-445c-b067-65fd2fc19f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90561", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvfko24id22j", "content": "\ud83d\udea8 CVE-2026-90561 \u2014 CVSS 9.3 CRITICAL\n\nStrapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerabilit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90561\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-13T12:07:07.613524Z"} 2026-09-13T12:07:07.613524+00:00 https://vulnerability.circl.lu/sighting/17bddd22-5794-4efc-85a9-6bea6c1c0c06/export 2026-09-14T10:06:54.793529+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "17bddd22-5794-4efc-85a9-6bea6c1c0c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90561", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfkh3kzys22", "content": "\ud83d\udfe0 CVE-2026-90561 - High (8.7)\n\nStrapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90561/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-13T12:03:15.192172Z"} 2026-09-13T12:03:15.192172+00:00