<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T02:37:49.399420+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c4e6d16c-54c2-4f00-a6c8-10cd6ecba45d/export</id>
    <title>c4e6d16c-54c2-4f00-a6c8-10cd6ecba45d</title>
    <updated>2026-10-11T02:37:49.424895+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c4e6d16c-54c2-4f00-a6c8-10cd6ecba45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93944", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxk5klcgub24", "content": "\ud83d\udd34 CVE-2026-93944 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object I...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93944/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T18:46:15.283117Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c4e6d16c-54c2-4f00-a6c8-10cd6ecba45d/export"/>
    <published>2026-10-10T18:46:15.283117+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/496bde7d-20f6-48a4-a265-88bf5dcc7fad/export</id>
    <title>496bde7d-20f6-48a4-a265-88bf5dcc7fad</title>
    <updated>2026-10-11T02:37:49.426894+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "496bde7d-20f6-48a4-a265-88bf5dcc7fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93944", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117416855139300181", "content": "CVE-2026-93944: CRITICAL deserialization vuln in ThemeREX Camelia (&amp;lt;=1.2.15). Allows remote object injection &amp;amp; full system compromise. No patch yet \u2014 limit exposure, monitor vendor. \ud83d\udd0e https://radar.offseq.com/threat/cve-2026-93944-deserialization-of-untrusted-data-in-themerex-group-camelia-9f283474b74167fd #OffSeq #Infosec #Vulnerability", "creation_timestamp": "2026-10-10T13:30:31.243029Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/496bde7d-20f6-48a4-a265-88bf5dcc7fad/export"/>
    <published>2026-10-10T13:30:31.243029+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b7a6470f-427a-4f61-ba02-b000b82175f5/export</id>
    <title>b7a6470f-427a-4f61-ba02-b000b82175f5</title>
    <updated>2026-10-11T02:37:49.427034+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b7a6470f-427a-4f61-ba02-b000b82175f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93944", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxjlvvptkd2w", "content": "ThemeREX Camelia (&amp;lt;=1.2.15) faces a CRITICAL deserialization flaw \u2014 remote attackers can fully compromise systems. Patch status unknown: restrict access &amp;amp; check vendor updates now. https://radar.offseq.com/threat/cve-2026-93944-deserialization-of-untrusted-data-in-themerex-group-camelia-9f283474b...", "creation_timestamp": "2026-10-10T13:30:27.641265Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b7a6470f-427a-4f61-ba02-b000b82175f5/export"/>
    <published>2026-10-10T13:30:27.641265+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d2e36c00-911a-44e1-bdbe-29d63898b869/export</id>
    <title>d2e36c00-911a-44e1-bdbe-29d63898b869</title>
    <updated>2026-10-11T02:37:49.427138+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d2e36c00-911a-44e1-bdbe-29d63898b869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93944", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjapf6qve2q", "content": "\ud83d\udea8 CVE-2026-93944 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.T...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93944\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:09:57.157336Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d2e36c00-911a-44e1-bdbe-29d63898b869/export"/>
    <published>2026-10-10T10:09:57.157336+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0ec9d202-6516-4eac-91e4-b86c3f1d08d9/export</id>
    <title>0ec9d202-6516-4eac-91e4-b86c3f1d08d9</title>
    <updated>2026-10-11T02:37:49.427245+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0ec9d202-6516-4eac-91e4-b86c3f1d08d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93944", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj5wadcdk2z", "content": "CVE-2026-93944 - camelia\nThe Camelia theme up to version 1.2.15 can accept crafted data that leads to unwanted code running on your site. An attacker could use this to take control of the WordPress\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#camelia #themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T09:20:05.728437Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0ec9d202-6516-4eac-91e4-b86c3f1d08d9/export"/>
    <published>2026-10-10T09:20:05.728437+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bb7f4853-5047-4e0b-bffc-1c6674bf1dd7/export</id>
    <title>bb7f4853-5047-4e0b-bffc-1c6674bf1dd7</title>
    <updated>2026-10-11T02:37:49.427351+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bb7f4853-5047-4e0b-bffc-1c6674bf1dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93944", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415440062371247", "content": "CVE-2026-93944 WordPress Camelia theme &amp;lt;= 1.2.15 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93944https://patchstack.com/database/wordpress/theme/camelia/vulnerability/wordpress-camelia-theme-1-2-15-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Camelia#CVE_2026_93944#bot", "creation_timestamp": "2026-10-10T07:30:33.128506Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bb7f4853-5047-4e0b-bffc-1c6674bf1dd7/export"/>
    <published>2026-10-10T07:30:33.128506+00:00</published>
  </entry>
</feed>
