https://vulnerability.circl.lu/sightings/feed 2026-09-27T13:51:24.790329+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1359c928-b6ca-49b9-9a65-7ea6b5bc6187/export 2026-09-27T13:51:24.812628+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1359c928-b6ca-49b9-9a65-7ea6b5bc6187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2olp6w2l", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97161: Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 9.2\nhttps://beta.vulnsea.com/cve/CVE-2026-97161\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:38.284761Z"} 2026-09-27T12:22:38.284761+00:00 https://vulnerability.circl.lu/sighting/b7cc6290-84a7-4754-befe-8f176833e07b/export 2026-09-27T13:51:24.815808+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b7cc6290-84a7-4754-befe-8f176833e07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy2kuu32u", "content": "CVE-2026-97161 - up plugin for joomla\nThe UP plugin versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29 can be tricked into reading or writing files outside its intended folder. This could let an attacker view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:05.091660Z"} 2026-09-26T22:20:05.091660+00:00 https://vulnerability.circl.lu/sighting/dcb43201-5939-482c-a6c4-ac9ef5dcc490/export 2026-09-27T13:51:24.815974+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dcb43201-5939-482c-a6c4-ac9ef5dcc490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103469", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97161\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:50:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97161 PoC: Joomla UP (lomart.fr) unauthenticated path traversal / arbitrary file read via ajax-view (\u22646.0.29). Fingerprints plugin, probes configuration.php. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97161\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:09.000000Z"} 2026-09-26T21:00:09+00:00 https://vulnerability.circl.lu/sighting/0928943f-ce16-484a-a714-a35a8649acc5/export 2026-09-27T13:51:24.816065+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0928943f-ce16-484a-a714-a35a8649acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gk33f3nb27y54", "content": "CVE-2026-97161 - Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97161\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr -...", "creation_timestamp": "2026-09-26T16:49:06.492595Z"} 2026-09-26T16:49:06.492595+00:00 https://vulnerability.circl.lu/sighting/92c5898f-250f-488d-81ac-7a1102ffdbb7/export 2026-09-27T13:51:24.816159+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "92c5898f-250f-488d-81ac-7a1102ffdbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7nnf2p2r", "content": "\ud83d\udea8 CVE-2026-97161 \u2014 CVSS 9.2 CRITICAL\n\nJoomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97161\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:30.653247Z"} 2026-09-26T16:08:30.653247+00:00