<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-27T21:34:34.598784+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f12e8867-bc4e-4f6a-a5f9-460dd828c1af/export</id>
    <title>f12e8867-bc4e-4f6a-a5f9-460dd828c1af</title>
    <updated>2026-09-27T21:34:34.642395+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f12e8867-bc4e-4f6a-a5f9-460dd828c1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2qaia72k", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97163: Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-97163\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:40.181317Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f12e8867-bc4e-4f6a-a5f9-460dd828c1af/export"/>
    <published>2026-09-27T12:22:40.181317+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/55923d39-a7e8-461a-b362-d2ba6110805e/export</id>
    <title>55923d39-a7e8-461a-b362-d2ba6110805e</title>
    <updated>2026-09-27T21:34:34.644691+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "55923d39-a7e8-461a-b362-d2ba6110805e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy4qbkl2u", "content": "CVE-2026-97163 - up plugin for joomla\nThe UP plugin for Joomla from lomart.fr (versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29) lets anyone on the internet add and run their own code on the server without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:06.574270Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/55923d39-a7e8-461a-b362-d2ba6110805e/export"/>
    <published>2026-09-26T22:20:06.574270+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/af44f510-00be-4445-8f31-4ce086bc4374/export</id>
    <title>af44f510-00be-4445-8f31-4ce086bc4374</title>
    <updated>2026-09-27T21:34:34.644832+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "af44f510-00be-4445-8f31-4ce086bc4374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://t.me/GithubRedTeam/103476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/af44f510-00be-4445-8f31-4ce086bc4374/export"/>
    <published>2026-09-26T22:00:08+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2e739fd4-e34d-4992-86a2-963d8d4b961e/export</id>
    <title>2e739fd4-e34d-4992-86a2-963d8d4b961e</title>
    <updated>2026-09-27T21:34:34.644952+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2e739fd4-e34d-4992-86a2-963d8d4b961e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2e739fd4-e34d-4992-86a2-963d8d4b961e/export"/>
    <published>2026-09-26T22:00:08+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4c939bc6-3cd6-4027-83ba-55b050a83c46/export</id>
    <title>4c939bc6-3cd6-4027-83ba-55b050a83c46</title>
    <updated>2026-09-27T21:34:34.645063+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4c939bc6-3cd6-4027-83ba-55b050a83c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103468", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97163\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:55:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC: Joomla UP (lomart.fr) unauthenticated GitHub mini-install / remote action deployment (\u22646.0.29). Detects plugin version, probes com_ajax install triggers. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97163\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4c939bc6-3cd6-4027-83ba-55b050a83c46/export"/>
    <published>2026-09-26T21:00:08+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5989218c-524e-493c-ac3c-ce727b9fa150/export</id>
    <title>5989218c-524e-493c-ac3c-ce727b9fa150</title>
    <updated>2026-09-27T21:34:34.645166+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5989218c-524e-493c-ac3c-ce727b9fa150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3asz3cg5gqaer", "content": "CVE-2026-97163 - Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97163\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr - Una...", "creation_timestamp": "2026-09-26T16:37:06.894117Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5989218c-524e-493c-ac3c-ce727b9fa150/export"/>
    <published>2026-09-26T16:37:06.894117+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/401c9655-3aed-41ca-a3b2-f66b36c96531/export</id>
    <title>401c9655-3aed-41ca-a3b2-f66b36c96531</title>
    <updated>2026-09-27T21:34:34.645275+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "401c9655-3aed-41ca-a3b2-f66b36c96531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7vkhiw2y", "content": "\ud83d\udea8 CVE-2026-97163 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0,...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97163\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:39.247953Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/401c9655-3aed-41ca-a3b2-f66b36c96531/export"/>
    <published>2026-09-26T16:08:39.247953+00:00</published>
  </entry>
</feed>
