<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-29T20:54:09.714395+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/41f37002-9d94-4fc5-b4cb-9fb2758e02ed/export</id>
    <title>41f37002-9d94-4fc5-b4cb-9fb2758e02ed</title>
    <updated>2026-05-29T20:54:09.729764+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "41f37002-9d94-4fc5-b4cb-9fb2758e02ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116544182422691954", "content": "Spoiler de l'\u00e9pisode de hier : cPanel a bien livr\u00e9 les d\u00e9tails techniques en m\u00eame temps que les patchs. Au menu de l'after :\n\u2022 CVE-2026-29201 : path traversal :8bitrainbow:  via feature::LOADFEATUREFILE \u2192 fichier arbitraire en world-readable\u2022 CVE-2026-29202 : injection Perl dans create_user (param\u00e8tre plugin)\u2022 CVE-2026-29203 : symlink mal g\u00e9r\u00e9 \u2192 chmod arbitraire \u2192 DoS + escalade de privil\u00e8ges\n/scripts/upcp et go apero!Bon courage aux admins de garde \ud83e\udee1\nhttps://docs.cpanel.net/changelogs/134-change-log/#134025\nhttps://vulnerability.circl.lu/vuln/CVE-2026-29203\n#CyberVeille #cpanel #CVE_2026_29203#CVE_2026_29202#CVE_2026_29201", "creation_timestamp": "2026-05-09T10:38:17.069005Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/41f37002-9d94-4fc5-b4cb-9fb2758e02ed/export"/>
    <published>2026-05-09T10:38:17.069005+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bc224517-8a2e-4e01-a48c-e03adfaf197e/export</id>
    <title>bc224517-8a2e-4e01-a48c-e03adfaf197e</title>
    <updated>2026-05-29T20:54:09.729684+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bc224517-8a2e-4e01-a48c-e03adfaf197e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mlgzzadeim2l", "content": "cPanel updates fix 3 vulnerabilities in cPanel &amp;amp; WHM, including privilege escalation &amp;amp; DoS. CVE-2026-29201 has a CVSS score of 4.3. Update now to stay secure!", "creation_timestamp": "2026-05-09T20:02:32.789309Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bc224517-8a2e-4e01-a48c-e03adfaf197e/export"/>
    <published>2026-05-09T20:02:32.789309+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cd4167b3-c43e-460d-85c4-77c88512f9ca/export</id>
    <title>cd4167b3-c43e-460d-85c4-77c88512f9ca</title>
    <updated>2026-05-29T20:54:09.729605+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cd4167b3-c43e-460d-85c4-77c88512f9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3mlhlj7bx752u", "content": "cPanel released a second emergency security patch for three new high-severity vulnerabilities (CVE-2026-29201, CVE-2026-29202, CVE-2026-29203) on May 8, 2026, following a major ransomware attack. This indicates a deeper code audit after the previous compromise.", "creation_timestamp": "2026-05-10T01:15:42.352667Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cd4167b3-c43e-460d-85c4-77c88512f9ca/export"/>
    <published>2026-05-10T01:15:42.352667+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0bde6635-d7a8-4751-84a1-b75ee06f3412/export</id>
    <title>0bde6635-d7a8-4751-84a1-b75ee06f3412</title>
    <updated>2026-05-29T20:54:09.729519+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0bde6635-d7a8-4751-84a1-b75ee06f3412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mli2inlydw2y", "content": "Critical: Three New cPanel &amp;amp; WHM Vulnerabilities (CVEs 2026-29201/2/3) Threaten Code Execution and DoS \u2014 Patch Immediately +\u00a0Video\n\nIntroduction: Three newly disclosed critical security vulnerabilities in cPanel &amp;amp; WHM, tracked as CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203, could allow\u2026", "creation_timestamp": "2026-05-10T05:43:50.404246Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0bde6635-d7a8-4751-84a1-b75ee06f3412/export"/>
    <published>2026-05-10T05:43:50.404246+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3ef53f68-cef1-4879-9a01-6bd7ec2a975c/export</id>
    <title>3ef53f68-cef1-4879-9a01-6bd7ec2a975c</title>
    <updated>2026-05-29T20:54:09.729437+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3ef53f68-cef1-4879-9a01-6bd7ec2a975c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mlizxrgkd32y", "content": "Critical vulnerabilities in cPanel &amp;amp; WHM (CVE-2026-29201, CVE-2026-29202, CVE-2026-29203) expose servers to RCE and DoS attacks. Admins must update immediately. #CyberSecurity #cPanel #WHM #Vulnerability Link: thedailytechfeed.com/critical-cpa...", "creation_timestamp": "2026-05-10T15:07:03.814198Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3ef53f68-cef1-4879-9a01-6bd7ec2a975c/export"/>
    <published>2026-05-10T15:07:03.814198+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/219db91c-02d5-499b-90ba-b67b6c9dec0d/export</id>
    <title>219db91c-02d5-499b-90ba-b67b6c9dec0d</title>
    <updated>2026-05-29T20:54:09.729354+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "219db91c-02d5-499b-90ba-b67b6c9dec0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mlizyboth425", "content": "Critical vulnerabilities in cPanel &amp;amp; WHM (CVE-2026-29201, CVE-2026-29202, CVE-2026-29203) expose servers to RCE and DoS attacks. Admins must update immediately. #PotatoSecurity #cPanel #WHM #Vulnerability Link: thedailytechfeed.com/critical-cpa...", "creation_timestamp": "2026-05-10T15:07:19.748015Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/219db91c-02d5-499b-90ba-b67b6c9dec0d/export"/>
    <published>2026-05-10T15:07:19.748015+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31acdaa4-d9dc-42cd-aa3b-2d9de01d1736/export</id>
    <title>31acdaa4-d9dc-42cd-aa3b-2d9de01d1736</title>
    <updated>2026-05-29T20:54:09.729262+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31acdaa4-d9dc-42cd-aa3b-2d9de01d1736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mlj6rgbnzch2", "content": "New cPanel vulnerabilities could allow file access and remote code execution cPanel fixed three flaws that could allow file reads, code execution, and privilege escalation. No active exploitation h...\n\n#Breaking #News #Security #cPanel #CVE-2026-29201 #CVE-2026-29202 #CVE-2026-29203 #Cybercrime [\u2026]", "creation_timestamp": "2026-05-10T16:33:03.184530Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31acdaa4-d9dc-42cd-aa3b-2d9de01d1736/export"/>
    <published>2026-05-10T16:33:03.184530+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d978685c-e91f-4161-99c1-5024075fada9/export</id>
    <title>d978685c-e91f-4161-99c1-5024075fada9</title>
    <updated>2026-05-29T20:54:09.729157+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d978685c-e91f-4161-99c1-5024075fada9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mlka652tl522", "content": "Top 3 CVE for last 7 days:\nCVE-2026-31431: 141 interactions\nCVE-2026-43284: 122 interactions\nCVE-2026-43500: 84 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-42511: 56 interactions\nCVE-2024-13362: 4 interactions\nCVE-2026-29201: 3 interactions\n", "creation_timestamp": "2026-05-11T02:30:39.800228Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d978685c-e91f-4161-99c1-5024075fada9/export"/>
    <published>2026-05-11T02:30:39.800228+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ebdba29d-7e64-44bf-9269-2cee9d088bb1/export</id>
    <title>ebdba29d-7e64-44bf-9269-2cee9d088bb1</title>
    <updated>2026-05-29T20:54:09.728077+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ebdba29d-7e64-44bf-9269-2cee9d088bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mlljuslwde2l", "content": "Critical vulnerabilities in cPanel &amp;amp; WHM (CVE-2026-29201, CVE-2026-29202, CVE-2026-29203) allow RCE and DoS attacks. Admins must update immediately to secure servers. #CyberSecurity #cPanel #WHM #Vulnerability Link: thedailytechfeed.com/critical-cpa...", "creation_timestamp": "2026-05-11T14:57:10.626925Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ebdba29d-7e64-44bf-9269-2cee9d088bb1/export"/>
    <published>2026-05-11T14:57:10.626925+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/897b10f5-7e28-47a9-9fbd-e96400ad3ecc/export</id>
    <title>897b10f5-7e28-47a9-9fbd-e96400ad3ecc</title>
    <updated>2026-05-29T20:54:09.726694+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "897b10f5-7e28-47a9-9fbd-e96400ad3ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-29201", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-cpanel-and-whm-leading-privilege-escalation-patch", "content": "", "creation_timestamp": "2026-05-12T01:21:19.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/897b10f5-7e28-47a9-9fbd-e96400ad3ecc/export"/>
    <published>2026-05-12T01:21:19+00:00</published>
  </entry>
</feed>
