<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-13T13:47:49.243494+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/33bd6457-9988-4e03-88e5-adfe972a5174/export</id>
    <title>33bd6457-9988-4e03-88e5-adfe972a5174</title>
    <updated>2026-09-13T13:47:49.270727+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "33bd6457-9988-4e03-88e5-adfe972a5174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117239434533714151", "content": "CVE-2026-52766: YesWiki &amp;lt;=4.6.5 lets any user delete any wiki page via {{erasespamedcomments}} - no auth check, default write ACL for all. CVSS 9.1. Unpatched. Update now or disable action. https://www.valtersit.com/cve/CVE-2026-52766/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-09T05:30:02.256429Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/33bd6457-9988-4e03-88e5-adfe972a5174/export"/>
    <published>2026-09-09T05:30:02.256429+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/79398e72-bb39-4c02-a427-de1fbd0e58f1/export</id>
    <title>79398e72-bb39-4c02-a427-de1fbd0e58f1</title>
    <updated>2026-09-13T13:47:49.273305+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "79398e72-bb39-4c02-a427-de1fbd0e58f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv2smcll3c2l", "content": "CVE-2026-52766: YesWiki &amp;lt;=4.6.5 lets any user delete any wiki page via {{erasespamedcomments}} - no auth check, default write ACL for all. CVSS 9.1. Unpatched. Update now or disable action. https://www.valtersit.com/cve/CVE-2026-52766/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-09T05:30:01.910665Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/79398e72-bb39-4c02-a427-de1fbd0e58f1/export"/>
    <published>2026-09-09T05:30:01.910665+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bbe9773a-6c7f-469d-ab71-1b0ef980d35b/export</id>
    <title>bbe9773a-6c7f-469d-ab71-1b0ef980d35b</title>
    <updated>2026-09-13T13:47:49.273417+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bbe9773a-6c7f-469d-ab71-1b0ef980d35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqlqwkhx222", "content": "\ud83d\udd34 CVE-2026-52766 - Critical (9.1)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52766/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T04:00:43.771243Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bbe9773a-6c7f-469d-ab71-1b0ef980d35b/export"/>
    <published>2026-09-05T04:00:43.771243+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/adfaa91c-9f14-4501-b8f6-216f4a504739/export</id>
    <title>adfaa91c-9f14-4501-b8f6-216f4a504739</title>
    <updated>2026-09-13T13:47:49.273495+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "adfaa91c-9f14-4501-b8f6-216f4a504739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muqffu42zr2t", "content": "\ud83d\udea8 CVE-2026-52766 \u2014 CVSS 9.1 CRITICAL\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52766\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T02:07:09.702081Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/adfaa91c-9f14-4501-b8f6-216f4a504739/export"/>
    <published>2026-09-05T02:07:09.702081+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3fcc70fe-dd11-41e9-bd21-4d703338540e/export</id>
    <title>3fcc70fe-dd11-41e9-bd21-4d703338540e</title>
    <updated>2026-09-13T13:47:49.273576+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "3fcc70fe-dd11-41e9-bd21-4d703338540e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52766", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6x7x-gcmf-7r8x", "content": "", "creation_timestamp": "2026-07-09T22:35:25.831980Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3fcc70fe-dd11-41e9-bd21-4d703338540e/export"/>
    <published>2026-07-09T22:35:25.831980+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/78fb76a3-2de1-444e-9dcd-d2e313150749/export</id>
    <title>78fb76a3-2de1-444e-9dcd-d2e313150749</title>
    <updated>2026-09-13T13:47:49.274418+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "78fb76a3-2de1-444e-9dcd-d2e313150749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqame3yhu22w", "content": "CVE-2026-52766 - yeswiki\nYesWiki has a security issue that allows anyone with page write access to delete any wiki page, including the front page and admin pages, without permission. This is because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#yeswiki #composer #CVE #infosec", "creation_timestamp": "2026-07-09T21:48:04.611651Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/78fb76a3-2de1-444e-9dcd-d2e313150749/export"/>
    <published>2026-07-09T21:48:04.611651+00:00</published>
  </entry>
</feed>
