https://vulnerability.circl.lu/sightings/feed 2026-07-22T19:42:47.994960+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/03af8ad0-6f90-421e-b5e0-9530d790c6f2/export 2026-07-22T19:42:48.018081+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "03af8ad0-6f90-421e-b5e0-9530d790c6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-57309", "content": "", "creation_timestamp": "2026-07-20T16:15:03.572805Z"} 2026-07-20T16:15:03.572805+00:00 https://vulnerability.circl.lu/sighting/5397c890-a8f4-4475-90a3-96730fd8503e/export 2026-07-22T19:42:48.020135+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5397c890-a8f4-4475-90a3-96730fd8503e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57309", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr3fomsqr724", "content": "Windu CMS 4.1 hit by CRITICAL Blind SQL Injection (CVE-2026-57309). No patch \u2014 restrict access and monitor for suspicious DB activity. More: https://radar.offseq.com/threat/cve-2026-57309-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-69fa2f89e7c44ad0 #Off...", "creation_timestamp": "2026-07-20T13:30:35.252054Z"} 2026-07-20T13:30:35.252054+00:00 https://vulnerability.circl.lu/sighting/1861aa8e-ff60-4038-b699-b2c036ea7d54/export 2026-07-22T19:42:48.021437+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1861aa8e-ff60-4038-b699-b2c036ea7d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57309", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116952546163275877", "content": "CVE-2026-57309 (CRITICAL, CVSS 9.3): Windu CMS 4.1 suffers from a blind SQL injection via HTTP header URL path. No patch yet \u2014 restrict exposed endpoints and monitor for abnormal DB activity. Details: https://radar.offseq.com/threat/cve-2026-57309-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-69fa2f89e7c44ad0 #OffSeq #SQLi #Vuln #CVE202657309", "creation_timestamp": "2026-07-20T13:30:32.957541Z"} 2026-07-20T13:30:32.957541+00:00 https://vulnerability.circl.lu/sighting/47326865-d4e6-4628-8d7f-625c45fed36a/export 2026-07-22T19:42:48.021581+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "47326865-d4e6-4628-8d7f-625c45fed36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3fkjakgt2x", "content": "CVE-2026-57309 - Blind SQL Injection in Windu CMS\nCVE ID : CVE-2026-57309\n \n Published : July 20, 2026, 12:52 p.m. | 29\u00a0minutes ago\n \n Description : A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL sy...", "creation_timestamp": "2026-07-20T13:28:16.179391Z"} 2026-07-20T13:28:16.179391+00:00 https://vulnerability.circl.lu/sighting/7c0bc182-ebb7-45ed-b4c1-4a7d7d6d6581/export 2026-07-22T19:42:48.021689+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7c0bc182-ebb7-45ed-b4c1-4a7d7d6d6581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3fk5onpq2z", "content": "CVE-2026-57309 - windu cms\nWindu CMS versions, including 4.1, are at risk of SQL injection attacks. An attacker can inject malicious SQL code into the URL, potentially stealing sensitive data or disrupting the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#winducms #jcd #CVE #infosec", "creation_timestamp": "2026-07-20T13:28:04.323061Z"} 2026-07-20T13:28:04.323061+00:00