https://vulnerability.circl.lu/sightings/feed 2026-09-14T02:39:44.074021+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4957b637-3b13-444e-bc33-3acfaf2aa510/export 2026-09-14T02:39:44.103375+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4957b637-3b13-444e-bc33-3acfaf2aa510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "published-proof-of-concept", "source": "Telegram/mZUTN-dgFzZWTpxOL4QNH3xIbYerCrrMD24kuXMsejlEOCQ", "content": "", "creation_timestamp": "2026-09-11T00:00:55.959363Z"} 2026-09-11T00:00:55.959363+00:00 https://vulnerability.circl.lu/sighting/96645f9e-99a4-4612-90eb-3cf3c8d4ceed/export 2026-09-14T02:39:44.106364+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "96645f9e-99a4-4612-90eb-3cf3c8d4ceed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "Telegram/mZUTN-dgFzZWTpxOL4QNH3xIbYerCrrMD24kuXMsejlEOCQ", "content": "", "creation_timestamp": "2026-09-10T01:00:03.610571Z"} 2026-09-10T01:00:03.610571+00:00 https://vulnerability.circl.lu/sighting/2723e173-9184-4648-ac18-5c0de716e2c7/export 2026-09-14T02:39:44.106619+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2723e173-9184-4648-ac18-5c0de716e2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz26ftvcu2t", "content": "CVE-2026-76578 - red hat enterprise linux 8\nThe FreeIPA system does not properly check who can add certain security tokens. Because of this, anyone on the network can create a fake user and place it in the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-09-08T12:40:06.107684Z"} 2026-09-08T12:40:06.107684+00:00 https://vulnerability.circl.lu/sighting/9db9d134-f704-44e9-93e8-844b892bf7e6/export 2026-09-14T02:39:44.106836+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9db9d134-f704-44e9-93e8-844b892bf7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117230724964094728", "content": "There is a new vulnerability with elevated criticality in Red Hat FreeIPA (CVE-2026-76578) https://vuldb.com/vuln/399546", "creation_timestamp": "2026-09-07T16:35:04.335573Z"} 2026-09-07T16:35:04.335573+00:00 https://vulnerability.circl.lu/sighting/e400f71d-5fe1-4247-b09c-34989ee9d09e/export 2026-09-14T02:39:44.107034+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e400f71d-5fe1-4247-b09c-34989ee9d09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muwwbhovtm2o", "content": "Patch the critical FreeIPA CVE-2026-76578 immediately. This FreeIPA vulnerability allows complete, unauthenticated administrative access to your servers.\n\n#FreeIPA #CVE202676578 #Vulnerability #CyberSecurity #CVE202613097", "creation_timestamp": "2026-09-07T16:24:54.949133Z"} 2026-09-07T16:24:54.949133+00:00 https://vulnerability.circl.lu/sighting/39d88f37-6a6e-400c-a964-22474f7da404/export 2026-09-14T02:39:44.107232+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "39d88f37-6a6e-400c-a964-22474f7da404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muwolpyl3e2f", "content": "\ud83d\udea8 CVE-2026-76578 \u2014 CVSS 9.8 CRITICAL\n\nA flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not re...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76578\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-07T14:07:28.343042Z"} 2026-09-07T14:07:28.343042+00:00 https://vulnerability.circl.lu/sighting/06195108-a002-4a79-ad18-1647373dbd7d/export 2026-09-14T02:39:44.107420+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "06195108-a002-4a79-ad18-1647373dbd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f6wa4tbkee63k", "content": "CVE-2026-76573 - Pods\nCVE ID : CVE-2026-76573\n \n Published : Sept. 5, 2026, 8:27 a.m. | 58\u00a0minutes ago\n \n Description : The Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_found' Shortcode Attribute in all versi...", "creation_timestamp": "2026-09-05T09:50:00.829103Z"} 2026-09-05T09:50:00.829103+00:00 https://vulnerability.circl.lu/sighting/44783c10-6375-4835-96e0-3d4077fa68bf/export 2026-09-14T02:39:44.107635+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "44783c10-6375-4835-96e0-3d4077fa68bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtontg57f42p", "content": "\ud83d\udea8 CVE-2026-76571 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabri...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76571\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:23.182924Z"} 2026-08-22T16:07:23.182924+00:00 https://vulnerability.circl.lu/sighting/48368aa6-5534-46ad-bc4a-c53ed6e2296b/export 2026-09-14T02:39:44.107774+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "48368aa6-5534-46ad-bc4a-c53ed6e2296b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtomcmkrhf23", "content": "CVE-2026-76571 - fabrik extension for joomla\nThe Fabrik add\u2011on for Joomla (versions before 4.7.3) does not check input for its list filter feature. Because of this, anyone on the internet can send specially crafted requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T15:40:05.819181Z"} 2026-08-22T15:40:05.819181+00:00 https://vulnerability.circl.lu/sighting/a1d1506f-6fc6-4970-9235-b7bf8f984260/export 2026-09-14T02:39:44.107886+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a1d1506f-6fc6-4970-9235-b7bf8f984260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5qqwbyjjfirhz", "content": "CVE-2026-76571 - Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik\nCVE ID : CVE-2026-76571\n \n Published : Aug. 22, 2026, 2:21 p.m. | 13\u00a0minutes ago\n \n Description : Joomla Extension - fabrikar.com - Unauthenticated SQL...", "creation_timestamp": "2026-08-22T14:48:04.991526Z"} 2026-08-22T14:48:04.991526+00:00