https://vulnerability.circl.lu/sightings/feed 2026-08-23T18:45:57.755382+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4a794703-2a92-48f9-8150-1e0028f53490/export 2026-08-23T18:45:57.773398+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4a794703-2a92-48f9-8150-1e0028f53490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnx344xde2m", "content": "CVE-2026-77647 - spip\nWebsites using SPIP versions older than 4.4.20 can be taken over by strangers who send specially crafted pages. The software misreads certain code markers, allowing the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-22T09:20:05.155463Z"} 2026-08-22T09:20:05.155463+00:00 https://vulnerability.circl.lu/sighting/85c098f2-d114-405e-87f6-99b3b101dd3c/export 2026-08-23T18:45:57.774720+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "85c098f2-d114-405e-87f6-99b3b101dd3c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5d23ef8-d861-40f6-b794-b5672e099e4c", "content": "", "creation_timestamp": "2026-08-21T23:00:48.432614Z"} 2026-08-21T23:00:48.432614+00:00 https://vulnerability.circl.lu/sighting/1364a3d0-259c-4ae0-8df2-cad97f3cef35/export 2026-08-23T18:45:57.774817+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1364a3d0-259c-4ae0-8df2-cad97f3cef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77647", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117134745131299746", "content": "\ud83d\udcf0 Critical RCE Flaw in SPIP CMS Under Active Exploitation\n\ud83d\udea8 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-spip-cms-cve-2026-77647-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-21T17:46:36.570979Z"} 2026-08-21T17:46:36.570979+00:00 https://vulnerability.circl.lu/sighting/500e441e-4552-4ce4-9625-755d185bc0ed/export 2026-08-23T18:45:57.774897+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "500e441e-4552-4ce4-9625-755d185bc0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtmcvojf7i2d", "content": "\ud83d\udea8 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-21T17:46:29.168924Z"} 2026-08-21T17:46:29.168924+00:00 https://vulnerability.circl.lu/sighting/06863d61-b609-4255-9a66-ec608d08b7d6/export 2026-08-23T18:45:57.774965+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "06863d61-b609-4255-9a66-ec608d08b7d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkqqxfwjw22", "content": "CVE-2026-77647, a CVSS 9.8 unauthenticated RCE in SPIP before 4.4.20, is exploited in the wild. Update now.\n\n#SPIP #CVE202677647 #RCE #ExploitedInTheWild #CMS #WebSecurity", "creation_timestamp": "2026-08-21T02:49:04.129757Z"} 2026-08-21T02:49:04.129757+00:00 https://vulnerability.circl.lu/sighting/3484564a-8656-4644-a859-69f2579cf5fa/export 2026-08-23T18:45:57.775043+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3484564a-8656-4644-a859-69f2579cf5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkko3xm5o2p", "content": "CVE-2026-77647 - spip\nWebsites using SPIP versions older than 4.4.20 can be accessed by anyone on the internet who can then cause the server to run their own programs. This happens because the software misinterprets\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-08-21T01:00:21.016303Z"} 2026-08-21T01:00:21.016303+00:00 https://vulnerability.circl.lu/sighting/b049c208-731b-4d0d-8b40-e0941efa5bab/export 2026-08-23T18:45:57.775117+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b049c208-731b-4d0d-8b40-e0941efa5bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g7po5x5zwz3s7", "content": "CVE-2026-77647 - SPIP Remote Code Execution Vulnerability\nCVE ID : CVE-2026-77647\n \n Published : Aug. 20, 2026, 11:16 p.m. | 38\u00a0minutes ago\n \n Description : SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...", "creation_timestamp": "2026-08-21T00:19:23.581773Z"} 2026-08-21T00:19:23.581773+00:00 https://vulnerability.circl.lu/sighting/acfd93f0-b0a3-4aa5-812b-617c9bed5abb/export 2026-08-23T18:45:57.775203+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "acfd93f0-b0a3-4aa5-812b-617c9bed5abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhybv7ip25", "content": "\ud83d\udea8 CVE-2026-77647 \u2014 CVSS 9.8 CRITICAL\n\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the w...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:12:05.065210Z"} 2026-08-21T00:12:05.065210+00:00 https://vulnerability.circl.lu/sighting/fd8e9c1b-7d51-4962-9595-d717f21a2db2/export 2026-08-23T18:45:57.775272+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fd8e9c1b-7d51-4962-9595-d717f21a2db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkhd35e7u27", "content": "\ud83d\udd34 CVE-2026-77647 - Critical (9.8)\n\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploite...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77647/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T00:00:18.577866Z"} 2026-08-21T00:00:18.577866+00:00