https://vulnerability.circl.lu/sightings/feed 2026-09-25T08:42:41.085592+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/71f4a675-d361-4ae3-8827-00f9bd5a4a07/export 2026-09-25T08:42:41.113200+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "71f4a675-d361-4ae3-8827-00f9bd5a4a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-961", "content": "", "creation_timestamp": "2026-09-24T07:43:22.000000Z"} 2026-09-24T07:43:22+00:00 https://vulnerability.circl.lu/sighting/4c4df00e-8317-4bb2-be9d-26bf17b90c5d/export 2026-09-25T08:42:41.115540+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4c4df00e-8317-4bb2-be9d-26bf17b90c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://t.me/CyberDispatch/3066", "content": "A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.", "creation_timestamp": "2026-09-24T06:26:13.000000Z"} 2026-09-24T06:26:13+00:00 https://vulnerability.circl.lu/sighting/6c6e40d4-3123-403d-95d7-cf042ba05b9b/export 2026-09-25T08:42:41.117271+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6c6e40d4-3123-403d-95d7-cf042ba05b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa3n5jd3324", "content": "CVE-2026-87899 - cpanel\ncPanel can be tricked by a signed\u2011in user to run any program with the highest system rights. This could let an attacker take full control of the server. Apply the latest cPanel updates\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cpanel #webpros #CVE #infosec", "creation_timestamp": "2026-09-24T01:20:04.231542Z"} 2026-09-24T01:20:04.231542+00:00 https://vulnerability.circl.lu/sighting/7236ac4e-1658-4a4a-8ded-7d0b0247cab4/export 2026-09-25T08:42:41.117453+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7236ac4e-1658-4a4a-8ded-7d0b0247cab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwa34flpvg2x", "content": "cPanel patched critical cPanel security vulnerabilities including CVE-2026-87899. Update cPanel and WP Toolkit now to prevent privilege escalation.\n\n#cPanel #WHM #WPToolkit #PrivilegeEscalation #Cybersecurity #Infosec #CVE202687899", "creation_timestamp": "2026-09-24T01:10:42.378322Z"} 2026-09-24T01:10:42.378322+00:00 https://vulnerability.circl.lu/sighting/c1fe09b3-53e4-4ad0-8d59-99ac0de17da6/export 2026-09-25T08:42:41.117581+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c1fe09b3-53e4-4ad0-8d59-99ac0de17da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mw7wfjagft25", "content": "CVE-2026-87899 is trending. Hype score 7, currently #6 on cvemon.\n\nExecution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-87899", "creation_timestamp": "2026-09-23T23:46:19.338823Z"} 2026-09-23T23:46:19.338823+00:00 https://vulnerability.circl.lu/sighting/4a7626cd-628b-4f06-bcf8-efc661b92245/export 2026-09-25T08:42:41.117695+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4a7626cd-628b-4f06-bcf8-efc661b92245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qwx4prb2f", "content": "\ud83d\udea8 CVE-2026-87899 \u2014 CVSS 9.4 CRITICAL\n\nExecution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87899\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:08:41.657563Z"} 2026-09-23T22:08:41.657563+00:00 https://vulnerability.circl.lu/sighting/c5831a3f-7494-4ff2-9fe5-ae50a74e4dee/export 2026-09-25T08:42:41.117795+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c5831a3f-7494-4ff2-9fe5-ae50a74e4dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/cyberattaque.org/post/3mw74bfyao22d", "content": "\ud83d\udea8\u00c0 PARTAGER AUTOUR DE VOUS \ud83d\udea8 \n\nSi vous utilisez #cPanel, mettez \u00e0 jour rapidement.\n\nLes h\u00e9bergements mutualis\u00e9s sont particuli\u00e8rement expos\u00e9s.\n\nLa faille critique #CVE-2026-87899 permet \u00e0 un simple utilisateur de prendre le contr\u00f4le complet du serveur.\n\nwww.cyberattaque.org/cve-2026-878...", "creation_timestamp": "2026-09-23T15:58:46.879256Z"} 2026-09-23T15:58:46.879256+00:00 https://vulnerability.circl.lu/sighting/2ba5d596-4b30-4cbf-a512-30fc8d4844ad/export 2026-09-25T08:42:41.117893+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2ba5d596-4b30-4cbf-a512-30fc8d4844ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://t.me/thehackernews/10141", "content": "\u203c\ufe0f ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html", "creation_timestamp": "2026-09-23T14:26:02.000000Z"} 2026-09-23T14:26:02+00:00