https://vulnerability.circl.lu/sightings/feed 2026-09-24T22:14:12.582058+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/623c4ebe-3fb2-4e22-af30-fc99e9b17929/export 2026-09-24T22:14:12.612463+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "623c4ebe-3fb2-4e22-af30-fc99e9b17929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-961", "content": "", "creation_timestamp": "2026-09-24T07:43:22.000000Z"} 2026-09-24T07:43:22+00:00 https://vulnerability.circl.lu/sighting/d5250a93-465c-4be4-a1a8-677d3ef9ea0f/export 2026-09-24T22:14:12.614316+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d5250a93-465c-4be4-a1a8-677d3ef9ea0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa3na3azw2f", "content": "CVE-2026-87900 - wp toolkit for cpanel\nIf someone signs into cPanel with a valid account, they can use the WP Toolkit to open any file on the server and even run their own code. This can expose sensitive data across\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webpros #CVE #infosec", "creation_timestamp": "2026-09-24T01:20:06.765954Z"} 2026-09-24T01:20:06.765954+00:00 https://vulnerability.circl.lu/sighting/a47e3798-c6ac-4189-b43b-dc6acf0716c7/export 2026-09-24T22:14:12.617118+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a47e3798-c6ac-4189-b43b-dc6acf0716c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qx73oxv2k", "content": "\ud83d\udea8 CVE-2026-87900 \u2014 CVSS 9.4 CRITICAL\n\nArgument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to r...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:08:49.979805Z"} 2026-09-23T22:08:49.979805+00:00 https://vulnerability.circl.lu/sighting/09966c5b-a308-4c0c-a6fd-b8d4fec581a8/export 2026-09-24T22:14:12.617797+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "09966c5b-a308-4c0c-a6fd-b8d4fec581a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://t.me/thehackernews/10141", "content": "\u203c\ufe0f ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html", "creation_timestamp": "2026-09-23T14:26:02.000000Z"} 2026-09-23T14:26:02+00:00