<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T23:26:32.600527+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7bec89f-59df-43dd-8c7b-bab9595757c7/export</id>
    <title>e7bec89f-59df-43dd-8c7b-bab9595757c7</title>
    <updated>2026-10-08T23:26:32.631626+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e7bec89f-59df-43dd-8c7b-bab9595757c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdicrwmio27", "content": "CVE-2026-95606 - the events calendar\nThe Events Calendar plugin for WordPress (up to version 6.17.4) accepts data it trusts without proper checks. A malicious user could supply crafted information that causes the website to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-08T03:10:05.896361Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7bec89f-59df-43dd-8c7b-bab9595757c7/export"/>
    <published>2026-10-08T03:10:05.896361+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/87d2afe0-d5c7-4666-9e0b-6d78ba170888/export</id>
    <title>87d2afe0-d5c7-4666-9e0b-6d78ba170888</title>
    <updated>2026-10-08T23:26:32.633688+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "87d2afe0-d5c7-4666-9e0b-6d78ba170888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95606", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117402346141419065", "content": "CVE-2026-95606: CRITICAL deserialization of untrusted data in The Events Calendar (&amp;lt;=6.17.4) enables remote object injection &amp;amp; code execution. No patch confirmed \u2014 review vendor advisory. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-liquid-web-stellarwp-the-events-calendar-allows-c423d4d18fa2f1a5 #OffSeq #WordPress #Vulnerability #CVE202695606", "creation_timestamp": "2026-10-08T00:00:37.475467Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/87d2afe0-d5c7-4666-9e0b-6d78ba170888/export"/>
    <published>2026-10-08T00:00:37.475467+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/94c0a336-d3df-4479-806f-81fd1bceb630/export</id>
    <title>94c0a336-d3df-4479-806f-81fd1bceb630</title>
    <updated>2026-10-08T23:26:32.633819+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "94c0a336-d3df-4479-806f-81fd1bceb630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95606", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxck5xmdqv2l", "content": "\ud83d\udea8 CVE-2026-95606 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-95606\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T18:10:31.689941Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/94c0a336-d3df-4479-806f-81fd1bceb630/export"/>
    <published>2026-10-07T18:10:31.689941+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2de05118-0ccb-413d-8aab-76ec406d80fc/export</id>
    <title>2de05118-0ccb-413d-8aab-76ec406d80fc</title>
    <updated>2026-10-08T23:26:32.633923+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2de05118-0ccb-413d-8aab-76ec406d80fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95606", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxchfotj532e", "content": "\ud83d\udd34 CVE-2026-95606 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar all...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-95606/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-07T17:21:10.194687Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2de05118-0ccb-413d-8aab-76ec406d80fc/export"/>
    <published>2026-10-07T17:21:10.194687+00:00</published>
  </entry>
</feed>
