<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 18 Sep 2026 12:27:39 +0000</lastBuildDate>
    <item>
      <title>871c001f-eb35-4640-9677-4fae7b976b19</title>
      <link>https://vulnerability.circl.lu/sighting/871c001f-eb35-4640-9677-4fae7b976b19/export</link>
      <description>{"uuid": "871c001f-eb35-4640-9677-4fae7b976b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-17)", "content": "", "creation_timestamp": "2026-09-18T10:15:06.023343Z"}</description>
      <content:encoded>{"uuid": "871c001f-eb35-4640-9677-4fae7b976b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-17)", "content": "", "creation_timestamp": "2026-09-18T10:15:06.023343Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/871c001f-eb35-4640-9677-4fae7b976b19/export</guid>
      <pubDate>Fri, 18 Sep 2026 10:15:06 +0000</pubDate>
    </item>
    <item>
      <title>28f9a18a-e408-42d1-a79b-f861f9ae0c18</title>
      <link>https://vulnerability.circl.lu/sighting/28f9a18a-e408-42d1-a79b-f861f9ae0c18/export</link>
      <description>{"uuid": "28f9a18a-e408-42d1-a79b-f861f9ae0c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-17)", "content": "", "creation_timestamp": "2026-09-18T10:00:05.099098Z"}</description>
      <content:encoded>{"uuid": "28f9a18a-e408-42d1-a79b-f861f9ae0c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-17)", "content": "", "creation_timestamp": "2026-09-18T10:00:05.099098Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/28f9a18a-e408-42d1-a79b-f861f9ae0c18/export</guid>
      <pubDate>Fri, 18 Sep 2026 10:00:05 +0000</pubDate>
    </item>
    <item>
      <title>a2ccf4f7-88db-440e-80fe-f865553f68be</title>
      <link>https://vulnerability.circl.lu/sighting/a2ccf4f7-88db-440e-80fe-f865553f68be/export</link>
      <description>{"uuid": "a2ccf4f7-88db-440e-80fe-f865553f68be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26980", "type": "seen", "source": "https://t.me/VulnerabilityNews/42658", "content": "Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks\n\nThreat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks.\n\nAccording to QiAnXin XLab, the activity involves the exploitation of CVE-2026-26980 (CVSS score: 9.4), an SQL injection vulnerability in Ghost's Content API that could allow an unauthenticated attacker to read arbitrary data from the\nhttps://thehackernews.com/2026/05/ghost-cms-cve-2026-26980-exploited-to.html", "creation_timestamp": "2026-09-18T05:00:06.843599Z"}</description>
      <content:encoded>{"uuid": "a2ccf4f7-88db-440e-80fe-f865553f68be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26980", "type": "seen", "source": "https://t.me/VulnerabilityNews/42658", "content": "Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks\n\nThreat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks.\n\nAccording to QiAnXin XLab, the activity involves the exploitation of CVE-2026-26980 (CVSS score: 9.4), an SQL injection vulnerability in Ghost's Content API that could allow an unauthenticated attacker to read arbitrary data from the\nhttps://thehackernews.com/2026/05/ghost-cms-cve-2026-26980-exploited-to.html", "creation_timestamp": "2026-09-18T05:00:06.843599Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a2ccf4f7-88db-440e-80fe-f865553f68be/export</guid>
      <pubDate>Fri, 18 Sep 2026 05:00:06 +0000</pubDate>
    </item>
    <item>
      <title>582208df-0712-4802-9809-e91adfba2aee</title>
      <link>https://vulnerability.circl.lu/sighting/582208df-0712-4802-9809-e91adfba2aee/export</link>
      <description>{"uuid": "582208df-0712-4802-9809-e91adfba2aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26980", "type": "seen", "source": "https://t.me/VulnerabilityNews/42642", "content": "Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign\n\nA large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. [...]\nhttps://www.bleepingcomputer.com/news/security/ghost-cms-sql-injection-flaw-exploited-in-large-scale-clickfix-campaign/", "creation_timestamp": "2026-09-18T05:00:06.793485Z"}</description>
      <content:encoded>{"uuid": "582208df-0712-4802-9809-e91adfba2aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26980", "type": "seen", "source": "https://t.me/VulnerabilityNews/42642", "content": "Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign\n\nA large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. [...]\nhttps://www.bleepingcomputer.com/news/security/ghost-cms-sql-injection-flaw-exploited-in-large-scale-clickfix-campaign/", "creation_timestamp": "2026-09-18T05:00:06.793485Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/582208df-0712-4802-9809-e91adfba2aee/export</guid>
      <pubDate>Fri, 18 Sep 2026 05:00:06 +0000</pubDate>
    </item>
    <item>
      <title>5d1e69dc-893c-4f7b-88fa-f4ceb0dc3df6</title>
      <link>https://vulnerability.circl.lu/sighting/5d1e69dc-893c-4f7b-88fa-f4ceb0dc3df6/export</link>
      <description>{"uuid": "5d1e69dc-893c-4f7b-88fa-f4ceb0dc3df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26265", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-26265.yaml", "content": "", "creation_timestamp": "2026-09-18T00:00:13.742646Z"}</description>
      <content:encoded>{"uuid": "5d1e69dc-893c-4f7b-88fa-f4ceb0dc3df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26265", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-26265.yaml", "content": "", "creation_timestamp": "2026-09-18T00:00:13.742646Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5d1e69dc-893c-4f7b-88fa-f4ceb0dc3df6/export</guid>
      <pubDate>Fri, 18 Sep 2026 00:00:13 +0000</pubDate>
    </item>
    <item>
      <title>42dcfab3-e8f3-4d00-a5dd-f6714d9b413b</title>
      <link>https://vulnerability.circl.lu/sighting/42dcfab3-e8f3-4d00-a5dd-f6714d9b413b/export</link>
      <description>{"uuid": "42dcfab3-e8f3-4d00-a5dd-f6714d9b413b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:09.856398Z"}</description>
      <content:encoded>{"uuid": "42dcfab3-e8f3-4d00-a5dd-f6714d9b413b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:09.856398Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/42dcfab3-e8f3-4d00-a5dd-f6714d9b413b/export</guid>
      <pubDate>Thu, 17 Sep 2026 10:15:09 +0000</pubDate>
    </item>
    <item>
      <title>150cbcde-c53f-4452-a892-9011a7ebebac</title>
      <link>https://vulnerability.circl.lu/sighting/150cbcde-c53f-4452-a892-9011a7ebebac/export</link>
      <description>{"uuid": "150cbcde-c53f-4452-a892-9011a7ebebac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:09.074386Z"}</description>
      <content:encoded>{"uuid": "150cbcde-c53f-4452-a892-9011a7ebebac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:09.074386Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/150cbcde-c53f-4452-a892-9011a7ebebac/export</guid>
      <pubDate>Thu, 17 Sep 2026 10:15:09 +0000</pubDate>
    </item>
    <item>
      <title>38eab585-c17f-4338-86bd-3314b09de035</title>
      <link>https://vulnerability.circl.lu/sighting/38eab585-c17f-4338-86bd-3314b09de035/export</link>
      <description>{"uuid": "38eab585-c17f-4338-86bd-3314b09de035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:00:05.091708Z"}</description>
      <content:encoded>{"uuid": "38eab585-c17f-4338-86bd-3314b09de035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2652", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:00:05.091708Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/38eab585-c17f-4338-86bd-3314b09de035/export</guid>
      <pubDate>Thu, 17 Sep 2026 10:00:05 +0000</pubDate>
    </item>
    <item>
      <title>22509ec4-abf6-4c1a-a98a-3ebce5f0ffe5</title>
      <link>https://vulnerability.circl.lu/sighting/22509ec4-abf6-4c1a-a98a-3ebce5f0ffe5/export</link>
      <description>{"uuid": "22509ec4-abf6-4c1a-a98a-3ebce5f0ffe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "Telegram/62gcesdJfEiUbIen6VNYpv9Wpfrn8s4bwEeJpK-9Ft26ADg", "content": "", "creation_timestamp": "2026-09-17T01:00:04.998696Z"}</description>
      <content:encoded>{"uuid": "22509ec4-abf6-4c1a-a98a-3ebce5f0ffe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "Telegram/62gcesdJfEiUbIen6VNYpv9Wpfrn8s4bwEeJpK-9Ft26ADg", "content": "", "creation_timestamp": "2026-09-17T01:00:04.998696Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/22509ec4-abf6-4c1a-a98a-3ebce5f0ffe5/export</guid>
      <pubDate>Thu, 17 Sep 2026 01:00:04 +0000</pubDate>
    </item>
    <item>
      <title>a096477f-bf7b-4ad2-afc2-04933fcc2985</title>
      <link>https://vulnerability.circl.lu/sighting/a096477f-bf7b-4ad2-afc2-04933fcc2985/export</link>
      <description>{"uuid": "a096477f-bf7b-4ad2-afc2-04933fcc2985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "Telegram/8Is-3SI6bO9GNCJOmvFyQfWUtIzeYjCZZGsfQ4Xpcb-6Qtk", "content": "", "creation_timestamp": "2026-09-17T01:00:04.845507Z"}</description>
      <content:encoded>{"uuid": "a096477f-bf7b-4ad2-afc2-04933fcc2985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "Telegram/8Is-3SI6bO9GNCJOmvFyQfWUtIzeYjCZZGsfQ4Xpcb-6Qtk", "content": "", "creation_timestamp": "2026-09-17T01:00:04.845507Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a096477f-bf7b-4ad2-afc2-04933fcc2985/export</guid>
      <pubDate>Thu, 17 Sep 2026 01:00:04 +0000</pubDate>
    </item>
  </channel>
</rss>
