https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 20 Sep 2026 08:49:59 +0000 https://vulnerability.circl.lu/sighting/fb7c0ae6-1f31-4f0c-84cd-70adb96700d2/export {"uuid": "fb7c0ae6-1f31-4f0c-84cd-70adb96700d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-18)", "content": "", "creation_timestamp": "2026-09-19T10:15:07.056513Z"} {"uuid": "fb7c0ae6-1f31-4f0c-84cd-70adb96700d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-18)", "content": "", "creation_timestamp": "2026-09-19T10:15:07.056513Z"} https://vulnerability.circl.lu/sighting/fb7c0ae6-1f31-4f0c-84cd-70adb96700d2/export Sat, 19 Sep 2026 10:15:07 +0000 https://vulnerability.circl.lu/sighting/29a3fa67-6c24-4f9c-9e52-2a7934e60a15/export {"uuid": "29a3fa67-6c24-4f9c-9e52-2a7934e60a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-18)", "content": "", "creation_timestamp": "2026-09-19T10:00:05.918427Z"} {"uuid": "29a3fa67-6c24-4f9c-9e52-2a7934e60a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-18)", "content": "", "creation_timestamp": "2026-09-19T10:00:05.918427Z"} https://vulnerability.circl.lu/sighting/29a3fa67-6c24-4f9c-9e52-2a7934e60a15/export Sat, 19 Sep 2026 10:00:05 +0000 https://vulnerability.circl.lu/sighting/71a6ec57-1862-40fd-bdb8-15d3b53350e4/export {"uuid": "71a6ec57-1862-40fd-bdb8-15d3b53350e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42780", "content": "Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs\n\nOrganizations are advised to patch CVE-2026-41089 as soon as possible, given its severity, the potential ongoing exploitation.\nThe post Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-windows-netlogon-vulnerability-in-attackers-crosshairs/", "creation_timestamp": "2026-09-19T00:00:46.511499Z"} {"uuid": "71a6ec57-1862-40fd-bdb8-15d3b53350e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41089", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42780", "content": "Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs\n\nOrganizations are advised to patch CVE-2026-41089 as soon as possible, given its severity, the potential ongoing exploitation.\nThe post Critical Windows Netlogon Vulnerability in Attackers\u2019 Crosshairs appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-windows-netlogon-vulnerability-in-attackers-crosshairs/", "creation_timestamp": "2026-09-19T00:00:46.511499Z"} https://vulnerability.circl.lu/sighting/71a6ec57-1862-40fd-bdb8-15d3b53350e4/export Sat, 19 Sep 2026 00:00:46 +0000 https://vulnerability.circl.lu/sighting/0073eab4-299a-4407-8d43-f2445041c776/export {"uuid": "0073eab4-299a-4407-8d43-f2445041c776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42427", "content": "cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor\n\nA threat actor named Mr_Rot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environments.\nThe attack exploits CVE-2026-41940, a vulnerability impacting cPanel and WebHost Manager (WHM) that could result in an authentication bypass and allow remote attackers to gain elevated control of the control\nhttps://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.html", "creation_timestamp": "2026-09-19T00:00:44.753785Z"} {"uuid": "0073eab4-299a-4407-8d43-f2445041c776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42427", "content": "cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor\n\nA threat actor named Mr_Rot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environments.\nThe attack exploits CVE-2026-41940, a vulnerability impacting cPanel and WebHost Manager (WHM) that could result in an authentication bypass and allow remote attackers to gain elevated control of the control\nhttps://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.html", "creation_timestamp": "2026-09-19T00:00:44.753785Z"} https://vulnerability.circl.lu/sighting/0073eab4-299a-4407-8d43-f2445041c776/export Sat, 19 Sep 2026 00:00:44 +0000 https://vulnerability.circl.lu/sighting/1fe0f1ce-21b6-47e3-81ed-912725e5809c/export {"uuid": "1fe0f1ce-21b6-47e3-81ed-912725e5809c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42282", "content": "Critrical cPanel flaw mass-exploited in \"Sorry\" ransomware attacks\n\nA new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in \"Sorry\" ransomware attacks. [...]\nhttps://www.bleepingcomputer.com/news/security/critrical-cpanel-flaw-mass-exploited-in-sorry-ransomware-attacks/", "creation_timestamp": "2026-09-19T00:00:40.868398Z"} {"uuid": "1fe0f1ce-21b6-47e3-81ed-912725e5809c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42282", "content": "Critrical cPanel flaw mass-exploited in \"Sorry\" ransomware attacks\n\nA new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in \"Sorry\" ransomware attacks. [...]\nhttps://www.bleepingcomputer.com/news/security/critrical-cpanel-flaw-mass-exploited-in-sorry-ransomware-attacks/", "creation_timestamp": "2026-09-19T00:00:40.868398Z"} https://vulnerability.circl.lu/sighting/1fe0f1ce-21b6-47e3-81ed-912725e5809c/export Sat, 19 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/57eb9a05-944b-44e5-9197-6b2a0aa2b429/export {"uuid": "57eb9a05-944b-44e5-9197-6b2a0aa2b429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42289", "content": "The cPanel Situation Is Spiraling Fast\n\nOn April 29, CVE-2026-41940 was disclosed: a critical pre-authentication bypass in cPanel/WHM that lets remote attackers skip the login flow entirely and gain elevated access. Within 24 hours, it was already being weaponized. Censys watched the fallout in real time.\nhttps://darkwebinformer.com/the-cpanel-situation-is-spiraling-fast/", "creation_timestamp": "2026-09-19T00:00:40.802442Z"} {"uuid": "57eb9a05-944b-44e5-9197-6b2a0aa2b429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42289", "content": "The cPanel Situation Is Spiraling Fast\n\nOn April 29, CVE-2026-41940 was disclosed: a critical pre-authentication bypass in cPanel/WHM that lets remote attackers skip the login flow entirely and gain elevated access. Within 24 hours, it was already being weaponized. Censys watched the fallout in real time.\nhttps://darkwebinformer.com/the-cpanel-situation-is-spiraling-fast/", "creation_timestamp": "2026-09-19T00:00:40.802442Z"} https://vulnerability.circl.lu/sighting/57eb9a05-944b-44e5-9197-6b2a0aa2b429/export Sat, 19 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/ba1456e4-f9bd-4101-bc18-386256cf0206/export {"uuid": "ba1456e4-f9bd-4101-bc18-386256cf0206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42310", "content": "Over 40,000 Servers Compromised in Ongoing cPanel Exploitation\n\nThe attacks likely target CVE-2026-41940, a recently patched zero-day leading to administrative access.\nThe post Over 40,000 Servers Compromised in Ongoing cPanel Exploitation appeared first on SecurityWeek.\nhttps://www.securityweek.com/over-40000-servers-compromised-in-ongoing-cpanel-exploitation/", "creation_timestamp": "2026-09-19T00:00:40.679462Z"} {"uuid": "ba1456e4-f9bd-4101-bc18-386256cf0206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42310", "content": "Over 40,000 Servers Compromised in Ongoing cPanel Exploitation\n\nThe attacks likely target CVE-2026-41940, a recently patched zero-day leading to administrative access.\nThe post Over 40,000 Servers Compromised in Ongoing cPanel Exploitation appeared first on SecurityWeek.\nhttps://www.securityweek.com/over-40000-servers-compromised-in-ongoing-cpanel-exploitation/", "creation_timestamp": "2026-09-19T00:00:40.679462Z"} https://vulnerability.circl.lu/sighting/ba1456e4-f9bd-4101-bc18-386256cf0206/export Sat, 19 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/9e56647d-3364-4ff5-993d-abfef714533a/export {"uuid": "9e56647d-3364-4ff5-993d-abfef714533a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42239", "content": "Critical cPanel and WHM bug exploited as a zero-day, PoC now available\n\nThe critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts since late February. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-cpanel-and-whm-bug-exploited-as-a-zero-day-poc-now-available/", "creation_timestamp": "2026-09-19T00:00:39.181257Z"} {"uuid": "9e56647d-3364-4ff5-993d-abfef714533a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42239", "content": "Critical cPanel and WHM bug exploited as a zero-day, PoC now available\n\nThe critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts since late February. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-cpanel-and-whm-bug-exploited-as-a-zero-day-poc-now-available/", "creation_timestamp": "2026-09-19T00:00:39.181257Z"} https://vulnerability.circl.lu/sighting/9e56647d-3364-4ff5-993d-abfef714533a/export Sat, 19 Sep 2026 00:00:39 +0000 https://vulnerability.circl.lu/sighting/c427d8f5-e3a5-4ccf-bd38-db54c3701660/export {"uuid": "c427d8f5-e3a5-4ccf-bd38-db54c3701660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "Telegram/c5SreYmrDkdJR1r3a8RFt1SI3OPNA8AQ129hesIQxK_5L6E", "content": "", "creation_timestamp": "2026-09-19T00:00:25.063683Z"} {"uuid": "c427d8f5-e3a5-4ccf-bd38-db54c3701660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "Telegram/c5SreYmrDkdJR1r3a8RFt1SI3OPNA8AQ129hesIQxK_5L6E", "content": "", "creation_timestamp": "2026-09-19T00:00:25.063683Z"} https://vulnerability.circl.lu/sighting/c427d8f5-e3a5-4ccf-bd38-db54c3701660/export Sat, 19 Sep 2026 00:00:25 +0000 https://vulnerability.circl.lu/sighting/414f2c56-4787-499f-ae0a-2bce68512e09/export {"uuid": "414f2c56-4787-499f-ae0a-2bce68512e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "Telegram/V3jH5qgMfCK_RZohT14xLFbwVCeCRzDkJqVv0RQoK5KzgpE", "content": "", "creation_timestamp": "2026-09-19T00:00:11.554281Z"} {"uuid": "414f2c56-4787-499f-ae0a-2bce68512e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "Telegram/V3jH5qgMfCK_RZohT14xLFbwVCeCRzDkJqVv0RQoK5KzgpE", "content": "", "creation_timestamp": "2026-09-19T00:00:11.554281Z"} https://vulnerability.circl.lu/sighting/414f2c56-4787-499f-ae0a-2bce68512e09/export Sat, 19 Sep 2026 00:00:11 +0000