<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 16 Sep 2026 15:49:16 +0000</lastBuildDate>
    <item>
      <title>0736ee88-ac5b-4882-acbf-e1e6ff293cb7</title>
      <link>https://vulnerability.circl.lu/sighting/0736ee88-ac5b-4882-acbf-e1e6ff293cb7/export</link>
      <description>{"uuid": "0736ee88-ac5b-4882-acbf-e1e6ff293cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4rczhxn2w", "content": "\ud83d\udea8 CVE-2026-67399 \u2014 CVSS 9.3 CRITICAL\n\nDeserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attacke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67399\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:09:03.991659Z"}</description>
      <content:encoded>{"uuid": "0736ee88-ac5b-4882-acbf-e1e6ff293cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4rczhxn2w", "content": "\ud83d\udea8 CVE-2026-67399 \u2014 CVSS 9.3 CRITICAL\n\nDeserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attacke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67399\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:09:03.991659Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0736ee88-ac5b-4882-acbf-e1e6ff293cb7/export</guid>
      <pubDate>Mon, 14 Sep 2026 22:09:03 +0000</pubDate>
    </item>
    <item>
      <title>bba7cc3b-cbd6-4df2-91fd-8c538e355088</title>
      <link>https://vulnerability.circl.lu/sighting/bba7cc3b-cbd6-4df2-91fd-8c538e355088/export</link>
      <description>{"uuid": "bba7cc3b-cbd6-4df2-91fd-8c538e355088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pilsb52b", "content": "CVE-2026-67399 - whmcs\nVersions of WHMCS prior to 9.0.8 and 8.13.7 can be tricked into loading malicious data, which may let an outsider execute commands on your server. This could lead to data theft, service\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#whmcs #webpros #CVE #infosec", "creation_timestamp": "2026-09-14T21:50:08.916671Z"}</description>
      <content:encoded>{"uuid": "bba7cc3b-cbd6-4df2-91fd-8c538e355088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pilsb52b", "content": "CVE-2026-67399 - whmcs\nVersions of WHMCS prior to 9.0.8 and 8.13.7 can be tricked into loading malicious data, which may let an outsider execute commands on your server. This could lead to data theft, service\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#whmcs #webpros #CVE #infosec", "creation_timestamp": "2026-09-14T21:50:08.916671Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bba7cc3b-cbd6-4df2-91fd-8c538e355088/export</guid>
      <pubDate>Mon, 14 Sep 2026 21:50:08 +0000</pubDate>
    </item>
    <item>
      <title>5810d156-a8a2-4828-ad04-b644b4d3b43d</title>
      <link>https://vulnerability.circl.lu/sighting/5810d156-a8a2-4828-ad04-b644b4d3b43d/export</link>
      <description>{"uuid": "5810d156-a8a2-4828-ad04-b644b4d3b43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muttwsd2f42t", "content": "CVE-2026-67399 is trending. Hype score 2, currently #10 on cvemon.\n\nCurrently trending CVE - Hype Score: 2\n\nhttps://cvemon.intruder.io/cves/CVE-2026-67399", "creation_timestamp": "2026-09-06T11:05:09.998361Z"}</description>
      <content:encoded>{"uuid": "5810d156-a8a2-4828-ad04-b644b4d3b43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muttwsd2f42t", "content": "CVE-2026-67399 is trending. Hype score 2, currently #10 on cvemon.\n\nCurrently trending CVE - Hype Score: 2\n\nhttps://cvemon.intruder.io/cves/CVE-2026-67399", "creation_timestamp": "2026-09-06T11:05:09.998361Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5810d156-a8a2-4828-ad04-b644b4d3b43d/export</guid>
      <pubDate>Sun, 06 Sep 2026 11:05:09 +0000</pubDate>
    </item>
    <item>
      <title>22bb0b14-fc94-4ab8-b441-22f3f8573fa9</title>
      <link>https://vulnerability.circl.lu/sighting/22bb0b14-fc94-4ab8-b441-22f3f8573fa9/export</link>
      <description>{"uuid": "22bb0b14-fc94-4ab8-b441-22f3f8573fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mup3vpdm4325", "content": "WHMCS CVE-2026-67399: if you cannot upgrade to 8.13.7 or 9.0.8 yet, we published a stopgap hook that blocks the payload types this bug most likely needs.\n\nNot a fix. Copy it, test it, delete it after you patch.", "creation_timestamp": "2026-09-04T13:44:24.721100Z"}</description>
      <content:encoded>{"uuid": "22bb0b14-fc94-4ab8-b441-22f3f8573fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mup3vpdm4325", "content": "WHMCS CVE-2026-67399: if you cannot upgrade to 8.13.7 or 9.0.8 yet, we published a stopgap hook that blocks the payload types this bug most likely needs.\n\nNot a fix. Copy it, test it, delete it after you patch.", "creation_timestamp": "2026-09-04T13:44:24.721100Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/22bb0b14-fc94-4ab8-b441-22f3f8573fa9/export</guid>
      <pubDate>Fri, 04 Sep 2026 13:44:24 +0000</pubDate>
    </item>
    <item>
      <title>e4e5ce7d-ca3c-4548-9c82-a70c11d5a157</title>
      <link>https://vulnerability.circl.lu/sighting/e4e5ce7d-ca3c-4548-9c82-a70c11d5a157/export</link>
      <description>{"uuid": "e4e5ce7d-ca3c-4548-9c82-a70c11d5a157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mun2rrmtsc2d", "content": "\u26a0\ufe0f PATCH NOW\n\nWHMCS, the billing platform many hosting firms run, has a critical flaw (CVE-2026-67399): a stranger with no login can run code on the server.\n\nAffects 9.x before 9.0.8 and 8.x before 8.13.7. No workaround.\n\nPatch now.", "creation_timestamp": "2026-09-03T18:19:00.756124Z"}</description>
      <content:encoded>{"uuid": "e4e5ce7d-ca3c-4548-9c82-a70c11d5a157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mun2rrmtsc2d", "content": "\u26a0\ufe0f PATCH NOW\n\nWHMCS, the billing platform many hosting firms run, has a critical flaw (CVE-2026-67399): a stranger with no login can run code on the server.\n\nAffects 9.x before 9.0.8 and 8.x before 8.13.7. No workaround.\n\nPatch now.", "creation_timestamp": "2026-09-03T18:19:00.756124Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e4e5ce7d-ca3c-4548-9c82-a70c11d5a157/export</guid>
      <pubDate>Thu, 03 Sep 2026 18:19:00 +0000</pubDate>
    </item>
  </channel>
</rss>
