https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 02 Sep 2026 02:11:20 +0000 https://vulnerability.circl.lu/sighting/3bf83906-3c2d-419a-aafd-f37c95782d91/export {"uuid": "3bf83906-3c2d-419a-aafd-f37c95782d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4anugu6y26", "content": "Attackers exploit CVE-2026-71362, an unauthenticated Adobe Commerce account takeover flaw (CVSS 9.1). Details and PoC are public. Patch now.\n\n#AdobeCommerce #Magento #CVE202671362 #AccountTakeover #ecommerce #InfoSec", "creation_timestamp": "2026-08-28T01:48:55.358150Z"} {"uuid": "3bf83906-3c2d-419a-aafd-f37c95782d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4anugu6y26", "content": "Attackers exploit CVE-2026-71362, an unauthenticated Adobe Commerce account takeover flaw (CVSS 9.1). Details and PoC are public. Patch now.\n\n#AdobeCommerce #Magento #CVE202671362 #AccountTakeover #ecommerce #InfoSec", "creation_timestamp": "2026-08-28T01:48:55.358150Z"} https://vulnerability.circl.lu/sighting/3bf83906-3c2d-419a-aafd-f37c95782d91/export Fri, 28 Aug 2026 01:48:55 +0000 https://vulnerability.circl.lu/sighting/4513f220-2200-401a-b7a3-20823e7b69ee/export {"uuid": "4513f220-2200-401a-b7a3-20823e7b69ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:09.614271Z"} {"uuid": "4513f220-2200-401a-b7a3-20823e7b69ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:09.614271Z"} https://vulnerability.circl.lu/sighting/4513f220-2200-401a-b7a3-20823e7b69ee/export Mon, 24 Aug 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/4db61cb0-86f9-4343-984c-f66272090fec/export {"uuid": "4db61cb0-86f9-4343-984c-f66272090fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.532067Z"} {"uuid": "4db61cb0-86f9-4343-984c-f66272090fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.532067Z"} https://vulnerability.circl.lu/sighting/4db61cb0-86f9-4343-984c-f66272090fec/export Sun, 23 Aug 2026 00:00:33 +0000 https://vulnerability.circl.lu/sighting/37fb7ee4-1d91-411c-9183-03ba1d9e1dbe/export {"uuid": "37fb7ee4-1d91-411c-9183-03ba1d9e1dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:10.085657Z"} {"uuid": "37fb7ee4-1d91-411c-9183-03ba1d9e1dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:10.085657Z"} https://vulnerability.circl.lu/sighting/37fb7ee4-1d91-411c-9183-03ba1d9e1dbe/export Sat, 22 Aug 2026 19:00:10 +0000 https://vulnerability.circl.lu/sighting/9ac31bfb-1037-4967-97a2-fcf9db8d9133/export {"uuid": "9ac31bfb-1037-4967-97a2-fcf9db8d9133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-22T00:00:12.581628Z"} {"uuid": "9ac31bfb-1037-4967-97a2-fcf9db8d9133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-22T00:00:12.581628Z"} https://vulnerability.circl.lu/sighting/9ac31bfb-1037-4967-97a2-fcf9db8d9133/export Sat, 22 Aug 2026 00:00:12 +0000 https://vulnerability.circl.lu/sighting/37fa5d05-c040-4be5-8f01-cb57622ca19e/export {"uuid": "37fa5d05-c040-4be5-8f01-cb57622ca19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/pphm_HackerNews/2623", "content": "\ud83d\udd34 Adobe Commerce Bug Targeted Immediately After Disclosure\n\nHackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports.\n\nTracked as CVE-2026-71362 (CVSS score of 9.1), the security defect is described as an incorrect authorization issue that allows unauthenticated attackers to elevate their privileges.\n\nAdobe resolved the flaw on August 2026 Patch Tuesday, saying it had no evidence of in-the-wild exploitation, but warning that threat actors have targeted Commerce before.", "creation_timestamp": "2026-08-22T00:00:08.607504Z"} {"uuid": "37fa5d05-c040-4be5-8f01-cb57622ca19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/pphm_HackerNews/2623", "content": "\ud83d\udd34 Adobe Commerce Bug Targeted Immediately After Disclosure\n\nHackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports.\n\nTracked as CVE-2026-71362 (CVSS score of 9.1), the security defect is described as an incorrect authorization issue that allows unauthenticated attackers to elevate their privileges.\n\nAdobe resolved the flaw on August 2026 Patch Tuesday, saying it had no evidence of in-the-wild exploitation, but warning that threat actors have targeted Commerce before.", "creation_timestamp": "2026-08-22T00:00:08.607504Z"} https://vulnerability.circl.lu/sighting/37fa5d05-c040-4be5-8f01-cb57622ca19e/export Sat, 22 Aug 2026 00:00:08 +0000 https://vulnerability.circl.lu/sighting/14ab632a-ee99-4734-ad96-2d0af3605cfe/export {"uuid": "14ab632a-ee99-4734-ad96-2d0af3605cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/pphm_HackerNews/2623", "content": "\ud83d\udd34 Adobe Commerce Bug Targeted Immediately After Disclosure\n\nHackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports.\n\nTracked as CVE-2026-71362 (CVSS score of 9.1), the security defect is described as an incorrect authorization issue that allows unauthenticated attackers to elevate their privileges.\n\nAdobe resolved the flaw on August 2026 Patch Tuesday, saying it had no evidence of in-the-wild exploitation, but warning that threat actors have targeted Commerce before.", "creation_timestamp": "2026-08-21T23:00:05.857216Z"} {"uuid": "14ab632a-ee99-4734-ad96-2d0af3605cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/pphm_HackerNews/2623", "content": "\ud83d\udd34 Adobe Commerce Bug Targeted Immediately After Disclosure\n\nHackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports.\n\nTracked as CVE-2026-71362 (CVSS score of 9.1), the security defect is described as an incorrect authorization issue that allows unauthenticated attackers to elevate their privileges.\n\nAdobe resolved the flaw on August 2026 Patch Tuesday, saying it had no evidence of in-the-wild exploitation, but warning that threat actors have targeted Commerce before.", "creation_timestamp": "2026-08-21T23:00:05.857216Z"} https://vulnerability.circl.lu/sighting/14ab632a-ee99-4734-ad96-2d0af3605cfe/export Fri, 21 Aug 2026 23:00:05 +0000 https://vulnerability.circl.lu/sighting/bb520dcc-570f-46fc-997b-59326e7522ac/export {"uuid": "bb520dcc-570f-46fc-997b-59326e7522ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-21T00:00:09.291061Z"} {"uuid": "bb520dcc-570f-46fc-997b-59326e7522ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-21T00:00:09.291061Z"} https://vulnerability.circl.lu/sighting/bb520dcc-570f-46fc-997b-59326e7522ac/export Fri, 21 Aug 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/c65ca7fb-9c72-45c4-82a2-8ee799fad894/export {"uuid": "c65ca7fb-9c72-45c4-82a2-8ee799fad894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-20T00:00:11.544283Z"} {"uuid": "c65ca7fb-9c72-45c4-82a2-8ee799fad894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-20T00:00:11.544283Z"} https://vulnerability.circl.lu/sighting/c65ca7fb-9c72-45c4-82a2-8ee799fad894/export Thu, 20 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/ef8c1ae2-cd43-44a7-80db-f6ff6b91d590/export {"uuid": "ef8c1ae2-cd43-44a7-80db-f6ff6b91d590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-21", "content": "", "creation_timestamp": "2026-08-19T04:45:03.592158Z"} {"uuid": "ef8c1ae2-cd43-44a7-80db-f6ff6b91d590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-21", "content": "", "creation_timestamp": "2026-08-19T04:45:03.592158Z"} https://vulnerability.circl.lu/sighting/ef8c1ae2-cd43-44a7-80db-f6ff6b91d590/export Wed, 19 Aug 2026 04:45:03 +0000