https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 28 Aug 2026 03:29:03 +0000 https://vulnerability.circl.lu/sighting/173bc528-5766-41d8-bb56-ac5911023830/export {"uuid": "173bc528-5766-41d8-bb56-ac5911023830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mtqvvwdls62d", "content": "\ud83d\udea8 \ud83d\udd03 EverShop flaw enables account takeover\n\nCVE-2026-72843 lets attackers overwrite customer email and passwords using an exposed UUID; fixed in 2.2.1.\n\n\ud83d\udd17 read more: securityonline.info/...\n\n#ransomNews #cyberthreats #ecommerce \n", "creation_timestamp": "2026-08-23T13:37:16.729132Z"} {"uuid": "173bc528-5766-41d8-bb56-ac5911023830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mtqvvwdls62d", "content": "\ud83d\udea8 \ud83d\udd03 EverShop flaw enables account takeover\n\nCVE-2026-72843 lets attackers overwrite customer email and passwords using an exposed UUID; fixed in 2.2.1.\n\n\ud83d\udd17 read more: securityonline.info/...\n\n#ransomNews #cyberthreats #ecommerce \n", "creation_timestamp": "2026-08-23T13:37:16.729132Z"} https://vulnerability.circl.lu/sighting/173bc528-5766-41d8-bb56-ac5911023830/export Sun, 23 Aug 2026 13:37:16 +0000 https://vulnerability.circl.lu/sighting/183fd915-6bf7-4596-beab-89dc111b20f2/export {"uuid": "183fd915-6bf7-4596-beab-89dc111b20f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtq635nmhs27", "content": "A critical EverShop account takeover flaw, CVE-2026-72843, exposes systems to an eCommerce platform vulnerability. Update to version 2.2.1 immediately.\n\n#EverShop #CyberSecurity #CVE202672843 #Vulnerability #eCommerce", "creation_timestamp": "2026-08-23T06:30:43.012327Z"} {"uuid": "183fd915-6bf7-4596-beab-89dc111b20f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtq635nmhs27", "content": "A critical EverShop account takeover flaw, CVE-2026-72843, exposes systems to an eCommerce platform vulnerability. Update to version 2.2.1 immediately.\n\n#EverShop #CyberSecurity #CVE202672843 #Vulnerability #eCommerce", "creation_timestamp": "2026-08-23T06:30:43.012327Z"} https://vulnerability.circl.lu/sighting/183fd915-6bf7-4596-beab-89dc111b20f2/export Sun, 23 Aug 2026 06:30:43 +0000 https://vulnerability.circl.lu/sighting/227350f2-d847-4b36-9aca-125e30498f7b/export {"uuid": "227350f2-d847-4b36-9aca-125e30498f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtno4wm7fn25", "content": "CVE-2026-72843\nThe update\u2011customer API in EverShop does not require a login, so anyone can send a request with a known customer ID and change that person\u2019s email or password. This lets an attacker take over a customer\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:40:03.932529Z"} {"uuid": "227350f2-d847-4b36-9aca-125e30498f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtno4wm7fn25", "content": "CVE-2026-72843\nThe update\u2011customer API in EverShop does not require a login, so anyone can send a request with a known customer ID and change that person\u2019s email or password. This lets an attacker take over a customer\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:40:03.932529Z"} https://vulnerability.circl.lu/sighting/227350f2-d847-4b36-9aca-125e30498f7b/export Sat, 22 Aug 2026 06:40:03 +0000 https://vulnerability.circl.lu/sighting/a4f01ba5-012c-4470-8e8f-3dc649719752/export {"uuid": "a4f01ba5-012c-4470-8e8f-3dc649719752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkjke23od2e", "content": "CVE-2026-72843 - evershop\nEverShop\u2019s API for updating a customer record does not check who is making the request. Anyone who knows a customer\u2019s identifier can send a request that changes the email\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#evershop #evershopcommerce #CVE #infosec", "creation_timestamp": "2026-08-21T00:40:05.034423Z"} {"uuid": "a4f01ba5-012c-4470-8e8f-3dc649719752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkjke23od2e", "content": "CVE-2026-72843 - evershop\nEverShop\u2019s API for updating a customer record does not check who is making the request. Anyone who knows a customer\u2019s identifier can send a request that changes the email\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#evershop #evershopcommerce #CVE #infosec", "creation_timestamp": "2026-08-21T00:40:05.034423Z"} https://vulnerability.circl.lu/sighting/a4f01ba5-012c-4470-8e8f-3dc649719752/export Fri, 21 Aug 2026 00:40:05 +0000 https://vulnerability.circl.lu/sighting/4f336a59-1fcd-4caa-b6f2-e8456999791b/export {"uuid": "4f336a59-1fcd-4caa-b6f2-e8456999791b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhxja3xh23", "content": "\ud83d\udea8 CVE-2026-72843 \u2014 CVSS 9.3 CRITICAL\n\nThe customer update route in EverShop is declared with \"access\": \"public\" in packages/evershop/src/modules/...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72843\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:11:39.172024Z"} {"uuid": "4f336a59-1fcd-4caa-b6f2-e8456999791b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhxja3xh23", "content": "\ud83d\udea8 CVE-2026-72843 \u2014 CVSS 9.3 CRITICAL\n\nThe customer update route in EverShop is declared with \"access\": \"public\" in packages/evershop/src/modules/...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72843\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:11:39.172024Z"} https://vulnerability.circl.lu/sighting/4f336a59-1fcd-4caa-b6f2-e8456999791b/export Fri, 21 Aug 2026 00:11:39 +0000 https://vulnerability.circl.lu/sighting/f85a6388-9b62-4582-8dca-7ae46035de0b/export {"uuid": "f85a6388-9b62-4582-8dca-7ae46035de0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdymxlgh27", "content": "\ud83d\udd34 CVE-2026-72843 - Critical (9.8)\n\nThe customer update route in EverShop is declared with \"access\": \"public\" in packages/evershop/sr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72843/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T23:00:42.885673Z"} {"uuid": "f85a6388-9b62-4582-8dca-7ae46035de0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdymxlgh27", "content": "\ud83d\udd34 CVE-2026-72843 - Critical (9.8)\n\nThe customer update route in EverShop is declared with \"access\": \"public\" in packages/evershop/sr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72843/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T23:00:42.885673Z"} https://vulnerability.circl.lu/sighting/f85a6388-9b62-4582-8dca-7ae46035de0b/export Thu, 20 Aug 2026 23:00:42 +0000