<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 10 Sep 2026 18:59:06 +0000</lastBuildDate>
    <item>
      <title>18dd278d-1dcd-4ec0-aec2-ba370a08711a</title>
      <link>https://vulnerability.circl.lu/sighting/18dd278d-1dcd-4ec0-aec2-ba370a08711a/export</link>
      <description>{"uuid": "18dd278d-1dcd-4ec0-aec2-ba370a08711a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75650", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv5wefeoqm2b", "content": "CVE-2026-75650: CVSS 10.0 zero-day in Adobe Commerce and Magento, actively exploited via template injection to deploy Rust\u2026 https://0daynews.com/articles/2026-09-09-adobe-stylesmuggler-cve-2026-75650-patch/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-1570", "creation_timestamp": "2026-09-10T11:15:10.809748Z"}</description>
      <content:encoded>{"uuid": "18dd278d-1dcd-4ec0-aec2-ba370a08711a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75650", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv5wefeoqm2b", "content": "CVE-2026-75650: CVSS 10.0 zero-day in Adobe Commerce and Magento, actively exploited via template injection to deploy Rust\u2026 https://0daynews.com/articles/2026-09-09-adobe-stylesmuggler-cve-2026-75650-patch/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-1570", "creation_timestamp": "2026-09-10T11:15:10.809748Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/18dd278d-1dcd-4ec0-aec2-ba370a08711a/export</guid>
      <pubDate>Thu, 10 Sep 2026 11:15:10 +0000</pubDate>
    </item>
    <item>
      <title>0d28d39f-18f7-431a-a492-3f9da0732407</title>
      <link>https://vulnerability.circl.lu/sighting/0d28d39f-18f7-431a-a492-3f9da0732407/export</link>
      <description>{"uuid": "0d28d39f-18f7-431a-a492-3f9da0732407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mv5raafrlv2z", "content": "Executive alert: CVE-2026-75650 actively threatens Adobe Commerce and Magento infrastructure. Review board-ready risk evaluation protocols, asset integrity measures, and strategic remediation steps to protect your enterprise value today.\n\nhttps://thecybermind.co/hip4", "creation_timestamp": "2026-09-10T09:43:23.811669Z"}</description>
      <content:encoded>{"uuid": "0d28d39f-18f7-431a-a492-3f9da0732407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mv5raafrlv2z", "content": "Executive alert: CVE-2026-75650 actively threatens Adobe Commerce and Magento infrastructure. Review board-ready risk evaluation protocols, asset integrity measures, and strategic remediation steps to protect your enterprise value today.\n\nhttps://thecybermind.co/hip4", "creation_timestamp": "2026-09-10T09:43:23.811669Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0d28d39f-18f7-431a-a492-3f9da0732407/export</guid>
      <pubDate>Thu, 10 Sep 2026 09:43:23 +0000</pubDate>
    </item>
    <item>
      <title>f346bbd6-dc61-4825-b282-fc0a65aa6ea9</title>
      <link>https://vulnerability.circl.lu/sighting/f346bbd6-dc61-4825-b282-fc0a65aa6ea9/export</link>
      <description>{"uuid": "f346bbd6-dc61-4825-b282-fc0a65aa6ea9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f980a061-7bb8-490b-ab20-3a039e8543cb", "content": "", "creation_timestamp": "2026-09-10T07:10:09.444419Z"}</description>
      <content:encoded>{"uuid": "f346bbd6-dc61-4825-b282-fc0a65aa6ea9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f980a061-7bb8-490b-ab20-3a039e8543cb", "content": "", "creation_timestamp": "2026-09-10T07:10:09.444419Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f346bbd6-dc61-4825-b282-fc0a65aa6ea9/export</guid>
      <pubDate>Thu, 10 Sep 2026 07:10:09 +0000</pubDate>
    </item>
    <item>
      <title>a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7</title>
      <link>https://vulnerability.circl.lu/sighting/a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7/export</link>
      <description>{"uuid": "a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75650", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv557praqc2r", "content": "Adobe emergency patch (Sep 8) fixes CVE-2026-75650, CVSS 10.0 template-injection zero-day in Magento/Commerce. StyleSmuggler\u2026 https://0daynews.com/articles/2026-09-09-adobe-stylesmuggler-cve-2026-75650-patch/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-1569", "creation_timestamp": "2026-09-10T03:45:10.700027Z"}</description>
      <content:encoded>{"uuid": "a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75650", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv557praqc2r", "content": "Adobe emergency patch (Sep 8) fixes CVE-2026-75650, CVSS 10.0 template-injection zero-day in Magento/Commerce. StyleSmuggler\u2026 https://0daynews.com/articles/2026-09-09-adobe-stylesmuggler-cve-2026-75650-patch/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-1569", "creation_timestamp": "2026-09-10T03:45:10.700027Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7/export</guid>
      <pubDate>Thu, 10 Sep 2026 03:45:10 +0000</pubDate>
    </item>
    <item>
      <title>e2084e48-af8d-4cac-9d12-5395abc133d1</title>
      <link>https://vulnerability.circl.lu/sighting/e2084e48-af8d-4cac-9d12-5395abc133d1/export</link>
      <description>{"uuid": "e2084e48-af8d-4cac-9d12-5395abc133d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mv4txuhoed2y", "content": "Critical CVE-2026-75650 alert for Adobe Commerce and Magento. Active CISA KEV exploitation requires immediate template parsing audits and endpoint hardening. Access our technical forensic brief to secure your enterprise perimeter today.\n\nhttps://thecybermind.co/8in9", "creation_timestamp": "2026-09-10T00:59:43.646576Z"}</description>
      <content:encoded>{"uuid": "e2084e48-af8d-4cac-9d12-5395abc133d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mv4txuhoed2y", "content": "Critical CVE-2026-75650 alert for Adobe Commerce and Magento. Active CISA KEV exploitation requires immediate template parsing audits and endpoint hardening. Access our technical forensic brief to secure your enterprise perimeter today.\n\nhttps://thecybermind.co/8in9", "creation_timestamp": "2026-09-10T00:59:43.646576Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e2084e48-af8d-4cac-9d12-5395abc133d1/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:59:43 +0000</pubDate>
    </item>
    <item>
      <title>b3de3ce1-47dd-46a5-b675-6be05560b057</title>
      <link>https://vulnerability.circl.lu/sighting/b3de3ce1-47dd-46a5-b675-6be05560b057/export</link>
      <description>{"uuid": "b3de3ce1-47dd-46a5-b675-6be05560b057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://t.me/information_security_channel/55868", "content": "Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day\nhttps://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/\n\nTracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code.\nThe post Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day (https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T00:00:55.098300Z"}</description>
      <content:encoded>{"uuid": "b3de3ce1-47dd-46a5-b675-6be05560b057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://t.me/information_security_channel/55868", "content": "Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day\nhttps://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/\n\nTracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code.\nThe post Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day (https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T00:00:55.098300Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b3de3ce1-47dd-46a5-b675-6be05560b057/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:55 +0000</pubDate>
    </item>
    <item>
      <title>0ec357b5-0220-4d8a-9458-ca1f3b4c55a3</title>
      <link>https://vulnerability.circl.lu/sighting/0ec357b5-0220-4d8a-9458-ca1f3b4c55a3/export</link>
      <description>{"uuid": "0ec357b5-0220-4d8a-9458-ca1f3b4c55a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101768", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a stylesmuggler-ioc-toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 05:37:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells, persistence artifacts, and known indicators of compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:44.793995Z"}</description>
      <content:encoded>{"uuid": "0ec357b5-0220-4d8a-9458-ca1f3b4c55a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101768", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a stylesmuggler-ioc-toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 05:37:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells, persistence artifacts, and known indicators of compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:44.793995Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0ec357b5-0220-4d8a-9458-ca1f3b4c55a3/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:44 +0000</pubDate>
    </item>
    <item>
      <title>3617d6ea-f75c-4ad1-ad53-fa40ea161224</title>
      <link>https://vulnerability.circl.lu/sighting/3617d6ea-f75c-4ad1-ad53-fa40ea161224/export</link>
      <description>{"uuid": "3617d6ea-f75c-4ad1-ad53-fa40ea161224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "published-proof-of-concept", "source": "Telegram/nMh_3ts5dc8zkSwTaV9m7alIl_ypUPowc3P5Zcio_q1A5ss", "content": "", "creation_timestamp": "2026-09-10T00:00:24.054771Z"}</description>
      <content:encoded>{"uuid": "3617d6ea-f75c-4ad1-ad53-fa40ea161224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "published-proof-of-concept", "source": "Telegram/nMh_3ts5dc8zkSwTaV9m7alIl_ypUPowc3P5Zcio_q1A5ss", "content": "", "creation_timestamp": "2026-09-10T00:00:24.054771Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3617d6ea-f75c-4ad1-ad53-fa40ea161224/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:24 +0000</pubDate>
    </item>
    <item>
      <title>43eb7f25-22e4-469b-b2ec-2c337fd29b9f</title>
      <link>https://vulnerability.circl.lu/sighting/43eb7f25-22e4-469b-b2ec-2c337fd29b9f/export</link>
      <description>{"uuid": "43eb7f25-22e4-469b-b2ec-2c337fd29b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "exploited", "source": "https://t.me/HackingTeamGrupoOfficial/48950", "content": "CVE-2026-75650: Adobe Commerce and Magento Open Source RCE vulnerability (StyleSmuggler) exploited in the wild, 10.0 rating \u200d\ud83d\udd25\n\nRecently disclosed vulnerability in Adobe Commerce and Magento Open Source allows an unauthenticated attacker to execute arbitrary code. This vulnerability is being actively exploited in the wild!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bX5dx\n\ud83d\udc49 Dork: tag.name:\"magento\"\n\nRead more :\nhttps://sansec.io/research/stylesmuggler-0day", "creation_timestamp": "2026-09-10T00:00:11.635429Z"}</description>
      <content:encoded>{"uuid": "43eb7f25-22e4-469b-b2ec-2c337fd29b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "exploited", "source": "https://t.me/HackingTeamGrupoOfficial/48950", "content": "CVE-2026-75650: Adobe Commerce and Magento Open Source RCE vulnerability (StyleSmuggler) exploited in the wild, 10.0 rating \u200d\ud83d\udd25\n\nRecently disclosed vulnerability in Adobe Commerce and Magento Open Source allows an unauthenticated attacker to execute arbitrary code. This vulnerability is being actively exploited in the wild!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bX5dx\n\ud83d\udc49 Dork: tag.name:\"magento\"\n\nRead more :\nhttps://sansec.io/research/stylesmuggler-0day", "creation_timestamp": "2026-09-10T00:00:11.635429Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/43eb7f25-22e4-469b-b2ec-2c337fd29b9f/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:11 +0000</pubDate>
    </item>
    <item>
      <title>2059f11c-6ddc-470d-bba4-54a8c4dfc22d</title>
      <link>https://vulnerability.circl.lu/sighting/2059f11c-6ddc-470d-bba4-54a8c4dfc22d/export</link>
      <description>{"uuid": "2059f11c-6ddc-470d-bba4-54a8c4dfc22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mv4gzlflei22", "content": "\ud83d\udea8 CVE-2026-75650 (critical-severity) affects Magento Open Source 2.4.4 through 2.4.9. Unauthenticated template injection leads to RCE, no user interaction needed. Actively exploited in the wild. Apply the VULN-39341 hotfix via Composer, no version upgrade yet. \nMore: buff.ly/rMKge9t", "creation_timestamp": "2026-09-09T21:08:02.546690Z"}</description>
      <content:encoded>{"uuid": "2059f11c-6ddc-470d-bba4-54a8c4dfc22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mv4gzlflei22", "content": "\ud83d\udea8 CVE-2026-75650 (critical-severity) affects Magento Open Source 2.4.4 through 2.4.9. Unauthenticated template injection leads to RCE, no user interaction needed. Actively exploited in the wild. Apply the VULN-39341 hotfix via Composer, no version upgrade yet. \nMore: buff.ly/rMKge9t", "creation_timestamp": "2026-09-09T21:08:02.546690Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2059f11c-6ddc-470d-bba4-54a8c4dfc22d/export</guid>
      <pubDate>Wed, 09 Sep 2026 21:08:02 +0000</pubDate>
    </item>
  </channel>
</rss>
