https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 23 Aug 2026 08:57:30 +0000 https://vulnerability.circl.lu/sighting/4a794703-2a92-48f9-8150-1e0028f53490/export {"uuid": "4a794703-2a92-48f9-8150-1e0028f53490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnx344xde2m", "content": "CVE-2026-77647 - spip\nWebsites using SPIP versions older than 4.4.20 can be taken over by strangers who send specially crafted pages. The software misreads certain code markers, allowing the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-22T09:20:05.155463Z"} {"uuid": "4a794703-2a92-48f9-8150-1e0028f53490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnx344xde2m", "content": "CVE-2026-77647 - spip\nWebsites using SPIP versions older than 4.4.20 can be taken over by strangers who send specially crafted pages. The software misreads certain code markers, allowing the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-22T09:20:05.155463Z"} https://vulnerability.circl.lu/sighting/4a794703-2a92-48f9-8150-1e0028f53490/export Sat, 22 Aug 2026 09:20:05 +0000 https://vulnerability.circl.lu/sighting/85c098f2-d114-405e-87f6-99b3b101dd3c/export {"uuid": "85c098f2-d114-405e-87f6-99b3b101dd3c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5d23ef8-d861-40f6-b794-b5672e099e4c", "content": "", "creation_timestamp": "2026-08-21T23:00:48.432614Z"} {"uuid": "85c098f2-d114-405e-87f6-99b3b101dd3c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5d23ef8-d861-40f6-b794-b5672e099e4c", "content": "", "creation_timestamp": "2026-08-21T23:00:48.432614Z"} https://vulnerability.circl.lu/sighting/85c098f2-d114-405e-87f6-99b3b101dd3c/export Fri, 21 Aug 2026 23:00:48 +0000 https://vulnerability.circl.lu/sighting/1364a3d0-259c-4ae0-8df2-cad97f3cef35/export {"uuid": "1364a3d0-259c-4ae0-8df2-cad97f3cef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77647", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117134745131299746", "content": "\ud83d\udcf0 Critical RCE Flaw in SPIP CMS Under Active Exploitation\n\ud83d\udea8 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-spip-cms-cve-2026-77647-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-21T17:46:36.570979Z"} {"uuid": "1364a3d0-259c-4ae0-8df2-cad97f3cef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77647", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117134745131299746", "content": "\ud83d\udcf0 Critical RCE Flaw in SPIP CMS Under Active Exploitation\n\ud83d\udea8 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-spip-cms-cve-2026-77647-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-21T17:46:36.570979Z"} https://vulnerability.circl.lu/sighting/1364a3d0-259c-4ae0-8df2-cad97f3cef35/export Fri, 21 Aug 2026 17:46:36 +0000 https://vulnerability.circl.lu/sighting/500e441e-4552-4ce4-9625-755d185bc0ed/export {"uuid": "500e441e-4552-4ce4-9625-755d185bc0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtmcvojf7i2d", "content": "\ud83d\udea8 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-21T17:46:29.168924Z"} {"uuid": "500e441e-4552-4ce4-9625-755d185bc0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtmcvojf7i2d", "content": "\ud83d\udea8 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-21T17:46:29.168924Z"} https://vulnerability.circl.lu/sighting/500e441e-4552-4ce4-9625-755d185bc0ed/export Fri, 21 Aug 2026 17:46:29 +0000 https://vulnerability.circl.lu/sighting/06863d61-b609-4255-9a66-ec608d08b7d6/export {"uuid": "06863d61-b609-4255-9a66-ec608d08b7d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkqqxfwjw22", "content": "CVE-2026-77647, a CVSS 9.8 unauthenticated RCE in SPIP before 4.4.20, is exploited in the wild. Update now.\n\n#SPIP #CVE202677647 #RCE #ExploitedInTheWild #CMS #WebSecurity", "creation_timestamp": "2026-08-21T02:49:04.129757Z"} {"uuid": "06863d61-b609-4255-9a66-ec608d08b7d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkqqxfwjw22", "content": "CVE-2026-77647, a CVSS 9.8 unauthenticated RCE in SPIP before 4.4.20, is exploited in the wild. Update now.\n\n#SPIP #CVE202677647 #RCE #ExploitedInTheWild #CMS #WebSecurity", "creation_timestamp": "2026-08-21T02:49:04.129757Z"} https://vulnerability.circl.lu/sighting/06863d61-b609-4255-9a66-ec608d08b7d6/export Fri, 21 Aug 2026 02:49:04 +0000 https://vulnerability.circl.lu/sighting/3484564a-8656-4644-a859-69f2579cf5fa/export {"uuid": "3484564a-8656-4644-a859-69f2579cf5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkko3xm5o2p", "content": "CVE-2026-77647 - spip\nWebsites using SPIP versions older than 4.4.20 can be accessed by anyone on the internet who can then cause the server to run their own programs. This happens because the software misinterprets\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-08-21T01:00:21.016303Z"} {"uuid": "3484564a-8656-4644-a859-69f2579cf5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkko3xm5o2p", "content": "CVE-2026-77647 - spip\nWebsites using SPIP versions older than 4.4.20 can be accessed by anyone on the internet who can then cause the server to run their own programs. This happens because the software misinterprets\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-08-21T01:00:21.016303Z"} https://vulnerability.circl.lu/sighting/3484564a-8656-4644-a859-69f2579cf5fa/export Fri, 21 Aug 2026 01:00:21 +0000 https://vulnerability.circl.lu/sighting/b049c208-731b-4d0d-8b40-e0941efa5bab/export {"uuid": "b049c208-731b-4d0d-8b40-e0941efa5bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g7po5x5zwz3s7", "content": "CVE-2026-77647 - SPIP Remote Code Execution Vulnerability\nCVE ID : CVE-2026-77647\n \n Published : Aug. 20, 2026, 11:16 p.m. | 38\u00a0minutes ago\n \n Description : SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...", "creation_timestamp": "2026-08-21T00:19:23.581773Z"} {"uuid": "b049c208-731b-4d0d-8b40-e0941efa5bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g7po5x5zwz3s7", "content": "CVE-2026-77647 - SPIP Remote Code Execution Vulnerability\nCVE ID : CVE-2026-77647\n \n Published : Aug. 20, 2026, 11:16 p.m. | 38\u00a0minutes ago\n \n Description : SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...", "creation_timestamp": "2026-08-21T00:19:23.581773Z"} https://vulnerability.circl.lu/sighting/b049c208-731b-4d0d-8b40-e0941efa5bab/export Fri, 21 Aug 2026 00:19:23 +0000 https://vulnerability.circl.lu/sighting/acfd93f0-b0a3-4aa5-812b-617c9bed5abb/export {"uuid": "acfd93f0-b0a3-4aa5-812b-617c9bed5abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhybv7ip25", "content": "\ud83d\udea8 CVE-2026-77647 \u2014 CVSS 9.8 CRITICAL\n\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the w...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:12:05.065210Z"} {"uuid": "acfd93f0-b0a3-4aa5-812b-617c9bed5abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhybv7ip25", "content": "\ud83d\udea8 CVE-2026-77647 \u2014 CVSS 9.8 CRITICAL\n\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the w...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:12:05.065210Z"} https://vulnerability.circl.lu/sighting/acfd93f0-b0a3-4aa5-812b-617c9bed5abb/export Fri, 21 Aug 2026 00:12:05 +0000 https://vulnerability.circl.lu/sighting/fd8e9c1b-7d51-4962-9595-d717f21a2db2/export {"uuid": "fd8e9c1b-7d51-4962-9595-d717f21a2db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkhd35e7u27", "content": "\ud83d\udd34 CVE-2026-77647 - Critical (9.8)\n\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploite...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77647/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T00:00:18.577866Z"} {"uuid": "fd8e9c1b-7d51-4962-9595-d717f21a2db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkhd35e7u27", "content": "\ud83d\udd34 CVE-2026-77647 - Critical (9.8)\n\nSPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploite...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77647/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T00:00:18.577866Z"} https://vulnerability.circl.lu/sighting/fd8e9c1b-7d51-4962-9595-d717f21a2db2/export Fri, 21 Aug 2026 00:00:18 +0000