<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 20:30:42 +0000</lastBuildDate>
    <item>
      <title>9e349230-edc3-4706-ab39-3b7c6b7ba913</title>
      <link>https://vulnerability.circl.lu/sighting/9e349230-edc3-4706-ab39-3b7c6b7ba913/export</link>
      <description>{"uuid": "9e349230-edc3-4706-ab39-3b7c6b7ba913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxga25eofg24", "content": "CVE-2026-7826 - falkordb\nFalkorDB versions before 4.18.4 may read past the end of its memory when processing specially crafted replication data. An attacker who can send replication commands, such as on an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#falkordb #CVE #infosec", "creation_timestamp": "2026-10-09T05:20:05.248743Z"}</description>
      <content:encoded>{"uuid": "9e349230-edc3-4706-ab39-3b7c6b7ba913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxga25eofg24", "content": "CVE-2026-7826 - falkordb\nFalkorDB versions before 4.18.4 may read past the end of its memory when processing specially crafted replication data. An attacker who can send replication commands, such as on an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#falkordb #CVE #infosec", "creation_timestamp": "2026-10-09T05:20:05.248743Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9e349230-edc3-4706-ab39-3b7c6b7ba913/export</guid>
      <pubDate>Fri, 09 Oct 2026 05:20:05 +0000</pubDate>
    </item>
    <item>
      <title>10b97d4d-e268-443f-ba0b-b7ba2ab143bd</title>
      <link>https://vulnerability.circl.lu/sighting/10b97d4d-e268-443f-ba0b-b7ba2ab143bd/export</link>
      <description>{"uuid": "10b97d4d-e268-443f-ba0b-b7ba2ab143bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78260", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4nl73stz23", "content": "CVE-2026-78260 - epayco\nThe Epayco add\u2011on for WordPress (versions up to 8.4.6) can be accessed by anyone on the internet and used to send malicious commands to your website's database. This could let an attacker view,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epayco #CVE #infosec", "creation_timestamp": "2026-08-28T05:40:04.053818Z"}</description>
      <content:encoded>{"uuid": "10b97d4d-e268-443f-ba0b-b7ba2ab143bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78260", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4nl73stz23", "content": "CVE-2026-78260 - epayco\nThe Epayco add\u2011on for WordPress (versions up to 8.4.6) can be accessed by anyone on the internet and used to send malicious commands to your website's database. This could let an attacker view,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epayco #CVE #infosec", "creation_timestamp": "2026-08-28T05:40:04.053818Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/10b97d4d-e268-443f-ba0b-b7ba2ab143bd/export</guid>
      <pubDate>Fri, 28 Aug 2026 05:40:04 +0000</pubDate>
    </item>
    <item>
      <title>cd144631-4380-4576-a217-252f4a662476</title>
      <link>https://vulnerability.circl.lu/sighting/cd144631-4380-4576-a217-252f4a662476/export</link>
      <description>{"uuid": "cd144631-4380-4576-a217-252f4a662476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78260", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2sr3w5dw2p", "content": "\ud83d\udea8 CVE-2026-78260 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Epayco &amp;lt;= 8.4.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78260\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:37.665656Z"}</description>
      <content:encoded>{"uuid": "cd144631-4380-4576-a217-252f4a662476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78260", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2sr3w5dw2p", "content": "\ud83d\udea8 CVE-2026-78260 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Epayco &amp;lt;= 8.4.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78260\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:37.665656Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cd144631-4380-4576-a217-252f4a662476/export</guid>
      <pubDate>Thu, 27 Aug 2026 12:07:37 +0000</pubDate>
    </item>
    <item>
      <title>890e5945-82be-4f61-9008-28e462cc4695</title>
      <link>https://vulnerability.circl.lu/sighting/890e5945-82be-4f61-9008-28e462cc4695/export</link>
      <description>{"uuid": "890e5945-82be-4f61-9008-28e462cc4695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/480", "content": "CVE-2026-78267 - TranslatePress &amp;lt;= 3.3.2 Unauthenticated Privilege Escalation", "creation_timestamp": "2026-08-25T21:00:04.098918Z"}</description>
      <content:encoded>{"uuid": "890e5945-82be-4f61-9008-28e462cc4695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/480", "content": "CVE-2026-78267 - TranslatePress &amp;lt;= 3.3.2 Unauthenticated Privilege Escalation", "creation_timestamp": "2026-08-25T21:00:04.098918Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/890e5945-82be-4f61-9008-28e462cc4695/export</guid>
      <pubDate>Tue, 25 Aug 2026 21:00:04 +0000</pubDate>
    </item>
    <item>
      <title>052fee44-9ce5-44b2-b937-396bbf65fb42</title>
      <link>https://vulnerability.circl.lu/sighting/052fee44-9ce5-44b2-b937-396bbf65fb42/export</link>
      <description>{"uuid": "052fee44-9ce5-44b2-b937-396bbf65fb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/482", "content": "python scanner.py -t https://www.rapidseedbox.com/\n[*] Target: https://www.rapidseedbox.com\n[*] CVE-2026-78267 - TranslatePress &amp;lt;= 3.3.2 Unauthenticated Privilege Escalation\n\n[*] Stage 1: Product/Service Detection...\n[+] Stage 1: TranslatePress/WordPress detected\n\n[*] Stage 2: Version Detection...\n[+] Stage 2: Version 2.6.4 in vulnerable range (&amp;lt;= 3.3.2)\n\n[*] Stage 3: Active Vulnerability Testing...\n[*]   Running method: privilege_escalation\n[*]   Running method: access_check\n\n[NOT VULNERABLE]\nConfidence: 70%\nEvidence: No active privilege escalation indicators detected", "creation_timestamp": "2026-08-25T21:00:04.067685Z"}</description>
      <content:encoded>{"uuid": "052fee44-9ce5-44b2-b937-396bbf65fb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/482", "content": "python scanner.py -t https://www.rapidseedbox.com/\n[*] Target: https://www.rapidseedbox.com\n[*] CVE-2026-78267 - TranslatePress &amp;lt;= 3.3.2 Unauthenticated Privilege Escalation\n\n[*] Stage 1: Product/Service Detection...\n[+] Stage 1: TranslatePress/WordPress detected\n\n[*] Stage 2: Version Detection...\n[+] Stage 2: Version 2.6.4 in vulnerable range (&amp;lt;= 3.3.2)\n\n[*] Stage 3: Active Vulnerability Testing...\n[*]   Running method: privilege_escalation\n[*]   Running method: access_check\n\n[NOT VULNERABLE]\nConfidence: 70%\nEvidence: No active privilege escalation indicators detected", "creation_timestamp": "2026-08-25T21:00:04.067685Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/052fee44-9ce5-44b2-b937-396bbf65fb42/export</guid>
      <pubDate>Tue, 25 Aug 2026 21:00:04 +0000</pubDate>
    </item>
    <item>
      <title>6111f12b-2032-4eee-8d91-30b198730129</title>
      <link>https://vulnerability.circl.lu/sighting/6111f12b-2032-4eee-8d91-30b198730129/export</link>
      <description>{"uuid": "6111f12b-2032-4eee-8d91-30b198730129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117156521289980161", "content": "CVE-2026-78264 - Unauthenticated XSS in Toolset Blocks &amp;lt;= 1.6.26. CVSS 7.1. Update immediately. #CVE #XSS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-78264/", "creation_timestamp": "2026-08-25T14:04:07.070787Z"}</description>
      <content:encoded>{"uuid": "6111f12b-2032-4eee-8d91-30b198730129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117156521289980161", "content": "CVE-2026-78264 - Unauthenticated XSS in Toolset Blocks &amp;lt;= 1.6.26. CVSS 7.1. Update immediately. #CVE #XSS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-78264/", "creation_timestamp": "2026-08-25T14:04:07.070787Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6111f12b-2032-4eee-8d91-30b198730129/export</guid>
      <pubDate>Tue, 25 Aug 2026 14:04:07 +0000</pubDate>
    </item>
    <item>
      <title>f2cd4b6b-5da7-4541-be2d-671a4452b0fc</title>
      <link>https://vulnerability.circl.lu/sighting/f2cd4b6b-5da7-4541-be2d-671a4452b0fc/export</link>
      <description>{"uuid": "f2cd4b6b-5da7-4541-be2d-671a4452b0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtvydptuwn2i", "content": "CVE-2026-78264 - Unauthenticated XSS in Toolset Blocks &amp;lt;= 1.6.26. CVSS 7.1. Update immediately. #CVE #XSS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-78264/", "creation_timestamp": "2026-08-25T14:04:06.049779Z"}</description>
      <content:encoded>{"uuid": "f2cd4b6b-5da7-4541-be2d-671a4452b0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtvydptuwn2i", "content": "CVE-2026-78264 - Unauthenticated XSS in Toolset Blocks &amp;lt;= 1.6.26. CVSS 7.1. Update immediately. #CVE #XSS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-78264/", "creation_timestamp": "2026-08-25T14:04:06.049779Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f2cd4b6b-5da7-4541-be2d-671a4452b0fc/export</guid>
      <pubDate>Tue, 25 Aug 2026 14:04:06 +0000</pubDate>
    </item>
    <item>
      <title>2418227b-7ce4-403b-84de-b6c295692fcb</title>
      <link>https://vulnerability.circl.lu/sighting/2418227b-7ce4-403b-84de-b6c295692fcb/export</link>
      <description>{"uuid": "2418227b-7ce4-403b-84de-b6c295692fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviagth6v22", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78264](https://patchstack.com/database/wordpress/plugin/toolset-blocks/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/toolset-blocks/vulnerability/wordpress-toolset-blocks-plugin-1-6-26-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2026-08-25T09:15:56.260172Z"}</description>
      <content:encoded>{"uuid": "2418227b-7ce4-403b-84de-b6c295692fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviagth6v22", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78264](https://patchstack.com/database/wordpress/plugin/toolset-blocks/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/toolset-blocks/vulnerability/wordpress-toolset-blocks-plugin-1-6-26-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2026-08-25T09:15:56.260172Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2418227b-7ce4-403b-84de-b6c295692fcb/export</guid>
      <pubDate>Tue, 25 Aug 2026 09:15:56 +0000</pubDate>
    </item>
    <item>
      <title>afe3ecba-9ef4-49eb-a434-fdd4eea7efd2</title>
      <link>https://vulnerability.circl.lu/sighting/afe3ecba-9ef4-49eb-a434-fdd4eea7efd2/export</link>
      <description>{"uuid": "afe3ecba-9ef4-49eb-a434-fdd4eea7efd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.597687Z"}</description>
      <content:encoded>{"uuid": "afe3ecba-9ef4-49eb-a434-fdd4eea7efd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.597687Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/afe3ecba-9ef4-49eb-a434-fdd4eea7efd2/export</guid>
      <pubDate>Tue, 25 Aug 2026 09:00:04 +0000</pubDate>
    </item>
    <item>
      <title>78217c3a-2403-4f64-a6c6-901b489085d1</title>
      <link>https://vulnerability.circl.lu/sighting/78217c3a-2403-4f64-a6c6-901b489085d1/export</link>
      <description>{"uuid": "78217c3a-2403-4f64-a6c6-901b489085d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78262", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.500138Z"}</description>
      <content:encoded>{"uuid": "78217c3a-2403-4f64-a6c6-901b489085d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78262", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.500138Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/78217c3a-2403-4f64-a6c6-901b489085d1/export</guid>
      <pubDate>Tue, 25 Aug 2026 09:00:04 +0000</pubDate>
    </item>
  </channel>
</rss>
