https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 24 Sep 2026 05:08:46 +0000 https://vulnerability.circl.lu/sighting/77d272c2-6c5d-4c6a-be20-0802b075f19d/export {"uuid": "77d272c2-6c5d-4c6a-be20-0802b075f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/wordpress-remote-code-execution-vulnerability_20260924", "content": "", "creation_timestamp": "2026-09-24T04:45:01.756957Z"} {"uuid": "77d272c2-6c5d-4c6a-be20-0802b075f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/wordpress-remote-code-execution-vulnerability_20260924", "content": "", "creation_timestamp": "2026-09-24T04:45:01.756957Z"} https://vulnerability.circl.lu/sighting/77d272c2-6c5d-4c6a-be20-0802b075f19d/export Thu, 24 Sep 2026 04:45:01 +0000 https://vulnerability.circl.lu/sighting/e90b2bdd-f484-417b-b03a-28cb8c79523a/export {"uuid": "e90b2bdd-f484-417b-b03a-28cb8c79523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaeubmwm62y", "content": "\ud83d\udcf0 CVE-2026-87902 Mulai Dieksploitasi, Hacker Targetkan WordPress untuk Eksekusi Kode\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-87902-wordpress-rce/\n\n#cpanel #cve #cybersecurity #php #rce #remoteCodeExecution #vulnerability #webSecurity #wordpress #wordpressSecu", "creation_timestamp": "2026-09-24T04:05:07.431196Z"} {"uuid": "e90b2bdd-f484-417b-b03a-28cb8c79523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaeubmwm62y", "content": "\ud83d\udcf0 CVE-2026-87902 Mulai Dieksploitasi, Hacker Targetkan WordPress untuk Eksekusi Kode\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-87902-wordpress-rce/\n\n#cpanel #cve #cybersecurity #php #rce #remoteCodeExecution #vulnerability #webSecurity #wordpress #wordpressSecu", "creation_timestamp": "2026-09-24T04:05:07.431196Z"} https://vulnerability.circl.lu/sighting/e90b2bdd-f484-417b-b03a-28cb8c79523a/export Thu, 24 Sep 2026 04:05:07 +0000 https://vulnerability.circl.lu/sighting/b86921a4-e215-4a3a-9d24-d89e4f10edb1/export {"uuid": "b86921a4-e215-4a3a-9d24-d89e4f10edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwacqkpmmk2d", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\n\nWordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated loc\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T03:27:15.079925Z"} {"uuid": "b86921a4-e215-4a3a-9d24-d89e4f10edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwacqkpmmk2d", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\n\nWordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated loc\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T03:27:15.079925Z"} https://vulnerability.circl.lu/sighting/b86921a4-e215-4a3a-9d24-d89e4f10edb1/export Thu, 24 Sep 2026 03:27:15 +0000 https://vulnerability.circl.lu/sighting/123ef7c3-65bf-4242-a153-12d213e6c494/export {"uuid": "123ef7c3-65bf-4242-a153-12d213e6c494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwac7jglow2z", "content": "WordPress RCE Vulnerability CVE-2026-87902: Critical Unauthenticated Flaw Exploited in the Wild\uff08WordPress\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u4e0d\u8981RCE\u8106\u5f31\u6027\u3001\u516c\u958b\u76f4\u5f8c\u304b\u3089\u653b\u6483\u3092\u89b3\u6e2c\uff09 #SecurityOnline (Sep 23)\n\nsecurityonline.info/wordpress-rc...", "creation_timestamp": "2026-09-24T03:17:43.475113Z"} {"uuid": "123ef7c3-65bf-4242-a153-12d213e6c494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwac7jglow2z", "content": "WordPress RCE Vulnerability CVE-2026-87902: Critical Unauthenticated Flaw Exploited in the Wild\uff08WordPress\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u4e0d\u8981RCE\u8106\u5f31\u6027\u3001\u516c\u958b\u76f4\u5f8c\u304b\u3089\u653b\u6483\u3092\u89b3\u6e2c\uff09 #SecurityOnline (Sep 23)\n\nsecurityonline.info/wordpress-rc...", "creation_timestamp": "2026-09-24T03:17:43.475113Z"} https://vulnerability.circl.lu/sighting/123ef7c3-65bf-4242-a153-12d213e6c494/export Thu, 24 Sep 2026 03:17:43 +0000 https://vulnerability.circl.lu/sighting/ec4dfe10-b633-43e6-8dda-5dbe0dfcc1b4/export {"uuid": "ec4dfe10-b633-43e6-8dda-5dbe0dfcc1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwaaxflra42e", "content": "Exploited WordPress RCE Vulnerability: PoC Released for CVE-2026-87902\uff08\u5b9f\u60aa\u7528\u3055\u308c\u308bWordPress\u306e\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3001PoC\u3082\u516c\u958b\uff09 #SecurityOnline (Sep 24)\n\nsecurityonline.info/exploited-wo...", "creation_timestamp": "2026-09-24T02:55:16.919592Z"} {"uuid": "ec4dfe10-b633-43e6-8dda-5dbe0dfcc1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwaaxflra42e", "content": "Exploited WordPress RCE Vulnerability: PoC Released for CVE-2026-87902\uff08\u5b9f\u60aa\u7528\u3055\u308c\u308bWordPress\u306e\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3001PoC\u3082\u516c\u958b\uff09 #SecurityOnline (Sep 24)\n\nsecurityonline.info/exploited-wo...", "creation_timestamp": "2026-09-24T02:55:16.919592Z"} https://vulnerability.circl.lu/sighting/ec4dfe10-b633-43e6-8dda-5dbe0dfcc1b4/export Thu, 24 Sep 2026 02:55:16 +0000 https://vulnerability.circl.lu/sighting/be6a10de-280f-4a7a-9c01-200404d2aa89/export {"uuid": "be6a10de-280f-4a7a-9c01-200404d2aa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/cyberkendra.com/post/3mwa6mp3zsk25", "content": "WordPress 7.1.2 fixes CVE-2026-87902, a critical no-login file inclusion flaw in core that can lead to code execution on some servers.\nwww.cyberkendra.com/2026/09/cve-...\n\n#wordpress #webdev #security", "creation_timestamp": "2026-09-24T02:13:34.937774Z"} {"uuid": "be6a10de-280f-4a7a-9c01-200404d2aa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/cyberkendra.com/post/3mwa6mp3zsk25", "content": "WordPress 7.1.2 fixes CVE-2026-87902, a critical no-login file inclusion flaw in core that can lead to code execution on some servers.\nwww.cyberkendra.com/2026/09/cve-...\n\n#wordpress #webdev #security", "creation_timestamp": "2026-09-24T02:13:34.937774Z"} https://vulnerability.circl.lu/sighting/be6a10de-280f-4a7a-9c01-200404d2aa89/export Thu, 24 Sep 2026 02:13:34 +0000 https://vulnerability.circl.lu/sighting/29c66cc8-566d-4ea2-85ff-9c5b21ab3766/export {"uuid": "29c66cc8-566d-4ea2-85ff-9c5b21ab3766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/news.hada.io/post/3mwa24z64pk2r", "content": "WordPress, \ub85c\uadf8\uc778 \uc5c6\uc774 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \uac00\ub2a5\ud55c \ucde8\uc57d\uc810 \uc218\uc815\n\n\ud14c\ub9c8 \ubc16\uc758 PHP \ud30c\uc77c\uc744 \ubd88\ub7ec\uc62c \uc218 \uc788\ub294 \uacbd\ub85c \uac80\uc99d \ubb38\uc81c\ub85c, \ud2b9\uc815 \ud14c\ub9c8\uc640 \uc11c\ubc84 \uc870\uac74\uc774 \ub9de\uc73c\uba74 \uc778\uc99d \uc5c6\uc774 \uc545\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. CVE-2026-87902, \uc2ec\uac01\ub3c4 9.2 Critical\uc774\uba70 7.1.2\uc5d0\uc11c \uc218\uc815\ub410\uc2b5\ub2c8\ub2e4. 4.7 \uacc4\uc5f4\uae4c\uc9c0 \ud328\uce58\uac00 \uc81c\uacf5\ub429\ub2c8\ub2e4.", "creation_timestamp": "2026-09-24T00:53:09.682653Z"} {"uuid": "29c66cc8-566d-4ea2-85ff-9c5b21ab3766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/news.hada.io/post/3mwa24z64pk2r", "content": "WordPress, \ub85c\uadf8\uc778 \uc5c6\uc774 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \uac00\ub2a5\ud55c \ucde8\uc57d\uc810 \uc218\uc815\n\n\ud14c\ub9c8 \ubc16\uc758 PHP \ud30c\uc77c\uc744 \ubd88\ub7ec\uc62c \uc218 \uc788\ub294 \uacbd\ub85c \uac80\uc99d \ubb38\uc81c\ub85c, \ud2b9\uc815 \ud14c\ub9c8\uc640 \uc11c\ubc84 \uc870\uac74\uc774 \ub9de\uc73c\uba74 \uc778\uc99d \uc5c6\uc774 \uc545\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. CVE-2026-87902, \uc2ec\uac01\ub3c4 9.2 Critical\uc774\uba70 7.1.2\uc5d0\uc11c \uc218\uc815\ub410\uc2b5\ub2c8\ub2e4. 4.7 \uacc4\uc5f4\uae4c\uc9c0 \ud328\uce58\uac00 \uc81c\uacf5\ub429\ub2c8\ub2e4.", "creation_timestamp": "2026-09-24T00:53:09.682653Z"} https://vulnerability.circl.lu/sighting/29c66cc8-566d-4ea2-85ff-9c5b21ab3766/export Thu, 24 Sep 2026 00:53:09 +0000 https://vulnerability.circl.lu/sighting/a9bf4bf7-f1d5-41d1-8ed2-13cc4205d26d/export {"uuid": "a9bf4bf7-f1d5-41d1-8ed2-13cc4205d26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mw7yjuuglv2c", "content": "CVE-2026-87902: Attackers Started Probing WordPress Sites Hours After the Patch", "creation_timestamp": "2026-09-24T00:24:33.225905Z"} {"uuid": "a9bf4bf7-f1d5-41d1-8ed2-13cc4205d26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mw7yjuuglv2c", "content": "CVE-2026-87902: Attackers Started Probing WordPress Sites Hours After the Patch", "creation_timestamp": "2026-09-24T00:24:33.225905Z"} https://vulnerability.circl.lu/sighting/a9bf4bf7-f1d5-41d1-8ed2-13cc4205d26d/export Thu, 24 Sep 2026 00:24:33 +0000 https://vulnerability.circl.lu/sighting/21d3bb1f-c3c3-445a-b6e8-6aef16b0d6a0/export {"uuid": "21d3bb1f-c3c3-445a-b6e8-6aef16b0d6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/projectdiscovery.bsky.social/post/3mw7vb2aho22f", "content": "\ud83d\udea8 CVE-2026-87902: WordPress remote code execution. Discover every WordPress site you run and see which ones are exploitable.\n\nTry for free with Neo: neo.projectdiscovery.io/sign-up?utm_...\n\n\"Find my WordPress sites and test them for CVE-2026-87902. Ask me for my domains, CIDRs, or ASNs.\"", "creation_timestamp": "2026-09-23T23:25:56.109141Z"} {"uuid": "21d3bb1f-c3c3-445a-b6e8-6aef16b0d6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/projectdiscovery.bsky.social/post/3mw7vb2aho22f", "content": "\ud83d\udea8 CVE-2026-87902: WordPress remote code execution. Discover every WordPress site you run and see which ones are exploitable.\n\nTry for free with Neo: neo.projectdiscovery.io/sign-up?utm_...\n\n\"Find my WordPress sites and test them for CVE-2026-87902. Ask me for my domains, CIDRs, or ASNs.\"", "creation_timestamp": "2026-09-23T23:25:56.109141Z"} https://vulnerability.circl.lu/sighting/21d3bb1f-c3c3-445a-b6e8-6aef16b0d6a0/export Wed, 23 Sep 2026 23:25:56 +0000 https://vulnerability.circl.lu/sighting/c1bfb5ec-1625-4d16-8e2b-4ea3e721eaeb/export {"uuid": "c1bfb5ec-1625-4d16-8e2b-4ea3e721eaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "content": "Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]", "creation_timestamp": "2026-09-23T22:00:43.051895Z"} {"uuid": "c1bfb5ec-1625-4d16-8e2b-4ea3e721eaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "content": "Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]", "creation_timestamp": "2026-09-23T22:00:43.051895Z"} https://vulnerability.circl.lu/sighting/c1bfb5ec-1625-4d16-8e2b-4ea3e721eaeb/export Wed, 23 Sep 2026 22:00:43 +0000