https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 21 Sep 2026 16:05:15 +0000 https://vulnerability.circl.lu/sighting/52831652-676d-4614-afb5-163bff0da47e/export {"uuid": "52831652-676d-4614-afb5-163bff0da47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://gist.github.com/ichintu/c58741083d468fc238c83dced24e080a", "content": "Here is a concise threat intelligence summary:\n\n**Date:** September 20, 2026 \n**Overview:** Two critical vulnerabilities were disclosed, both with publicly available exploits requiring immediate remediation.\n\n\u2022 **CVE-2026-94089 | D-Link DIR-868L (Firmware 2.01b05) | Severity: 10.0 (CRITICAL)** \nA stack-based buffer overflow in the authentication CGI handler (`webfa_authentication.cgi`) caused by unsafe `strcpy` usage. Attackers can remotely exploit this via manipulated `id/password` parameters. Public exploits are available.\n\n\u2022 **CVE-2026-88854 | OrdaSoft Joomla Gallery (Joomla < 6.2.7) | Severity: 9.3 (CRITICAL)** \nAn unauthenticated SQL injection in the search functionality (`showSearchResult`/`Ajax` functions) due to insufficient input sanitization. Allows anonymous attackers to inject `UNION SELECT` statements and extract arbitrary database contents. Publicly exploitable.\n\n**Recommendation:** Apply vendor patches immediately, restrict exposure of affected endpoints, and monitor for exploitation activity given the critical severity and public exploit availability.", "creation_timestamp": "2026-09-21T00:50:31.773238Z"} {"uuid": "52831652-676d-4614-afb5-163bff0da47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://gist.github.com/ichintu/c58741083d468fc238c83dced24e080a", "content": "Here is a concise threat intelligence summary:\n\n**Date:** September 20, 2026 \n**Overview:** Two critical vulnerabilities were disclosed, both with publicly available exploits requiring immediate remediation.\n\n\u2022 **CVE-2026-94089 | D-Link DIR-868L (Firmware 2.01b05) | Severity: 10.0 (CRITICAL)** \nA stack-based buffer overflow in the authentication CGI handler (`webfa_authentication.cgi`) caused by unsafe `strcpy` usage. Attackers can remotely exploit this via manipulated `id/password` parameters. Public exploits are available.\n\n\u2022 **CVE-2026-88854 | OrdaSoft Joomla Gallery (Joomla < 6.2.7) | Severity: 9.3 (CRITICAL)** \nAn unauthenticated SQL injection in the search functionality (`showSearchResult`/`Ajax` functions) due to insufficient input sanitization. Allows anonymous attackers to inject `UNION SELECT` statements and extract arbitrary database contents. Publicly exploitable.\n\n**Recommendation:** Apply vendor patches immediately, restrict exposure of affected endpoints, and monitor for exploitation activity given the critical severity and public exploit availability.", "creation_timestamp": "2026-09-21T00:50:31.773238Z"} https://vulnerability.circl.lu/sighting/52831652-676d-4614-afb5-163bff0da47e/export Mon, 21 Sep 2026 00:50:31 +0000 https://vulnerability.circl.lu/sighting/f16b1a8b-9d40-47cf-b61b-1ba11f2a62d1/export {"uuid": "f16b1a8b-9d40-47cf-b61b-1ba11f2a62d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy76nt3bi2k", "content": "\ud83d\udd34 CVE-2026-94089 - Critical (10)\n\nA vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94089/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T22:02:16.473776Z"} {"uuid": "f16b1a8b-9d40-47cf-b61b-1ba11f2a62d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy76nt3bi2k", "content": "\ud83d\udd34 CVE-2026-94089 - Critical (10)\n\nA vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94089/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T22:02:16.473776Z"} https://vulnerability.circl.lu/sighting/f16b1a8b-9d40-47cf-b61b-1ba11f2a62d1/export Sun, 20 Sep 2026 22:02:16 +0000 https://vulnerability.circl.lu/sighting/599c946b-6a2e-4041-924e-805027b91bce/export {"uuid": "599c946b-6a2e-4041-924e-805027b91bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvy5wzcnit2j", "content": "CVE-2026-94089 - dir-868l\nThe DIR-868L router\u2019s login handling script can be tricked into overflowing its memory when a specially crafted username or password is sent. This flaw lets an attacker run their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir868l #dlink #CVE #infosec", "creation_timestamp": "2026-09-20T21:40:04.805027Z"} {"uuid": "599c946b-6a2e-4041-924e-805027b91bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvy5wzcnit2j", "content": "CVE-2026-94089 - dir-868l\nThe DIR-868L router\u2019s login handling script can be tricked into overflowing its memory when a specially crafted username or password is sent. This flaw lets an attacker run their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir868l #dlink #CVE #infosec", "creation_timestamp": "2026-09-20T21:40:04.805027Z"} https://vulnerability.circl.lu/sighting/599c946b-6a2e-4041-924e-805027b91bce/export Sun, 20 Sep 2026 21:40:04 +0000 https://vulnerability.circl.lu/sighting/b73544be-8f0d-4b58-8a47-1fa050ae7d89/export {"uuid": "b73544be-8f0d-4b58-8a47-1fa050ae7d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117302352760461321", "content": "A new vulnerability with increased severity was disclosed for D-Link DIR-868L (CVE-2026-94089) https://vuldb.com/vuln/408017", "creation_timestamp": "2026-09-20T08:10:58.326928Z"} {"uuid": "b73544be-8f0d-4b58-8a47-1fa050ae7d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117302352760461321", "content": "A new vulnerability with increased severity was disclosed for D-Link DIR-868L (CVE-2026-94089) https://vuldb.com/vuln/408017", "creation_timestamp": "2026-09-20T08:10:58.326928Z"} https://vulnerability.circl.lu/sighting/b73544be-8f0d-4b58-8a47-1fa050ae7d89/export Sun, 20 Sep 2026 08:10:58 +0000