<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 27 Sep 2026 13:51:28 +0000</lastBuildDate>
    <item>
      <title>1359c928-b6ca-49b9-9a65-7ea6b5bc6187</title>
      <link>https://vulnerability.circl.lu/sighting/1359c928-b6ca-49b9-9a65-7ea6b5bc6187/export</link>
      <description>{"uuid": "1359c928-b6ca-49b9-9a65-7ea6b5bc6187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2olp6w2l", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97161: Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 9.2\nhttps://beta.vulnsea.com/cve/CVE-2026-97161\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:38.284761Z"}</description>
      <content:encoded>{"uuid": "1359c928-b6ca-49b9-9a65-7ea6b5bc6187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2olp6w2l", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97161: Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 9.2\nhttps://beta.vulnsea.com/cve/CVE-2026-97161\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:38.284761Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1359c928-b6ca-49b9-9a65-7ea6b5bc6187/export</guid>
      <pubDate>Sun, 27 Sep 2026 12:22:38 +0000</pubDate>
    </item>
    <item>
      <title>b7cc6290-84a7-4754-befe-8f176833e07b</title>
      <link>https://vulnerability.circl.lu/sighting/b7cc6290-84a7-4754-befe-8f176833e07b/export</link>
      <description>{"uuid": "b7cc6290-84a7-4754-befe-8f176833e07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy2kuu32u", "content": "CVE-2026-97161 - up plugin for joomla\nThe UP plugin versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29 can be tricked into reading or writing files outside its intended folder. This could let an attacker view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:05.091660Z"}</description>
      <content:encoded>{"uuid": "b7cc6290-84a7-4754-befe-8f176833e07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy2kuu32u", "content": "CVE-2026-97161 - up plugin for joomla\nThe UP plugin versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29 can be tricked into reading or writing files outside its intended folder. This could let an attacker view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:05.091660Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b7cc6290-84a7-4754-befe-8f176833e07b/export</guid>
      <pubDate>Sat, 26 Sep 2026 22:20:05 +0000</pubDate>
    </item>
    <item>
      <title>dcb43201-5939-482c-a6c4-ac9ef5dcc490</title>
      <link>https://vulnerability.circl.lu/sighting/dcb43201-5939-482c-a6c4-ac9ef5dcc490/export</link>
      <description>{"uuid": "dcb43201-5939-482c-a6c4-ac9ef5dcc490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103469", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97161\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:50:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97161 PoC: Joomla UP (lomart.fr) unauthenticated path traversal / arbitrary file read via ajax-view (\u22646.0.29). Fingerprints plugin, probes configuration.php. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97161\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:09.000000Z"}</description>
      <content:encoded>{"uuid": "dcb43201-5939-482c-a6c4-ac9ef5dcc490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103469", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97161\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:50:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97161 PoC: Joomla UP (lomart.fr) unauthenticated path traversal / arbitrary file read via ajax-view (\u22646.0.29). Fingerprints plugin, probes configuration.php. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97161\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dcb43201-5939-482c-a6c4-ac9ef5dcc490/export</guid>
      <pubDate>Sat, 26 Sep 2026 21:00:09 +0000</pubDate>
    </item>
    <item>
      <title>0928943f-ce16-484a-a714-a35a8649acc5</title>
      <link>https://vulnerability.circl.lu/sighting/0928943f-ce16-484a-a714-a35a8649acc5/export</link>
      <description>{"uuid": "0928943f-ce16-484a-a714-a35a8649acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gk33f3nb27y54", "content": "CVE-2026-97161 - Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97161\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr -...", "creation_timestamp": "2026-09-26T16:49:06.492595Z"}</description>
      <content:encoded>{"uuid": "0928943f-ce16-484a-a714-a35a8649acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gk33f3nb27y54", "content": "CVE-2026-97161 - Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97161\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr -...", "creation_timestamp": "2026-09-26T16:49:06.492595Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0928943f-ce16-484a-a714-a35a8649acc5/export</guid>
      <pubDate>Sat, 26 Sep 2026 16:49:06 +0000</pubDate>
    </item>
    <item>
      <title>92c5898f-250f-488d-81ac-7a1102ffdbb7</title>
      <link>https://vulnerability.circl.lu/sighting/92c5898f-250f-488d-81ac-7a1102ffdbb7/export</link>
      <description>{"uuid": "92c5898f-250f-488d-81ac-7a1102ffdbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7nnf2p2r", "content": "\ud83d\udea8 CVE-2026-97161 \u2014 CVSS 9.2 CRITICAL\n\nJoomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97161\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:30.653247Z"}</description>
      <content:encoded>{"uuid": "92c5898f-250f-488d-81ac-7a1102ffdbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7nnf2p2r", "content": "\ud83d\udea8 CVE-2026-97161 \u2014 CVSS 9.2 CRITICAL\n\nJoomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97161\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:30.653247Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/92c5898f-250f-488d-81ac-7a1102ffdbb7/export</guid>
      <pubDate>Sat, 26 Sep 2026 16:08:30 +0000</pubDate>
    </item>
  </channel>
</rss>
