<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 27 Sep 2026 21:34:36 +0000</lastBuildDate>
    <item>
      <title>f12e8867-bc4e-4f6a-a5f9-460dd828c1af</title>
      <link>https://vulnerability.circl.lu/sighting/f12e8867-bc4e-4f6a-a5f9-460dd828c1af/export</link>
      <description>{"uuid": "f12e8867-bc4e-4f6a-a5f9-460dd828c1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2qaia72k", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97163: Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-97163\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:40.181317Z"}</description>
      <content:encoded>{"uuid": "f12e8867-bc4e-4f6a-a5f9-460dd828c1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2qaia72k", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97163: Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-97163\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:40.181317Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f12e8867-bc4e-4f6a-a5f9-460dd828c1af/export</guid>
      <pubDate>Sun, 27 Sep 2026 12:22:40 +0000</pubDate>
    </item>
    <item>
      <title>55923d39-a7e8-461a-b362-d2ba6110805e</title>
      <link>https://vulnerability.circl.lu/sighting/55923d39-a7e8-461a-b362-d2ba6110805e/export</link>
      <description>{"uuid": "55923d39-a7e8-461a-b362-d2ba6110805e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy4qbkl2u", "content": "CVE-2026-97163 - up plugin for joomla\nThe UP plugin for Joomla from lomart.fr (versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29) lets anyone on the internet add and run their own code on the server without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:06.574270Z"}</description>
      <content:encoded>{"uuid": "55923d39-a7e8-461a-b362-d2ba6110805e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy4qbkl2u", "content": "CVE-2026-97163 - up plugin for joomla\nThe UP plugin for Joomla from lomart.fr (versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29) lets anyone on the internet add and run their own code on the server without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:06.574270Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/55923d39-a7e8-461a-b362-d2ba6110805e/export</guid>
      <pubDate>Sat, 26 Sep 2026 22:20:06 +0000</pubDate>
    </item>
    <item>
      <title>af44f510-00be-4445-8f31-4ce086bc4374</title>
      <link>https://vulnerability.circl.lu/sighting/af44f510-00be-4445-8f31-4ce086bc4374/export</link>
      <description>{"uuid": "af44f510-00be-4445-8f31-4ce086bc4374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://t.me/GithubRedTeam/103476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "af44f510-00be-4445-8f31-4ce086bc4374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://t.me/GithubRedTeam/103476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/af44f510-00be-4445-8f31-4ce086bc4374/export</guid>
      <pubDate>Sat, 26 Sep 2026 22:00:08 +0000</pubDate>
    </item>
    <item>
      <title>2e739fd4-e34d-4992-86a2-963d8d4b961e</title>
      <link>https://vulnerability.circl.lu/sighting/2e739fd4-e34d-4992-86a2-963d8d4b961e/export</link>
      <description>{"uuid": "2e739fd4-e34d-4992-86a2-963d8d4b961e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "2e739fd4-e34d-4992-86a2-963d8d4b961e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2e739fd4-e34d-4992-86a2-963d8d4b961e/export</guid>
      <pubDate>Sat, 26 Sep 2026 22:00:08 +0000</pubDate>
    </item>
    <item>
      <title>4c939bc6-3cd6-4027-83ba-55b050a83c46</title>
      <link>https://vulnerability.circl.lu/sighting/4c939bc6-3cd6-4027-83ba-55b050a83c46/export</link>
      <description>{"uuid": "4c939bc6-3cd6-4027-83ba-55b050a83c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103468", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97163\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:55:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC: Joomla UP (lomart.fr) unauthenticated GitHub mini-install / remote action deployment (\u22646.0.29). Detects plugin version, probes com_ajax install triggers. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97163\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "4c939bc6-3cd6-4027-83ba-55b050a83c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103468", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97163\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:55:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC: Joomla UP (lomart.fr) unauthenticated GitHub mini-install / remote action deployment (\u22646.0.29). Detects plugin version, probes com_ajax install triggers. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97163\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4c939bc6-3cd6-4027-83ba-55b050a83c46/export</guid>
      <pubDate>Sat, 26 Sep 2026 21:00:08 +0000</pubDate>
    </item>
    <item>
      <title>5989218c-524e-493c-ac3c-ce727b9fa150</title>
      <link>https://vulnerability.circl.lu/sighting/5989218c-524e-493c-ac3c-ce727b9fa150/export</link>
      <description>{"uuid": "5989218c-524e-493c-ac3c-ce727b9fa150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3asz3cg5gqaer", "content": "CVE-2026-97163 - Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97163\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr - Una...", "creation_timestamp": "2026-09-26T16:37:06.894117Z"}</description>
      <content:encoded>{"uuid": "5989218c-524e-493c-ac3c-ce727b9fa150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3asz3cg5gqaer", "content": "CVE-2026-97163 - Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97163\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr - Una...", "creation_timestamp": "2026-09-26T16:37:06.894117Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5989218c-524e-493c-ac3c-ce727b9fa150/export</guid>
      <pubDate>Sat, 26 Sep 2026 16:37:06 +0000</pubDate>
    </item>
    <item>
      <title>401c9655-3aed-41ca-a3b2-f66b36c96531</title>
      <link>https://vulnerability.circl.lu/sighting/401c9655-3aed-41ca-a3b2-f66b36c96531/export</link>
      <description>{"uuid": "401c9655-3aed-41ca-a3b2-f66b36c96531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7vkhiw2y", "content": "\ud83d\udea8 CVE-2026-97163 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0,...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97163\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:39.247953Z"}</description>
      <content:encoded>{"uuid": "401c9655-3aed-41ca-a3b2-f66b36c96531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7vkhiw2y", "content": "\ud83d\udea8 CVE-2026-97163 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0,...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97163\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:39.247953Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/401c9655-3aed-41ca-a3b2-f66b36c96531/export</guid>
      <pubDate>Sat, 26 Sep 2026 16:08:39 +0000</pubDate>
    </item>
  </channel>
</rss>
