https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 12 Sep 2026 04:48:43 +0000 https://vulnerability.circl.lu/sighting/c483c750-d88f-4199-b7ce-f3275d02211e/export {"uuid": "c483c750-d88f-4199-b7ce-f3275d02211e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/CyberDispatch/2888", "content": "New CVE-2026-67401 vulnerability in cPanel lets mail-privileged hosting accounts execute code as root.\n\ncPanel says every supported cPanel & WHM version is affected and has released fixed builds.", "creation_timestamp": "2026-09-12T00:00:56.596916Z"} {"uuid": "c483c750-d88f-4199-b7ce-f3275d02211e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/CyberDispatch/2888", "content": "New CVE-2026-67401 vulnerability in cPanel lets mail-privileged hosting accounts execute code as root.\n\ncPanel says every supported cPanel & WHM version is affected and has released fixed builds.", "creation_timestamp": "2026-09-12T00:00:56.596916Z"} https://vulnerability.circl.lu/sighting/c483c750-d88f-4199-b7ce-f3275d02211e/export Sat, 12 Sep 2026 00:00:56 +0000 https://vulnerability.circl.lu/sighting/c2700a47-0103-4cbe-864f-28da24db6ca0/export {"uuid": "c2700a47-0103-4cbe-864f-28da24db6ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvaaxhid2e2w", "content": "\ud83d\udce2 [VULN] Une faille cPanel distribue des acc\u00e8s root - CVE-2026-67401\n\nUne injection SQL dans EmailTrack de cPanel permet \u00e0 un client authentifi\u00e9 avec droits mail d'\u00e9crire des fichiers arbitraires et d'ex\u00e9cuter du code en root La CVE-2026-67401 obtient un score de 9,9\u2026\n\n#CVE #Cyberveille", "creation_timestamp": "2026-09-11T09:30:07.290135Z"} {"uuid": "c2700a47-0103-4cbe-864f-28da24db6ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvaaxhid2e2w", "content": "\ud83d\udce2 [VULN] Une faille cPanel distribue des acc\u00e8s root - CVE-2026-67401\n\nUne injection SQL dans EmailTrack de cPanel permet \u00e0 un client authentifi\u00e9 avec droits mail d'\u00e9crire des fichiers arbitraires et d'ex\u00e9cuter du code en root La CVE-2026-67401 obtient un score de 9,9\u2026\n\n#CVE #Cyberveille", "creation_timestamp": "2026-09-11T09:30:07.290135Z"} https://vulnerability.circl.lu/sighting/c2700a47-0103-4cbe-864f-28da24db6ca0/export Fri, 11 Sep 2026 09:30:07 +0000 https://vulnerability.circl.lu/sighting/be38e53e-5fe9-4e53-bea0-23ede2ed68c6/export {"uuid": "be38e53e-5fe9-4e53-bea0-23ede2ed68c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/CyberDispatch/2888", "content": "New CVE-2026-67401 vulnerability in cPanel lets mail-privileged hosting accounts execute code as root.\n\ncPanel says every supported cPanel & WHM version is affected and has released fixed builds.", "creation_timestamp": "2026-09-11T01:00:03.676619Z"} {"uuid": "be38e53e-5fe9-4e53-bea0-23ede2ed68c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/CyberDispatch/2888", "content": "New CVE-2026-67401 vulnerability in cPanel lets mail-privileged hosting accounts execute code as root.\n\ncPanel says every supported cPanel & WHM version is affected and has released fixed builds.", "creation_timestamp": "2026-09-11T01:00:03.676619Z"} https://vulnerability.circl.lu/sighting/be38e53e-5fe9-4e53-bea0-23ede2ed68c6/export Fri, 11 Sep 2026 01:00:03 +0000 https://vulnerability.circl.lu/sighting/42bd3822-1b12-44ff-8bdb-5865f9c16729/export {"uuid": "42bd3822-1b12-44ff-8bdb-5865f9c16729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-11T00:00:51.889824Z"} {"uuid": "42bd3822-1b12-44ff-8bdb-5865f9c16729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-11T00:00:51.889824Z"} https://vulnerability.circl.lu/sighting/42bd3822-1b12-44ff-8bdb-5865f9c16729/export Fri, 11 Sep 2026 00:00:51 +0000 https://vulnerability.circl.lu/sighting/748f9b2e-b924-40ee-9d18-bef84bb6a39d/export {"uuid": "748f9b2e-b924-40ee-9d18-bef84bb6a39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101929", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67401-cPanel-EmailTrack-SQLi\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:27:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67401 cPanel & WHM EmailTrack SQL Injection \u2014 IOC scanner, compromise detection, patch verification, incident response and remediation toolkit.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:34.609091Z"} {"uuid": "748f9b2e-b924-40ee-9d18-bef84bb6a39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101929", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67401-cPanel-EmailTrack-SQLi\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:27:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67401 cPanel & WHM EmailTrack SQL Injection \u2014 IOC scanner, compromise detection, patch verification, incident response and remediation toolkit.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:34.609091Z"} https://vulnerability.circl.lu/sighting/748f9b2e-b924-40ee-9d18-bef84bb6a39d/export Fri, 11 Sep 2026 00:00:34 +0000 https://vulnerability.circl.lu/sighting/cc792857-0c00-4e51-9bc1-2b14bbcf0978/export {"uuid": "cc792857-0c00-4e51-9bc1-2b14bbcf0978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48979", "content": "CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating \ud83d\udd25\n\nA vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/dIEpd\n\ud83d\udc49 Dork: http.title:cpanel OR http.headers.set_cookie:\"cprelogin\" OR http.headers.set_cookie:\"cpsession\"\n\nVendor's advisory:\nhttps://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026", "creation_timestamp": "2026-09-11T00:00:31.753134Z"} {"uuid": "cc792857-0c00-4e51-9bc1-2b14bbcf0978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48979", "content": "CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating \ud83d\udd25\n\nA vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/dIEpd\n\ud83d\udc49 Dork: http.title:cpanel OR http.headers.set_cookie:\"cprelogin\" OR http.headers.set_cookie:\"cpsession\"\n\nVendor's advisory:\nhttps://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026", "creation_timestamp": "2026-09-11T00:00:31.753134Z"} https://vulnerability.circl.lu/sighting/cc792857-0c00-4e51-9bc1-2b14bbcf0978/export Fri, 11 Sep 2026 00:00:31 +0000 https://vulnerability.circl.lu/sighting/62e56c57-b41e-4a1f-b7b1-5a644cee07e6/export {"uuid": "62e56c57-b41e-4a1f-b7b1-5a644cee07e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-908", "content": "", "creation_timestamp": "2026-09-10T20:15:12.430917Z"} {"uuid": "62e56c57-b41e-4a1f-b7b1-5a644cee07e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-908", "content": "", "creation_timestamp": "2026-09-10T20:15:12.430917Z"} https://vulnerability.circl.lu/sighting/62e56c57-b41e-4a1f-b7b1-5a644cee07e6/export Thu, 10 Sep 2026 20:15:12 +0000 https://vulnerability.circl.lu/sighting/c409eb8b-6911-4874-8d47-7ebd963408e0/export {"uuid": "c409eb8b-6911-4874-8d47-7ebd963408e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv6twpryjf2j", "content": "~Cybergcca~\nSix advisories address vulnerabilities; CVE-2026-71362 is reportedly exploited in the wild.\n-\nIOCs: CVE-2026-71362, CVE-2026-67401, CVE-2026-65638\n-\n#CVE202671362 #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-09-10T20:04:24.127964Z"} {"uuid": "c409eb8b-6911-4874-8d47-7ebd963408e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv6twpryjf2j", "content": "~Cybergcca~\nSix advisories address vulnerabilities; CVE-2026-71362 is reportedly exploited in the wild.\n-\nIOCs: CVE-2026-71362, CVE-2026-67401, CVE-2026-65638\n-\n#CVE202671362 #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-09-10T20:04:24.127964Z"} https://vulnerability.circl.lu/sighting/c409eb8b-6911-4874-8d47-7ebd963408e0/export Thu, 10 Sep 2026 20:04:24 +0000 https://vulnerability.circl.lu/sighting/21fc4284-ad54-487b-bca2-659be011d926/export {"uuid": "21fc4284-ad54-487b-bca2-659be011d926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48979", "content": "CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating \ud83d\udd25\n\nA vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/dIEpd\n\ud83d\udc49 Dork: http.title:cpanel OR http.headers.set_cookie:\"cprelogin\" OR http.headers.set_cookie:\"cpsession\"\n\nVendor's advisory:\nhttps://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026", "creation_timestamp": "2026-09-10T18:00:05.880025Z"} {"uuid": "21fc4284-ad54-487b-bca2-659be011d926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48979", "content": "CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating \ud83d\udd25\n\nA vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/dIEpd\n\ud83d\udc49 Dork: http.title:cpanel OR http.headers.set_cookie:\"cprelogin\" OR http.headers.set_cookie:\"cpsession\"\n\nVendor's advisory:\nhttps://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026", "creation_timestamp": "2026-09-10T18:00:05.880025Z"} https://vulnerability.circl.lu/sighting/21fc4284-ad54-487b-bca2-659be011d926/export Thu, 10 Sep 2026 18:00:05 +0000 https://vulnerability.circl.lu/sighting/570b8a53-a33e-4c37-9cd8-7ff1610761f9/export {"uuid": "570b8a53-a33e-4c37-9cd8-7ff1610761f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/GithubRedTeam/101929", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67401-cPanel-EmailTrack-SQLi\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:27:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67401 cPanel & WHM EmailTrack SQL Injection \u2014 IOC scanner, compromise detection, patch verification, incident response and remediation toolkit.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T15:00:05.889575Z"} {"uuid": "570b8a53-a33e-4c37-9cd8-7ff1610761f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/GithubRedTeam/101929", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67401-cPanel-EmailTrack-SQLi\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:27:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67401 cPanel & WHM EmailTrack SQL Injection \u2014 IOC scanner, compromise detection, patch verification, incident response and remediation toolkit.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T15:00:05.889575Z"} https://vulnerability.circl.lu/sighting/570b8a53-a33e-4c37-9cd8-7ff1610761f9/export Thu, 10 Sep 2026 15:00:05 +0000