<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 12 Sep 2026 07:56:41 +0000</lastBuildDate>
    <item>
      <title>18ba1687-01f2-4128-9873-f53cbaece440</title>
      <link>https://vulnerability.circl.lu/sighting/18ba1687-01f2-4128-9873-f53cbaece440/export</link>
      <description>{"uuid": "18ba1687-01f2-4128-9873-f53cbaece440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvckngwk3b2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP &amp;lt; 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T07:28:47.849581Z"}</description>
      <content:encoded>{"uuid": "18ba1687-01f2-4128-9873-f53cbaece440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvckngwk3b2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP &amp;lt; 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T07:28:47.849581Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/18ba1687-01f2-4128-9873-f53cbaece440/export</guid>
      <pubDate>Sat, 12 Sep 2026 07:28:47 +0000</pubDate>
    </item>
    <item>
      <title>8ae5cfe2-ff97-4f2c-afa4-fc2853d24794</title>
      <link>https://vulnerability.circl.lu/sighting/8ae5cfe2-ff97-4f2c-afa4-fc2853d24794/export</link>
      <description>{"uuid": "8ae5cfe2-ff97-4f2c-afa4-fc2853d24794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvcgxbd35j2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP &amp;lt; 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T06:22:42.870247Z"}</description>
      <content:encoded>{"uuid": "8ae5cfe2-ff97-4f2c-afa4-fc2853d24794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvcgxbd35j2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP &amp;lt; 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T06:22:42.870247Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8ae5cfe2-ff97-4f2c-afa4-fc2853d24794/export</guid>
      <pubDate>Sat, 12 Sep 2026 06:22:42 +0000</pubDate>
    </item>
    <item>
      <title>82971ced-1a9b-424a-ac2a-b284f8f84ba2</title>
      <link>https://vulnerability.circl.lu/sighting/82971ced-1a9b-424a-ac2a-b284f8f84ba2/export</link>
      <description>{"uuid": "82971ced-1a9b-424a-ac2a-b284f8f84ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbrxxrgcx27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T00:07:18.124678Z"}</description>
      <content:encoded>{"uuid": "82971ced-1a9b-424a-ac2a-b284f8f84ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbrxxrgcx27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T00:07:18.124678Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/82971ced-1a9b-424a-ac2a-b284f8f84ba2/export</guid>
      <pubDate>Sat, 12 Sep 2026 00:07:18 +0000</pubDate>
    </item>
    <item>
      <title>5f807666-689b-4836-998c-3bb602b27091</title>
      <link>https://vulnerability.circl.lu/sighting/5f807666-689b-4836-998c-3bb602b27091/export</link>
      <description>{"uuid": "5f807666-689b-4836-998c-3bb602b27091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbl2goosk2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP &amp;lt; 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T22:03:24.569955Z"}</description>
      <content:encoded>{"uuid": "5f807666-689b-4836-998c-3bb602b27091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbl2goosk2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP &amp;lt; 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T22:03:24.569955Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5f807666-689b-4836-998c-3bb602b27091/export</guid>
      <pubDate>Fri, 11 Sep 2026 22:03:24 +0000</pubDate>
    </item>
    <item>
      <title>b7d16834-05cb-4d0a-85e6-faf60defbf87</title>
      <link>https://vulnerability.circl.lu/sighting/b7d16834-05cb-4d0a-85e6-faf60defbf87/export</link>
      <description>{"uuid": "b7d16834-05cb-4d0a-85e6-faf60defbf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvb5wzfnju2n", "content": "\ud83d\udea8 CVE-2026-72709 \u2014 CVSS 9.3 CRITICAL\n\nSPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72709\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T18:08:50.803593Z"}</description>
      <content:encoded>{"uuid": "b7d16834-05cb-4d0a-85e6-faf60defbf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvb5wzfnju2n", "content": "\ud83d\udea8 CVE-2026-72709 \u2014 CVSS 9.3 CRITICAL\n\nSPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72709\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T18:08:50.803593Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b7d16834-05cb-4d0a-85e6-faf60defbf87/export</guid>
      <pubDate>Fri, 11 Sep 2026 18:08:50 +0000</pubDate>
    </item>
    <item>
      <title>35154c25-29fd-4ea9-9a74-684f54f1a747</title>
      <link>https://vulnerability.circl.lu/sighting/35154c25-29fd-4ea9-9a74-684f54f1a747/export</link>
      <description>{"uuid": "35154c25-29fd-4ea9-9a74-684f54f1a747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rspmhl2b", "content": "CVE-2026-72709 - spip\nVersions of SPIP prior to 4.4.18 let an attacker who can get a special code reset the password of any account, including the admin. Because the system does not check if the user is allowed to do\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-09-11T17:30:09.419599Z"}</description>
      <content:encoded>{"uuid": "35154c25-29fd-4ea9-9a74-684f54f1a747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rspmhl2b", "content": "CVE-2026-72709 - spip\nVersions of SPIP prior to 4.4.18 let an attacker who can get a special code reset the password of any account, including the admin. Because the system does not check if the user is allowed to do\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-09-11T17:30:09.419599Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35154c25-29fd-4ea9-9a74-684f54f1a747/export</guid>
      <pubDate>Fri, 11 Sep 2026 17:30:09 +0000</pubDate>
    </item>
    <item>
      <title>bf4fe099-91b1-4107-bf6a-fed6c1453ce2</title>
      <link>https://vulnerability.circl.lu/sighting/bf4fe099-91b1-4107-bf6a-fed6c1453ce2/export</link>
      <description>{"uuid": "bf4fe099-91b1-4107-bf6a-fed6c1453ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eezs3rf76rjy6", "content": "CVE-2026-72709 - SPIP\nCVE ID : CVE-2026-72709\n \n Published : 11. September 2026 16:38 | 19\u00a0Minuten ago\n \n Description : SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauthenticated att...", "creation_timestamp": "2026-09-11T17:18:00.330922Z"}</description>
      <content:encoded>{"uuid": "bf4fe099-91b1-4107-bf6a-fed6c1453ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eezs3rf76rjy6", "content": "CVE-2026-72709 - SPIP\nCVE ID : CVE-2026-72709\n \n Published : 11. September 2026 16:38 | 19\u00a0Minuten ago\n \n Description : SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauthenticated att...", "creation_timestamp": "2026-09-11T17:18:00.330922Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bf4fe099-91b1-4107-bf6a-fed6c1453ce2/export</guid>
      <pubDate>Fri, 11 Sep 2026 17:18:00 +0000</pubDate>
    </item>
  </channel>
</rss>
