https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 02 Sep 2026 11:35:28 +0000 https://vulnerability.circl.lu/sighting/c965d505-1806-4a01-ab78-48fdb3b6950c/export {"uuid": "c965d505-1806-4a01-ab78-48fdb3b6950c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "Telegram/5kO5Q2wTOurnBwc-YFHOCZwVFJew3TejlXiqZK_FHnxdywk", "content": "", "creation_timestamp": "2026-09-02T01:00:18.688542Z"} {"uuid": "c965d505-1806-4a01-ab78-48fdb3b6950c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "Telegram/5kO5Q2wTOurnBwc-YFHOCZwVFJew3TejlXiqZK_FHnxdywk", "content": "", "creation_timestamp": "2026-09-02T01:00:18.688542Z"} https://vulnerability.circl.lu/sighting/c965d505-1806-4a01-ab78-48fdb3b6950c/export Wed, 02 Sep 2026 01:00:18 +0000 https://vulnerability.circl.lu/sighting/510388d2-c547-4869-9845-b369afc9cc95/export {"uuid": "510388d2-c547-4869-9845-b369afc9cc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "Telegram/U-Lw1mLsBIRfCm1Ollw0n6rUh-gbSxMVEkANJuForVtnctY", "content": "", "creation_timestamp": "2026-09-02T01:00:08.658884Z"} {"uuid": "510388d2-c547-4869-9845-b369afc9cc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "Telegram/U-Lw1mLsBIRfCm1Ollw0n6rUh-gbSxMVEkANJuForVtnctY", "content": "", "creation_timestamp": "2026-09-02T01:00:08.658884Z"} https://vulnerability.circl.lu/sighting/510388d2-c547-4869-9845-b369afc9cc95/export Wed, 02 Sep 2026 01:00:08 +0000 https://vulnerability.circl.lu/sighting/a4137d54-aabc-4e23-99ab-75961fad30f4/export {"uuid": "a4137d54-aabc-4e23-99ab-75961fad30f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82222\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0x19\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-31 09:38:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGiveWP <= 4.16.7.1 Unauthenticated PHP Object Injection \u2192 RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T00:00:09.779575Z"} {"uuid": "a4137d54-aabc-4e23-99ab-75961fad30f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82222\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0x19\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-31 09:38:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGiveWP <= 4.16.7.1 Unauthenticated PHP Object Injection \u2192 RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T00:00:09.779575Z"} https://vulnerability.circl.lu/sighting/a4137d54-aabc-4e23-99ab-75961fad30f4/export Tue, 01 Sep 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/07596937-bc4a-4d9b-8d04-34742e8242e4/export {"uuid": "07596937-bc4a-4d9b-8d04-34742e8242e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/pphm_HackerNews/2935", "content": "\ud83d\udd34 Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers\n\nA critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain.\n\nA critical vulnerability in GiveWP, one of the most widely used WordPress plugins for online donations and fundraising, can let an unauthenticated attacker execute commands on the server. Patchstack disclosed the flaw on August 28, after researcher Udin Chan reported it on July 28, and GiveWP fixed it in version 4.16.7.2 released on August 27.\n\nThe issue, tracked as CVE-2026-82222 (CVSS score of 10.0), affects GiveWP versions through 4.16.7.1. An attacker doesn\u2019t need an account or user interaction to exploit the underlying vulnerability.", "creation_timestamp": "2026-09-01T00:00:09.380779Z"} {"uuid": "07596937-bc4a-4d9b-8d04-34742e8242e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/pphm_HackerNews/2935", "content": "\ud83d\udd34 Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers\n\nA critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain.\n\nA critical vulnerability in GiveWP, one of the most widely used WordPress plugins for online donations and fundraising, can let an unauthenticated attacker execute commands on the server. Patchstack disclosed the flaw on August 28, after researcher Udin Chan reported it on July 28, and GiveWP fixed it in version 4.16.7.2 released on August 27.\n\nThe issue, tracked as CVE-2026-82222 (CVSS score of 10.0), affects GiveWP versions through 4.16.7.1. An attacker doesn\u2019t need an account or user interaction to exploit the underlying vulnerability.", "creation_timestamp": "2026-09-01T00:00:09.380779Z"} https://vulnerability.circl.lu/sighting/07596937-bc4a-4d9b-8d04-34742e8242e4/export Tue, 01 Sep 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/f1aaf860-01c8-4e00-88a9-69fd4a1a928e/export {"uuid": "f1aaf860-01c8-4e00-88a9-69fd4a1a928e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "Telegram/9Yoqh7sH3hpcZGym1s5AOL0SDgosbZzJ3I3cv0NpjiXxckZ0", "content": "", "creation_timestamp": "2026-09-01T00:00:09.206936Z"} {"uuid": "f1aaf860-01c8-4e00-88a9-69fd4a1a928e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "Telegram/9Yoqh7sH3hpcZGym1s5AOL0SDgosbZzJ3I3cv0NpjiXxckZ0", "content": "", "creation_timestamp": "2026-09-01T00:00:09.206936Z"} https://vulnerability.circl.lu/sighting/f1aaf860-01c8-4e00-88a9-69fd4a1a928e/export Tue, 01 Sep 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/de182cc1-903c-41a5-a196-9a421b5f07cf/export {"uuid": "de182cc1-903c-41a5-a196-9a421b5f07cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "Telegram/9Yoqh7sH3hpcZGym1s5AOL0SDgosbZzJ3I3cv0NpjiXxckZ0", "content": "", "creation_timestamp": "2026-08-31T19:00:05.222655Z"} {"uuid": "de182cc1-903c-41a5-a196-9a421b5f07cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "Telegram/9Yoqh7sH3hpcZGym1s5AOL0SDgosbZzJ3I3cv0NpjiXxckZ0", "content": "", "creation_timestamp": "2026-08-31T19:00:05.222655Z"} https://vulnerability.circl.lu/sighting/de182cc1-903c-41a5-a196-9a421b5f07cf/export Mon, 31 Aug 2026 19:00:05 +0000 https://vulnerability.circl.lu/sighting/597adeed-dd10-4bca-9a83-454eeca2d703/export {"uuid": "597adeed-dd10-4bca-9a83-454eeca2d703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/pphm_HackerNews/2935", "content": "\ud83d\udd34 Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers\n\nA critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain.\n\nA critical vulnerability in GiveWP, one of the most widely used WordPress plugins for online donations and fundraising, can let an unauthenticated attacker execute commands on the server. Patchstack disclosed the flaw on August 28, after researcher Udin Chan reported it on July 28, and GiveWP fixed it in version 4.16.7.2 released on August 27.\n\nThe issue, tracked as CVE-2026-82222 (CVSS score of 10.0), affects GiveWP versions through 4.16.7.1. An attacker doesn\u2019t need an account or user interaction to exploit the underlying vulnerability.", "creation_timestamp": "2026-08-31T16:00:05.484154Z"} {"uuid": "597adeed-dd10-4bca-9a83-454eeca2d703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/pphm_HackerNews/2935", "content": "\ud83d\udd34 Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers\n\nA critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain.\n\nA critical vulnerability in GiveWP, one of the most widely used WordPress plugins for online donations and fundraising, can let an unauthenticated attacker execute commands on the server. Patchstack disclosed the flaw on August 28, after researcher Udin Chan reported it on July 28, and GiveWP fixed it in version 4.16.7.2 released on August 27.\n\nThe issue, tracked as CVE-2026-82222 (CVSS score of 10.0), affects GiveWP versions through 4.16.7.1. An attacker doesn\u2019t need an account or user interaction to exploit the underlying vulnerability.", "creation_timestamp": "2026-08-31T16:00:05.484154Z"} https://vulnerability.circl.lu/sighting/597adeed-dd10-4bca-9a83-454eeca2d703/export Mon, 31 Aug 2026 16:00:05 +0000 https://vulnerability.circl.lu/sighting/e853885e-2b55-4f1c-8b1f-7eff29a43b06/export {"uuid": "e853885e-2b55-4f1c-8b1f-7eff29a43b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82222\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0x19\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-31 09:38:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGiveWP <= 4.16.7.1 Unauthenticated PHP Object Injection \u2192 RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T15:00:04.341253Z"} {"uuid": "e853885e-2b55-4f1c-8b1f-7eff29a43b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82222\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0x19\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-31 09:38:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGiveWP <= 4.16.7.1 Unauthenticated PHP Object Injection \u2192 RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T15:00:04.341253Z"} https://vulnerability.circl.lu/sighting/e853885e-2b55-4f1c-8b1f-7eff29a43b06/export Mon, 31 Aug 2026 15:00:04 +0000 https://vulnerability.circl.lu/sighting/46f4bee6-1914-4d35-99a5-3ca0bf142ae1/export {"uuid": "46f4bee6-1914-4d35-99a5-3ca0bf142ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mue52rmhdw2x", "content": "Daily IT Security Digest \u2014 2026-08-31\nTwo critical WordPress plugin vulnerabilities were disclosed:- **GiveWP (CVE-2026-82222)**: Maximum-severity vulnerability allowing unauthenticated remote code execution. Attackers can take over WordPress sites.", "creation_timestamp": "2026-08-31T05:05:50.807308Z"} {"uuid": "46f4bee6-1914-4d35-99a5-3ca0bf142ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mue52rmhdw2x", "content": "Daily IT Security Digest \u2014 2026-08-31\nTwo critical WordPress plugin vulnerabilities were disclosed:- **GiveWP (CVE-2026-82222)**: Maximum-severity vulnerability allowing unauthenticated remote code execution. Attackers can take over WordPress sites.", "creation_timestamp": "2026-08-31T05:05:50.807308Z"} https://vulnerability.circl.lu/sighting/46f4bee6-1914-4d35-99a5-3ca0bf142ae1/export Mon, 31 Aug 2026 05:05:50 +0000 https://vulnerability.circl.lu/sighting/4d532a10-1ab6-4414-b902-753db7b8257f/export {"uuid": "4d532a10-1ab6-4414-b902-753db7b8257f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100304", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-82222-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a UdinChan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 01:54:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic PoC for CVE-2026-82222\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T00:00:39.879923Z"} {"uuid": "4d532a10-1ab6-4414-b902-753db7b8257f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100304", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-82222-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a UdinChan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 01:54:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic PoC for CVE-2026-82222\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T00:00:39.879923Z"} https://vulnerability.circl.lu/sighting/4d532a10-1ab6-4414-b902-753db7b8257f/export Mon, 31 Aug 2026 00:00:39 +0000