<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 18:02:30 +0000</lastBuildDate>
    <item>
      <title>5c695eb8-2794-404a-8ace-38d1677d412a</title>
      <link>https://vulnerability.circl.lu/sighting/5c695eb8-2794-404a-8ace-38d1677d412a/export</link>
      <description>{"uuid": "5c695eb8-2794-404a-8ace-38d1677d412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoyfxypnb24", "content": "\ud83d\udea8 CVE-2026-87796 \u2014 CVSS 9.8 CRITICAL\n\nThe Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87796\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T06:07:06.751746Z"}</description>
      <content:encoded>{"uuid": "5c695eb8-2794-404a-8ace-38d1677d412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoyfxypnb24", "content": "\ud83d\udea8 CVE-2026-87796 \u2014 CVSS 9.8 CRITICAL\n\nThe Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87796\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T06:07:06.751746Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5c695eb8-2794-404a-8ace-38d1677d412a/export</guid>
      <pubDate>Thu, 17 Sep 2026 06:07:06 +0000</pubDate>
    </item>
    <item>
      <title>b4575726-dfe3-466b-a960-75e8f3984b73</title>
      <link>https://vulnerability.circl.lu/sighting/b4575726-dfe3-466b-a960-75e8f3984b73/export</link>
      <description>{"uuid": "b4575726-dfe3-466b-a960-75e8f3984b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvoy22zlsx2f", "content": "CRITICAL: CVE-2026-87796 in sh1zen Multi Uploader for Gravity Forms (\u22641.1.9) allows unauthenticated arbitrary file upload \u2014 potential RCE. Disable or restrict uploads until fix confirmed. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1...", "creation_timestamp": "2026-09-17T06:00:27.805915Z"}</description>
      <content:encoded>{"uuid": "b4575726-dfe3-466b-a960-75e8f3984b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvoy22zlsx2f", "content": "CRITICAL: CVE-2026-87796 in sh1zen Multi Uploader for Gravity Forms (\u22641.1.9) allows unauthenticated arbitrary file upload \u2014 potential RCE. Disable or restrict uploads until fix confirmed. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1...", "creation_timestamp": "2026-09-17T06:00:27.805915Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b4575726-dfe3-466b-a960-75e8f3984b73/export</guid>
      <pubDate>Thu, 17 Sep 2026 06:00:27 +0000</pubDate>
    </item>
    <item>
      <title>14c38728-b3f9-4588-a283-7445c1926bec</title>
      <link>https://vulnerability.circl.lu/sighting/14c38728-b3f9-4588-a283-7445c1926bec/export</link>
      <description>{"uuid": "14c38728-b3f9-4588-a283-7445c1926bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117284852533602073", "content": "CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms \u22641.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet \u2014 disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE", "creation_timestamp": "2026-09-17T06:00:25.757516Z"}</description>
      <content:encoded>{"uuid": "14c38728-b3f9-4588-a283-7445c1926bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117284852533602073", "content": "CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms \u22641.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet \u2014 disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE", "creation_timestamp": "2026-09-17T06:00:25.757516Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/14c38728-b3f9-4588-a283-7445c1926bec/export</guid>
      <pubDate>Thu, 17 Sep 2026 06:00:25 +0000</pubDate>
    </item>
    <item>
      <title>742b5d90-4f08-46cd-8133-bbed0efc9fec</title>
      <link>https://vulnerability.circl.lu/sighting/742b5d90-4f08-46cd-8133-bbed0efc9fec/export</link>
      <description>{"uuid": "742b5d90-4f08-46cd-8133-bbed0efc9fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoxhkad7t25", "content": "CVE-2026-87796 - multi uploader for gravity forms\nThe Multi Uploader for Gravity Forms plugin for WordPress lets unauthenticated users place any type of file on your server because it does not properly check file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sh1zen #CVE #infosec", "creation_timestamp": "2026-09-17T05:50:05.917786Z"}</description>
      <content:encoded>{"uuid": "742b5d90-4f08-46cd-8133-bbed0efc9fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoxhkad7t25", "content": "CVE-2026-87796 - multi uploader for gravity forms\nThe Multi Uploader for Gravity Forms plugin for WordPress lets unauthenticated users place any type of file on your server because it does not properly check file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sh1zen #CVE #infosec", "creation_timestamp": "2026-09-17T05:50:05.917786Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/742b5d90-4f08-46cd-8133-bbed0efc9fec/export</guid>
      <pubDate>Thu, 17 Sep 2026 05:50:05 +0000</pubDate>
    </item>
  </channel>
</rss>
