https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 25 Sep 2026 08:42:36 +0000 https://vulnerability.circl.lu/sighting/71f4a675-d361-4ae3-8827-00f9bd5a4a07/export {"uuid": "71f4a675-d361-4ae3-8827-00f9bd5a4a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-961", "content": "", "creation_timestamp": "2026-09-24T07:43:22.000000Z"} {"uuid": "71f4a675-d361-4ae3-8827-00f9bd5a4a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-961", "content": "", "creation_timestamp": "2026-09-24T07:43:22.000000Z"} https://vulnerability.circl.lu/sighting/71f4a675-d361-4ae3-8827-00f9bd5a4a07/export Thu, 24 Sep 2026 07:43:22 +0000 https://vulnerability.circl.lu/sighting/4c4df00e-8317-4bb2-be9d-26bf17b90c5d/export {"uuid": "4c4df00e-8317-4bb2-be9d-26bf17b90c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://t.me/CyberDispatch/3066", "content": "A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.", "creation_timestamp": "2026-09-24T06:26:13.000000Z"} {"uuid": "4c4df00e-8317-4bb2-be9d-26bf17b90c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://t.me/CyberDispatch/3066", "content": "A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.", "creation_timestamp": "2026-09-24T06:26:13.000000Z"} https://vulnerability.circl.lu/sighting/4c4df00e-8317-4bb2-be9d-26bf17b90c5d/export Thu, 24 Sep 2026 06:26:13 +0000 https://vulnerability.circl.lu/sighting/6c6e40d4-3123-403d-95d7-cf042ba05b9b/export {"uuid": "6c6e40d4-3123-403d-95d7-cf042ba05b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa3n5jd3324", "content": "CVE-2026-87899 - cpanel\ncPanel can be tricked by a signed\u2011in user to run any program with the highest system rights. This could let an attacker take full control of the server. Apply the latest cPanel updates\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cpanel #webpros #CVE #infosec", "creation_timestamp": "2026-09-24T01:20:04.231542Z"} {"uuid": "6c6e40d4-3123-403d-95d7-cf042ba05b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa3n5jd3324", "content": "CVE-2026-87899 - cpanel\ncPanel can be tricked by a signed\u2011in user to run any program with the highest system rights. This could let an attacker take full control of the server. Apply the latest cPanel updates\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cpanel #webpros #CVE #infosec", "creation_timestamp": "2026-09-24T01:20:04.231542Z"} https://vulnerability.circl.lu/sighting/6c6e40d4-3123-403d-95d7-cf042ba05b9b/export Thu, 24 Sep 2026 01:20:04 +0000 https://vulnerability.circl.lu/sighting/7236ac4e-1658-4a4a-8ded-7d0b0247cab4/export {"uuid": "7236ac4e-1658-4a4a-8ded-7d0b0247cab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwa34flpvg2x", "content": "cPanel patched critical cPanel security vulnerabilities including CVE-2026-87899. Update cPanel and WP Toolkit now to prevent privilege escalation.\n\n#cPanel #WHM #WPToolkit #PrivilegeEscalation #Cybersecurity #Infosec #CVE202687899", "creation_timestamp": "2026-09-24T01:10:42.378322Z"} {"uuid": "7236ac4e-1658-4a4a-8ded-7d0b0247cab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwa34flpvg2x", "content": "cPanel patched critical cPanel security vulnerabilities including CVE-2026-87899. Update cPanel and WP Toolkit now to prevent privilege escalation.\n\n#cPanel #WHM #WPToolkit #PrivilegeEscalation #Cybersecurity #Infosec #CVE202687899", "creation_timestamp": "2026-09-24T01:10:42.378322Z"} https://vulnerability.circl.lu/sighting/7236ac4e-1658-4a4a-8ded-7d0b0247cab4/export Thu, 24 Sep 2026 01:10:42 +0000 https://vulnerability.circl.lu/sighting/c1fe09b3-53e4-4ad0-8d59-99ac0de17da6/export {"uuid": "c1fe09b3-53e4-4ad0-8d59-99ac0de17da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mw7wfjagft25", "content": "CVE-2026-87899 is trending. Hype score 7, currently #6 on cvemon.\n\nExecution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-87899", "creation_timestamp": "2026-09-23T23:46:19.338823Z"} {"uuid": "c1fe09b3-53e4-4ad0-8d59-99ac0de17da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mw7wfjagft25", "content": "CVE-2026-87899 is trending. Hype score 7, currently #6 on cvemon.\n\nExecution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-87899", "creation_timestamp": "2026-09-23T23:46:19.338823Z"} https://vulnerability.circl.lu/sighting/c1fe09b3-53e4-4ad0-8d59-99ac0de17da6/export Wed, 23 Sep 2026 23:46:19 +0000 https://vulnerability.circl.lu/sighting/4a7626cd-628b-4f06-bcf8-efc661b92245/export {"uuid": "4a7626cd-628b-4f06-bcf8-efc661b92245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qwx4prb2f", "content": "\ud83d\udea8 CVE-2026-87899 \u2014 CVSS 9.4 CRITICAL\n\nExecution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87899\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:08:41.657563Z"} {"uuid": "4a7626cd-628b-4f06-bcf8-efc661b92245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qwx4prb2f", "content": "\ud83d\udea8 CVE-2026-87899 \u2014 CVSS 9.4 CRITICAL\n\nExecution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87899\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:08:41.657563Z"} https://vulnerability.circl.lu/sighting/4a7626cd-628b-4f06-bcf8-efc661b92245/export Wed, 23 Sep 2026 22:08:41 +0000 https://vulnerability.circl.lu/sighting/c5831a3f-7494-4ff2-9fe5-ae50a74e4dee/export {"uuid": "c5831a3f-7494-4ff2-9fe5-ae50a74e4dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/cyberattaque.org/post/3mw74bfyao22d", "content": "\ud83d\udea8\u00c0 PARTAGER AUTOUR DE VOUS \ud83d\udea8 \n\nSi vous utilisez #cPanel, mettez \u00e0 jour rapidement.\n\nLes h\u00e9bergements mutualis\u00e9s sont particuli\u00e8rement expos\u00e9s.\n\nLa faille critique #CVE-2026-87899 permet \u00e0 un simple utilisateur de prendre le contr\u00f4le complet du serveur.\n\nwww.cyberattaque.org/cve-2026-878...", "creation_timestamp": "2026-09-23T15:58:46.879256Z"} {"uuid": "c5831a3f-7494-4ff2-9fe5-ae50a74e4dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://bsky.app/profile/cyberattaque.org/post/3mw74bfyao22d", "content": "\ud83d\udea8\u00c0 PARTAGER AUTOUR DE VOUS \ud83d\udea8 \n\nSi vous utilisez #cPanel, mettez \u00e0 jour rapidement.\n\nLes h\u00e9bergements mutualis\u00e9s sont particuli\u00e8rement expos\u00e9s.\n\nLa faille critique #CVE-2026-87899 permet \u00e0 un simple utilisateur de prendre le contr\u00f4le complet du serveur.\n\nwww.cyberattaque.org/cve-2026-878...", "creation_timestamp": "2026-09-23T15:58:46.879256Z"} https://vulnerability.circl.lu/sighting/c5831a3f-7494-4ff2-9fe5-ae50a74e4dee/export Wed, 23 Sep 2026 15:58:46 +0000 https://vulnerability.circl.lu/sighting/2ba5d596-4b30-4cbf-a512-30fc8d4844ad/export {"uuid": "2ba5d596-4b30-4cbf-a512-30fc8d4844ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://t.me/thehackernews/10141", "content": "\u203c\ufe0f ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html", "creation_timestamp": "2026-09-23T14:26:02.000000Z"} {"uuid": "2ba5d596-4b30-4cbf-a512-30fc8d4844ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87899", "type": "seen", "source": "https://t.me/thehackernews/10141", "content": "\u203c\ufe0f ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html", "creation_timestamp": "2026-09-23T14:26:02.000000Z"} https://vulnerability.circl.lu/sighting/2ba5d596-4b30-4cbf-a512-30fc8d4844ad/export Wed, 23 Sep 2026 14:26:02 +0000