<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 24 Sep 2026 22:14:10 +0000</lastBuildDate>
    <item>
      <title>623c4ebe-3fb2-4e22-af30-fc99e9b17929</title>
      <link>https://vulnerability.circl.lu/sighting/623c4ebe-3fb2-4e22-af30-fc99e9b17929/export</link>
      <description>{"uuid": "623c4ebe-3fb2-4e22-af30-fc99e9b17929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-961", "content": "", "creation_timestamp": "2026-09-24T07:43:22.000000Z"}</description>
      <content:encoded>{"uuid": "623c4ebe-3fb2-4e22-af30-fc99e9b17929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-961", "content": "", "creation_timestamp": "2026-09-24T07:43:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/623c4ebe-3fb2-4e22-af30-fc99e9b17929/export</guid>
      <pubDate>Thu, 24 Sep 2026 07:43:22 +0000</pubDate>
    </item>
    <item>
      <title>d5250a93-465c-4be4-a1a8-677d3ef9ea0f</title>
      <link>https://vulnerability.circl.lu/sighting/d5250a93-465c-4be4-a1a8-677d3ef9ea0f/export</link>
      <description>{"uuid": "d5250a93-465c-4be4-a1a8-677d3ef9ea0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa3na3azw2f", "content": "CVE-2026-87900 - wp toolkit for cpanel\nIf someone signs into cPanel with a valid account, they can use the WP Toolkit to open any file on the server and even run their own code. This can expose sensitive data across\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webpros #CVE #infosec", "creation_timestamp": "2026-09-24T01:20:06.765954Z"}</description>
      <content:encoded>{"uuid": "d5250a93-465c-4be4-a1a8-677d3ef9ea0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa3na3azw2f", "content": "CVE-2026-87900 - wp toolkit for cpanel\nIf someone signs into cPanel with a valid account, they can use the WP Toolkit to open any file on the server and even run their own code. This can expose sensitive data across\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webpros #CVE #infosec", "creation_timestamp": "2026-09-24T01:20:06.765954Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d5250a93-465c-4be4-a1a8-677d3ef9ea0f/export</guid>
      <pubDate>Thu, 24 Sep 2026 01:20:06 +0000</pubDate>
    </item>
    <item>
      <title>a47e3798-c6ac-4189-b43b-dc6acf0716c7</title>
      <link>https://vulnerability.circl.lu/sighting/a47e3798-c6ac-4189-b43b-dc6acf0716c7/export</link>
      <description>{"uuid": "a47e3798-c6ac-4189-b43b-dc6acf0716c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qx73oxv2k", "content": "\ud83d\udea8 CVE-2026-87900 \u2014 CVSS 9.4 CRITICAL\n\nArgument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to r...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:08:49.979805Z"}</description>
      <content:encoded>{"uuid": "a47e3798-c6ac-4189-b43b-dc6acf0716c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qx73oxv2k", "content": "\ud83d\udea8 CVE-2026-87900 \u2014 CVSS 9.4 CRITICAL\n\nArgument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to r...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:08:49.979805Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a47e3798-c6ac-4189-b43b-dc6acf0716c7/export</guid>
      <pubDate>Wed, 23 Sep 2026 22:08:49 +0000</pubDate>
    </item>
    <item>
      <title>09966c5b-a308-4c0c-a6fd-b8d4fec581a8</title>
      <link>https://vulnerability.circl.lu/sighting/09966c5b-a308-4c0c-a6fd-b8d4fec581a8/export</link>
      <description>{"uuid": "09966c5b-a308-4c0c-a6fd-b8d4fec581a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://t.me/thehackernews/10141", "content": "\u203c\ufe0f  ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html", "creation_timestamp": "2026-09-23T14:26:02.000000Z"}</description>
      <content:encoded>{"uuid": "09966c5b-a308-4c0c-a6fd-b8d4fec581a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://t.me/thehackernews/10141", "content": "\u203c\ufe0f  ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html", "creation_timestamp": "2026-09-23T14:26:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/09966c5b-a308-4c0c-a6fd-b8d4fec581a8/export</guid>
      <pubDate>Wed, 23 Sep 2026 14:26:02 +0000</pubDate>
    </item>
  </channel>
</rss>
