{"vulnerability": "CVE-2026-65883", "sightings": [{"uuid": "fda8793d-dc48-4d40-8166-c0cafb9292d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65883", "type": "seen", "source": "https://t.me/GithubRedTeam/95920", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65883\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 22:07:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAimy Captcha-Less Form Guard Joomla Component PHP Object Injection RCE. clfgd XOR keystream recovery + unserialize(). CVSS 10.0 | CWE-502 | aimy_captcha-less_form_guard < 20.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T00:00:05.449979Z"}, {"uuid": "86739b02-e1ff-401f-9e11-36900178e76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65883", "type": "seen", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-07-31T03:00:03.261101Z"}, {"uuid": "55c1c86b-d4ba-47b5-9f82-2b8146c38ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65883", "type": "seen", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-07-31T08:00:03.963284Z"}, {"uuid": "cc736514-8d75-4f5b-9642-1f4cedb8f2a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65883", "type": "published-proof-of-concept", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-08-01T00:00:36.552128Z"}, {"uuid": "40b069fe-3a9c-47c1-ad18-d9a53594b783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65883", "type": "published-proof-of-concept", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-08-01T00:00:43.029816Z"}, {"uuid": "e9c77d06-c7f7-4d6e-b953-e83abc2ec772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65883", "type": "seen", "source": "https://t.me/GithubRedTeam/95920", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65883\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 22:07:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAimy Captcha-Less Form Guard Joomla Component PHP Object Injection RCE. clfgd XOR keystream recovery + unserialize(). CVSS 10.0 | CWE-502 | aimy_captcha-less_form_guard < 20.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T00:00:46.329565Z"}, {"uuid": "34a2c28e-39d9-47c7-8c87-6e9acbc33808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65883", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrrpsvcmvs2r", "content": "CRITICAL: Aimy Captcha-Less Form Guard (Joomla, v18.0-20.0) vulnerable to PHP object injection (CVE-2026-65883). RCE possible \u2014 update or disable plugin now. https://radar.offseq.com/threat/cve-2026-65883-cwe-502-deserialization-of-untrusted-data-in-aimy-extensionscom-aimy-captcha-less-form-dff78...", "creation_timestamp": "2026-07-29T10:30:29.409352Z"}, {"uuid": "e9fc8aab-3513-4be9-9e87-d9e006f7cb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65883", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrrwthfwyk2s", "content": "CVE-2026-65883\nA security flaw in the Aimy Captcha-Less Form Guard extension for Joomla allows hackers to inject malicious code. This could potentially allow an attacker to take control of your Joomla site. To stay safe,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T12:36:04.321276Z"}]}