https://vulnerability.circl.lu/sightings/feed 2026-09-20T20:58:46.697255+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9af2b017-0c30-49d9-aa4e-307c4a241127/export 2026-09-20T20:58:46.710766+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9af2b017-0c30-49d9-aa4e-307c4a241127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4020", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43095", "content": "Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys\n\nThreat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about 100,000 sites.\n\nThe vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers to extract sensitive data, such as configuration data, API keys, secrets, and OAuth tokens\nhttps://thehackernews.com/2026/06/hackers-exploit-gravity-smtp-wordpress.html", "creation_timestamp": "2026-09-19T00:00:48.216050Z"} 2026-09-19T00:00:48.216050+00:00 https://vulnerability.circl.lu/sighting/7e60de98-a4f1-40f2-9f29-d286600afa50/export 2026-09-20T20:58:46.713074+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7e60de98-a4f1-40f2-9f29-d286600afa50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40361", "type": "seen", "source": "https://t.me/VulnerabilityNews/42465", "content": "Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises\n\nCVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an \u201centerprise killer\u201d.\nThe post Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises appeared first on SecurityWeek.\nhttps://www.securityweek.com/microsoft-patches-critical-zero-click-outlook-vulnerability-threatening-enterprises/", "creation_timestamp": "2026-09-19T00:00:44.609616Z"} 2026-09-19T00:00:44.609616+00:00 https://vulnerability.circl.lu/sighting/f8914078-d88a-4753-a34d-d5ccc4a818f2/export 2026-09-20T20:58:46.713272+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f8914078-d88a-4753-a34d-d5ccc4a818f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40362", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/117292788893315838", "content": "Micropatches released for Microsoft Excel Remote Code Execution Vulnerability (CVE-2026-40362)https://0patch.com/blog/micropatches-released-for-microsoft-excel-remote-code-execution-vulnerability-cve-2026-40362", "creation_timestamp": "2026-09-18T15:38:45.126731Z"} 2026-09-18T15:38:45.126731+00:00 https://vulnerability.circl.lu/sighting/dd661f7d-7451-4415-b97b-5a6eeb4ba0a3/export 2026-09-20T20:58:46.713422+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd661f7d-7451-4415-b97b-5a6eeb4ba0a3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40242", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7baecb9e-3ec2-47d5-9022-efe61134ef85", "content": "", "creation_timestamp": "2026-09-18T11:00:29.054352Z"} 2026-09-18T11:00:29.054352+00:00 https://vulnerability.circl.lu/sighting/9dc107fa-a76b-4eca-8e08-547930cc69c4/export 2026-09-20T20:58:46.713544+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9dc107fa-a76b-4eca-8e08-547930cc69c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40361", "type": "seen", "source": "https://t.me/VulnerabilityNews/42465", "content": "Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises\n\nCVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an \u201centerprise killer\u201d.\nThe post Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises appeared first on SecurityWeek.\nhttps://www.securityweek.com/microsoft-patches-critical-zero-click-outlook-vulnerability-threatening-enterprises/", "creation_timestamp": "2026-09-18T05:00:07.161479Z"} 2026-09-18T05:00:07.161479+00:00 https://vulnerability.circl.lu/sighting/c6758721-5ae7-489f-bf6b-68dbb580c829/export 2026-09-20T20:58:46.713680+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c6758721-5ae7-489f-bf6b-68dbb580c829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4020", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43095", "content": "Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys\n\nThreat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about 100,000 sites.\n\nThe vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers to extract sensitive data, such as configuration data, API keys, secrets, and OAuth tokens\nhttps://thehackernews.com/2026/06/hackers-exploit-gravity-smtp-wordpress.html", "creation_timestamp": "2026-09-18T05:00:04.407159Z"} 2026-09-18T05:00:04.407159+00:00 https://vulnerability.circl.lu/sighting/23a350fc-050b-4243-982d-6a86d1cc543a/export 2026-09-20T20:58:46.713782+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "23a350fc-050b-4243-982d-6a86d1cc543a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "published-proof-of-concept", "source": "Telegram/EnefVat-4pmSVJwsEenGGPQIdPVwU23eA8t3s7zWM6ulnvI", "content": "", "creation_timestamp": "2026-09-18T00:00:09.693076Z"} 2026-09-18T00:00:09.693076+00:00 https://vulnerability.circl.lu/sighting/1d54ffe3-a7e4-4375-b2fe-22de7022c16a/export 2026-09-20T20:58:46.713880+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1d54ffe3-a7e4-4375-b2fe-22de7022c16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40854", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mvpkynedcn2j", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-40854\n\nWNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism impr...", "creation_timestamp": "2026-09-17T11:39:40.228654Z"} 2026-09-17T11:39:40.228654+00:00 https://vulnerability.circl.lu/sighting/7247eb91-b3d2-45a4-ba9f-fa9a01810325/export 2026-09-20T20:58:46.713978+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7247eb91-b3d2-45a4-ba9f-fa9a01810325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40639", "type": "seen", "source": "Telegram/EnefVat-4pmSVJwsEenGGPQIdPVwU23eA8t3s7zWM6ulnvI", "content": "", "creation_timestamp": "2026-09-17T07:00:03.816633Z"} 2026-09-17T07:00:03.816633+00:00 https://vulnerability.circl.lu/sighting/219a2e71-f1cb-4883-a2c9-47404300b482/export 2026-09-20T20:58:46.714072+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "219a2e71-f1cb-4883-a2c9-47404300b482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40854", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281215010783373", "content": "Vulnerabilities in a 5g router from T-Mobile, the company known for its security?! I'm shocked. Shocked! Well, not that shocked.\nhttps://cert.pl/posts/2026/09/CVE-2026-40854/\n#internetOfShit #miraiWillNeverDie#jobSecurityForSomeone", "creation_timestamp": "2026-09-16T14:35:21.637466Z"} 2026-09-16T14:35:21.637466+00:00