https://vulnerability.circl.lu/sightings/feed 2026-09-18T02:21:39.478464+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b500450d-b9f2-47b6-bbde-456370b18d8c/export 2026-09-18T02:21:39.502458+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b500450d-b9f2-47b6-bbde-456370b18d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-11T00:00:51.938349Z"} 2026-09-11T00:00:51.938349+00:00 https://vulnerability.circl.lu/sighting/61b75cbd-5868-44b6-9587-c49566d3da4d/export 2026-09-18T02:21:39.504955+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "61b75cbd-5868-44b6-9587-c49566d3da4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117248599082338332", "content": "\u203c\ufe0f CVE-2026-11387: A critical improper-authentication flaw in the WordPress plugin SMS Alert \u2013 SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery.\nGitHub: https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP", "creation_timestamp": "2026-09-10T20:20:42.060788Z"} 2026-09-10T20:20:42.060788+00:00 https://vulnerability.circl.lu/sighting/274573de-6a0e-40e7-b393-81ca6dde9dac/export 2026-09-18T02:21:39.505091+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "274573de-6a0e-40e7-b393-81ca6dde9dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-10T05:00:05.032870Z"} 2026-09-10T05:00:05.032870+00:00 https://vulnerability.circl.lu/sighting/4191638c-d8f8-4f76-8965-3bd9e9401f32/export 2026-09-18T02:21:39.505195+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4191638c-d8f8-4f76-8965-3bd9e9401f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11386", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqvtzsdbt22c", "content": "Ubuntu Pro Client vulnerability CVE-2026-11386 (CVSS 9.0) lets a spoofed contract server inject APT sources and run code with root privileges.\n\n#Ubuntu #UbuntuPro #CVE202611386 #Canonical #RCE #Linux #CyberSecurity", "creation_timestamp": "2026-07-18T08:31:23.433260Z"} 2026-07-18T08:31:23.433260+00:00 https://vulnerability.circl.lu/sighting/dc1a5d73-b08e-44c6-a0f7-66655adff18e/export 2026-09-18T02:21:39.505295+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dc1a5d73-b08e-44c6-a0f7-66655adff18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-18T00:00:10.800342Z"} 2026-07-18T00:00:10.800342+00:00 https://vulnerability.circl.lu/sighting/a368b1ce-4f97-4297-9fde-3a3f0849f436/export 2026-09-18T02:21:39.505391+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a368b1ce-4f97-4297-9fde-3a3f0849f436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11386", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116936433039987085", "content": "Some increased actor activities are shown targeting Canonical ubuntu-pro-client (CVE-2026-11386) https://vuldb.com/vuln/379514/cti", "creation_timestamp": "2026-07-17T17:12:45.954751Z"} 2026-07-17T17:12:45.954751+00:00 https://vulnerability.circl.lu/sighting/ed4ac0d9-805e-4911-ad25-a764e2a5fbe3/export 2026-09-18T02:21:39.505489+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ed4ac0d9-805e-4911-ad25-a764e2a5fbe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-17T01:00:21.246338Z"} 2026-07-17T01:00:21.246338+00:00 https://vulnerability.circl.lu/sighting/5d6af9cf-672d-438c-9a45-975651dbd946/export 2026-09-18T02:21:39.505588+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5d6af9cf-672d-438c-9a45-975651dbd946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11386", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsgzm7l7j2t", "content": "ubuntu-pro-client (ubuntu-advantage-tools) CRITICAL vuln: attackers can inject APT config and install root-level packages by manipulating contract server responses. Default on Ubuntu Pro images. Patch TBD. More: https://radar.offseq.com/threat/ubuntu-cve-2026-11386-a076c116b384b281 #OffSeq #Linux...", "creation_timestamp": "2026-07-17T00:00:39.363923Z"} 2026-07-17T00:00:39.363923+00:00 https://vulnerability.circl.lu/sighting/c867171d-4118-4a29-bef2-7e6362b0e837/export 2026-09-18T02:21:39.505683+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c867171d-4118-4a29-bef2-7e6362b0e837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11386", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116932374467367447", "content": "CRITICAL vuln in ubuntu-pro-client <37.2ubuntu~22.04.1: contract server manipulation can inject malicious APT config & install arbitrary packages as root. Preinstalled on Ubuntu Pro images. Patch status TBD. Details: https://radar.offseq.com/threat/ubuntu-cve-2026-11386-a076c116b384b281 #OffSeq #Ubuntu #LinuxSec #Vulnerability", "creation_timestamp": "2026-07-17T00:00:38.053492Z"} 2026-07-17T00:00:38.053492+00:00 https://vulnerability.circl.lu/sighting/dc3ace3c-e5e8-47fe-9fd2-a7c16aaa8281/export 2026-09-18T02:21:39.505774+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dc3ace3c-e5e8-47fe-9fd2-a7c16aaa8281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-16T19:00:23.174359Z"} 2026-07-16T19:00:23.174359+00:00