https://vulnerability.circl.lu/sightings/feed 2026-09-13T10:10:01.604304+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/53cc0955-b16e-4bd4-a6ca-f72241f8e68f/export 2026-09-13T10:10:01.635727+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "53cc0955-b16e-4bd4-a6ca-f72241f8e68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16272", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4lmbiovl2w", "content": "CVE-2026-16272 - paytr virtual pos iframe api (v9x) whmcs module\nThe PayTR Virtual POS iFrame plug\u2011in for the WHMCS billing system, versions 9.0.0 through 9.0.2, can be tricked into accepting forged identifiers. An attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-09T22:30:04.104153Z"} 2026-09-09T22:30:04.104153+00:00 https://vulnerability.circl.lu/sighting/35a5292f-31d2-4579-80a8-3cbaac34acc5/export 2026-09-13T10:10:01.638017+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "35a5292f-31d2-4579-80a8-3cbaac34acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16272", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3c46q45h2f", "content": "\ud83d\udea8 CVE-2026-16272 \u2014 CVSS 9.1 CRITICAL\n\nUse of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-16272\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T10:07:20.748038Z"} 2026-09-09T10:07:20.748038+00:00 https://vulnerability.circl.lu/sighting/4f19d0a7-7482-43f3-997d-06a7c51ec5e8/export 2026-09-13T10:10:01.638169+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4f19d0a7-7482-43f3-997d-06a7c51ec5e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16272", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117240261799525810", "content": "CVE-2026-16272 (CVSS 9.1, CRITICAL) in PayTR Virtual Pos iFrame API (v9x) WHMCS Module v9.0.0: Use of less trusted source can compromise confidentiality and integrity. No patch yet \u2014 restrict access and monitor vendor updates. https://radar.offseq.com/threat/cve-2026-16272-cwe-348-use-of-less-trusted-source-in-paytr-payment-and-electronic-money-institution-04a905be1a132f6a #OffSeq #CVE2026_16272 #infosec", "creation_timestamp": "2026-09-09T09:00:32.072295Z"} 2026-09-09T09:00:32.072295+00:00 https://vulnerability.circl.lu/sighting/2f0bf10f-b527-4611-91aa-ca83109e1f96/export 2026-09-13T10:10:01.638300+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2f0bf10f-b527-4611-91aa-ca83109e1f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16272", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv36ekenpx2x", "content": "PayTR Virtual Pos iFrame API (v9x) WHMCS Module v9.0.0 faces a CRITICAL vuln (CVE-2026-16272, CVSS 9.1) impacting confidentiality & integrity. No patch yet \u2014 restrict access & watch for updates. https://radar.offseq.com/threat/cve-2026-16272-cwe-348-use-of-less-trusted-source-in-paytr-payment-and...", "creation_timestamp": "2026-09-09T09:00:28.168109Z"} 2026-09-09T09:00:28.168109+00:00