<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-12T22:35:52.849052+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6abb78a4-b5f9-4241-90a5-7c92eda64551/export</id>
    <title>6abb78a4-b5f9-4241-90a5-7c92eda64551</title>
    <updated>2026-09-12T22:35:52.865922+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6abb78a4-b5f9-4241-90a5-7c92eda64551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/10381", "content": "\ud83d\udd25Elementor Pro Unauthenticated Arbitrary File Upload to RCE \nCVE-2026-32475\n\n\ud83d\udd17 https://github.com/4minx/CVE-2026-32475", "creation_timestamp": "2026-09-09T00:00:31.589624Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6abb78a4-b5f9-4241-90a5-7c92eda64551/export"/>
    <published>2026-09-09T00:00:31.589624+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/516251e5-dbcb-44a1-bb87-cd5fea90396e/export</id>
    <title>516251e5-dbcb-44a1-bb87-cd5fea90396e</title>
    <updated>2026-09-12T22:35:52.867720+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "516251e5-dbcb-44a1-bb87-cd5fea90396e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "seen", "source": "https://t.me/LearnExploit/10381", "content": "\ud83d\udd25Elementor Pro Unauthenticated Arbitrary File Upload to RCE \nCVE-2026-32475\n\n\ud83d\udd17 https://github.com/4minx/CVE-2026-32475", "creation_timestamp": "2026-09-08T11:00:04.847598Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/516251e5-dbcb-44a1-bb87-cd5fea90396e/export"/>
    <published>2026-09-08T11:00:04.847598+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/13f35104-7484-4cfb-a63e-b028ff9100e2/export</id>
    <title>13f35104-7484-4cfb-a63e-b028ff9100e2</title>
    <updated>2026-09-12T22:35:52.867804+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "13f35104-7484-4cfb-a63e-b028ff9100e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-32475", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mut3e6azmt2b", "content": "Elementor Pro Flaw Exploited to Backdoor WordPress Sites \u2014 Attackers are exploiting CVE-2026-32475, a critical file\u2026 https://0daynews.com/articles/2026-09-04-elementor-pro-cve-2026-32475-wordpress-webshell?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-959", "creation_timestamp": "2026-09-06T03:45:14.967519Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/13f35104-7484-4cfb-a63e-b028ff9100e2/export"/>
    <published>2026-09-06T03:45:14.967519+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2ad32710-aaa5-481c-b9af-3d2f48fa1f05/export</id>
    <title>2ad32710-aaa5-481c-b9af-3d2f48fa1f05</title>
    <updated>2026-09-12T22:35:52.867873+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2ad32710-aaa5-481c-b9af-3d2f48fa1f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "seen", "source": "https://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/", "content": "Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions.\n\nThe post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek.", "creation_timestamp": "2026-09-06T01:00:34.203257Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2ad32710-aaa5-481c-b9af-3d2f48fa1f05/export"/>
    <published>2026-09-06T01:00:34.203257+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2fc9a6a4-6d09-43d2-bc48-c77902e96009/export</id>
    <title>2fc9a6a4-6d09-43d2-bc48-c77902e96009</title>
    <updated>2026-09-12T22:35:52.867934+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2fc9a6a4-6d09-43d2-bc48-c77902e96009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101190", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-32475\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4minx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 06:39:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-32475 PoC : Elementor Pro Unauthenticated Arbitrary File Upload to RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:51.478955Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2fc9a6a4-6d09-43d2-bc48-c77902e96009/export"/>
    <published>2026-09-06T00:00:51.478955+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/852781f0-d75d-49cc-97f0-77fe094462e4/export</id>
    <title>852781f0-d75d-49cc-97f0-77fe094462e4</title>
    <updated>2026-09-12T22:35:52.867999+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "852781f0-d75d-49cc-97f0-77fe094462e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101191", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-32475-elementor-pro-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 06:37:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -&amp;gt; RCE via validation/move loop desync)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:51.431260Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/852781f0-d75d-49cc-97f0-77fe094462e4/export"/>
    <published>2026-09-06T00:00:51.431260+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/509d4fcc-ed4c-4c6c-bb44-b1ab0e0a1be8/export</id>
    <title>509d4fcc-ed4c-4c6c-bb44-b1ab0e0a1be8</title>
    <updated>2026-09-12T22:35:52.868063+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "509d4fcc-ed4c-4c6c-bb44-b1ab0e0a1be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "published-proof-of-concept", "source": "Telegram/Rye4nFjgPibFUf7HyVjUTP6MPf9_VB3fBkIKhegqBZOEZc4", "content": "", "creation_timestamp": "2026-09-06T00:00:45.357631Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/509d4fcc-ed4c-4c6c-bb44-b1ab0e0a1be8/export"/>
    <published>2026-09-06T00:00:45.357631+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fcf4cd92-ee39-4515-9077-ed5d83178531/export</id>
    <title>fcf4cd92-ee39-4515-9077-ed5d83178531</title>
    <updated>2026-09-12T22:35:52.868119+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fcf4cd92-ee39-4515-9077-ed5d83178531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "published-proof-of-concept", "source": "Telegram/Oghg3TYl_aeop1SbpZORdjWec7jPW2rO4BxHir5nvzcc_YU", "content": "", "creation_timestamp": "2026-09-06T00:00:39.028252Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fcf4cd92-ee39-4515-9077-ed5d83178531/export"/>
    <published>2026-09-06T00:00:39.028252+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2862fdd2-6e77-4554-b04f-0d68aada0c64/export</id>
    <title>2862fdd2-6e77-4554-b04f-0d68aada0c64</title>
    <updated>2026-09-12T22:35:52.868174+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2862fdd2-6e77-4554-b04f-0d68aada0c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "exploited", "source": "https://t.me/information_security_channel/55858", "content": "Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites\nhttps://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/\n\nTracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions.\nThe post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites (https://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-06T00:00:38.784606Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2862fdd2-6e77-4554-b04f-0d68aada0c64/export"/>
    <published>2026-09-06T00:00:38.784606+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96b69f02-93b1-4e26-8e60-8190e1340a28/export</id>
    <title>96b69f02-93b1-4e26-8e60-8190e1340a28</title>
    <updated>2026-09-12T22:35:52.868234+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "96b69f02-93b1-4e26-8e60-8190e1340a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32475", "type": "published-proof-of-concept", "source": "Telegram/Oghg3TYl_aeop1SbpZORdjWec7jPW2rO4BxHir5nvzcc_YU", "content": "", "creation_timestamp": "2026-09-05T18:00:05.640835Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96b69f02-93b1-4e26-8e60-8190e1340a28/export"/>
    <published>2026-09-05T18:00:05.640835+00:00</published>
  </entry>
</feed>
