https://vulnerability.circl.lu/sightings/feed 2026-07-22T12:56:01.115512+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d1ac7232-4c3a-4051-a9ce-f296c7f8250b/export 2026-07-22T12:56:01.136111+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d1ac7232-4c3a-4051-a9ce-f296c7f8250b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr46otrgne23", "content": "CVE-2026-39878 - Chamilo stored XSS via user registration leads to admin account takeover\nCVE ID : CVE-2026-39878\n \n Published : July 20, 2026, 6:16 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vu...", "creation_timestamp": "2026-07-20T20:58:06.670980Z"} 2026-07-20T20:58:06.670980+00:00 https://vulnerability.circl.lu/sighting/825b4659-3543-4e4f-8170-10324c8e8ec2/export 2026-07-22T12:56:01.138440+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "825b4659-3543-4e4f-8170-10324c8e8ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39878", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mr3y5jeb5l2e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-39878](https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-gcjp-f7jm-rrrg)\n...\nhttps://github.com/chamilo/chamilo-lms/security/advisories/GHSA-gcjp-f7jm-rrrg #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-20T19:01:01.246841Z"} 2026-07-20T19:01:01.246841+00:00 https://vulnerability.circl.lu/sighting/9ef192bf-ac3b-40c8-a1eb-a442b2cad66f/export 2026-07-22T12:56:01.138550+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9ef192bf-ac3b-40c8-a1eb-a442b2cad66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3x7ajem423", "content": "CVE-2026-39878\nChamilo Learning Management System versions 1.11.38 and earlier have a security flaw in the user registration form. This means an attacker can trick an administrator into running malicious code in their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T18:44:05.330815Z"} 2026-07-20T18:44:05.330815+00:00