<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-21T23:44:40.036364+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/46af911e-2733-4ff0-ae0e-561626bc56ae/export</id>
    <title>46af911e-2733-4ff0-ae0e-561626bc56ae</title>
    <updated>2026-09-21T23:44:40.065028+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "46af911e-2733-4ff0-ae0e-561626bc56ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://gist.github.com/ichintu/9cb86acb682c54ea7f3ed1ba71a63335", "content": "This daily threat intelligence roundup highlights critical software vulnerabilities and emerging AI security risks. Key traditional threats include unauthenticated RCEs in SolarWinds Access Rights Manager (CVE-2026-28326, patched), Orkes Conductor (CVE-2026-58138, actively exploited), and a critical command injection flaw in Totolink routers (CVE-2026-93742, public exploit). A high-severity authenticated RCE also affects The Welcomizer WordPress plugin (CVE-2026-4327). On the AI front, Google\u2019s Gemini model accidentally breached real corporate systems during a May 2026 security test due to a domain mix-up, while industry discussions emphasize that prompt injection and LLM routing flaws have become primary security challenges in AI agent development. Collectively, the reports underscore a threat landscape defined by high-impact software exploits and rapidly evolving AI vulnerabilities.", "creation_timestamp": "2026-09-19T12:02:14.690585Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/46af911e-2733-4ff0-ae0e-561626bc56ae/export"/>
    <published>2026-09-19T12:02:14.690585+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d1199c11-c79f-48b7-866f-5f16683e1f81/export</id>
    <title>d1199c11-c79f-48b7-866f-5f16683e1f81</title>
    <updated>2026-09-21T23:44:40.067968+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d1199c11-c79f-48b7-866f-5f16683e1f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvud4wwqfv2e", "content": "\ud83d\udfe0 CVE-2026-4327 - High (8.8)\n\nThe The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4327/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T09:02:14.264614Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d1199c11-c79f-48b7-866f-5f16683e1f81/export"/>
    <published>2026-09-19T09:02:14.264614+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/869f8202-126b-481e-a9f6-b83a06c9bf27/export</id>
    <title>869f8202-126b-481e-a9f6-b83a06c9bf27</title>
    <updated>2026-09-21T23:44:40.068127+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "869f8202-126b-481e-a9f6-b83a06c9bf27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvu7sqo4lc2f", "content": "CVE-2026-4327: the WordPress plugin The Welcomizer (sebwordpress), versions up to and including 2.8.1, lets subscriber-level users run arbitrary code via a missing authorization check. No fixed version is listed in the CVE record; treat as unpatched.", "creation_timestamp": "2026-09-19T08:02:50.257738Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/869f8202-126b-481e-a9f6-b83a06c9bf27/export"/>
    <published>2026-09-19T08:02:50.257738+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4c936824-2e76-4304-972e-f588cd48f793/export</id>
    <title>4c936824-2e76-4304-972e-f588cd48f793</title>
    <updated>2026-09-21T23:44:40.068238+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "4c936824-2e76-4304-972e-f588cd48f793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:54:05.035489Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4c936824-2e76-4304-972e-f588cd48f793/export"/>
    <published>2026-08-03T06:54:05.035489+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/00d7f0ce-affd-4c8e-b378-07bd3d4f6f09/export</id>
    <title>00d7f0ce-affd-4c8e-b378-07bd3d4f6f09</title>
    <updated>2026-09-21T23:44:40.070107+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "00d7f0ce-affd-4c8e-b378-07bd3d4f6f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43277", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:54:01.488702Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/00d7f0ce-affd-4c8e-b378-07bd3d4f6f09/export"/>
    <published>2026-08-03T06:54:01.488702+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/87f10889-be6a-419f-b0de-fcb506f5e2b4/export</id>
    <title>87f10889-be6a-419f-b0de-fcb506f5e2b4</title>
    <updated>2026-09-21T23:44:40.070227+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "87f10889-be6a-419f-b0de-fcb506f5e2b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43275", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:59.283834Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/87f10889-be6a-419f-b0de-fcb506f5e2b4/export"/>
    <published>2026-08-03T06:53:59.283834+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/84a1b076-996c-4762-8cbf-7c0aabfc41f4/export</id>
    <title>84a1b076-996c-4762-8cbf-7c0aabfc41f4</title>
    <updated>2026-09-21T23:44:40.070327+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "84a1b076-996c-4762-8cbf-7c0aabfc41f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43273", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:57.063642Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/84a1b076-996c-4762-8cbf-7c0aabfc41f4/export"/>
    <published>2026-08-03T06:53:57.063642+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7f1d8e56-6289-4a26-a432-701cbe0b9c94/export</id>
    <title>7f1d8e56-6289-4a26-a432-701cbe0b9c94</title>
    <updated>2026-09-21T23:44:40.070425+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "7f1d8e56-6289-4a26-a432-701cbe0b9c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43270", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:19.207486Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7f1d8e56-6289-4a26-a432-701cbe0b9c94/export"/>
    <published>2026-08-03T06:53:19.207486+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/16b4e1e3-5be5-4fc5-9d59-deb7b639b86b/export</id>
    <title>16b4e1e3-5be5-4fc5-9d59-deb7b639b86b</title>
    <updated>2026-09-21T23:44:40.070521+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "16b4e1e3-5be5-4fc5-9d59-deb7b639b86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43276", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T00:45:19.098218Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/16b4e1e3-5be5-4fc5-9d59-deb7b639b86b/export"/>
    <published>2026-07-09T00:45:19.098218+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e34810da-6ed0-4442-8390-8d702bebf626/export</id>
    <title>e34810da-6ed0-4442-8390-8d702bebf626</title>
    <updated>2026-09-21T23:44:40.070638+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "e34810da-6ed0-4442-8390-8d702bebf626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:57:36.116844Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e34810da-6ed0-4442-8390-8d702bebf626/export"/>
    <published>2026-07-02T06:57:36.116844+00:00</published>
  </entry>
</feed>
