<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-18T05:47:13.886483+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c1c3b84-5807-403b-993d-c907dac79228/export</id>
    <title>2c1c3b84-5807-403b-993d-c907dac79228</title>
    <updated>2026-06-18T05:47:13.892046+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2c1c3b84-5807-403b-993d-c907dac79228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moj6czenx42m", "content": "Alert: CVE-2026-48907. A severe access control flaw in Widget Factory Joomla Content Editor allows unauthenticated PHP script execution. Lock down your CMS. Read our tactical engineering runbook for full IOCs and endpoint hardening steps. https://thecybermind.co/unjv\n\n\ud83d\udee1\ufe0f #CyberSecurity #CVE\u2026", "creation_timestamp": "2026-06-17T20:40:30.487888Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c1c3b84-5807-403b-993d-c907dac79228/export"/>
    <published>2026-06-17T20:40:30.487888+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c40c7860-bd69-4560-aa63-2cc7020a13dc/export</id>
    <title>c40c7860-bd69-4560-aa63-2cc7020a13dc</title>
    <updated>2026-06-18T05:47:13.891946+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c40c7860-bd69-4560-aa63-2cc7020a13dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojaburz2e2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:40.330176Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c40c7860-bd69-4560-aa63-2cc7020a13dc/export"/>
    <published>2026-06-17T21:15:40.330176+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6fbc5272-84ea-436b-a560-df9a70b9ee03/export</id>
    <title>6fbc5272-84ea-436b-a560-df9a70b9ee03</title>
    <updated>2026-06-18T05:47:13.891838+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6fbc5272-84ea-436b-a560-df9a70b9ee03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabus7v42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:40.875813Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6fbc5272-84ea-436b-a560-df9a70b9ee03/export"/>
    <published>2026-06-17T21:15:40.875813+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4645e685-08f5-476b-a8c6-6ce314574a00/export</id>
    <title>4645e685-08f5-476b-a8c6-6ce314574a00</title>
    <updated>2026-06-18T05:47:13.891743+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4645e685-08f5-476b-a8c6-6ce314574a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusbtm2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:41.409008Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4645e685-08f5-476b-a8c6-6ce314574a00/export"/>
    <published>2026-06-17T21:15:41.409008+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/784192cb-a639-476d-9fff-8c2e7b2a881b/export</id>
    <title>784192cb-a639-476d-9fff-8c2e7b2a881b</title>
    <updated>2026-06-18T05:47:13.891650+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "784192cb-a639-476d-9fff-8c2e7b2a881b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabuscsu2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:41.930656Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/784192cb-a639-476d-9fff-8c2e7b2a881b/export"/>
    <published>2026-06-17T21:15:41.930656+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6d23e02a-e4ea-431e-98cf-6f186bd8d2c3/export</id>
    <title>6d23e02a-e4ea-431e-98cf-6f186bd8d2c3</title>
    <updated>2026-06-18T05:47:13.891549+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6d23e02a-e4ea-431e-98cf-6f186bd8d2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusds42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:42.536635Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6d23e02a-e4ea-431e-98cf-6f186bd8d2c3/export"/>
    <published>2026-06-17T21:15:42.536635+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/89f06e64-d2a7-41bc-8c7b-c10d30832f16/export</id>
    <title>89f06e64-d2a7-41bc-8c7b-c10d30832f16</title>
    <updated>2026-06-18T05:47:13.891448+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "89f06e64-d2a7-41bc-8c7b-c10d30832f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusere2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:43.068487Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/89f06e64-d2a7-41bc-8c7b-c10d30832f16/export"/>
    <published>2026-06-17T21:15:43.068487+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/30c26aa0-4255-466d-8351-829433c61aa0/export</id>
    <title>30c26aa0-4255-466d-8351-829433c61aa0</title>
    <updated>2026-06-18T05:47:13.891345+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "30c26aa0-4255-466d-8351-829433c61aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabushp42b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:43.602390Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/30c26aa0-4255-466d-8351-829433c61aa0/export"/>
    <published>2026-06-17T21:15:43.602390+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e99e17f3-bca3-4fb2-be8f-275d5eb5634b/export</id>
    <title>e99e17f3-bca3-4fb2-be8f-275d5eb5634b</title>
    <updated>2026-06-18T05:47:13.891212+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e99e17f3-bca3-4fb2-be8f-275d5eb5634b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabushp52b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:44.144872Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e99e17f3-bca3-4fb2-be8f-275d5eb5634b/export"/>
    <published>2026-06-17T21:15:44.144872+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/752f28e4-f4fc-4168-9f51-59a09ec51ad6/export</id>
    <title>752f28e4-f4fc-4168-9f51-59a09ec51ad6</title>
    <updated>2026-06-18T05:47:13.889855+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "752f28e4-f4fc-4168-9f51-59a09ec51ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48907", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mojabusiof2b", "content": "1/ \u26a0\ufe0f Joomla JCE CVE-2026-48907 just hit CISA's KEV list with a PERFECT 10.0 score. No auth needed. Attackers upload PHP shells and own your server. Botnets already scanning. Update JCE to 2.9.99.5 right now.", "creation_timestamp": "2026-06-17T21:15:44.770224Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/752f28e4-f4fc-4168-9f51-59a09ec51ad6/export"/>
    <published>2026-06-17T21:15:44.770224+00:00</published>
  </entry>
</feed>
