https://vulnerability.circl.lu/sightings/feed 2026-09-28T08:52:45.279028+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a/export 2026-09-28T08:52:45.308122+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-18T00:00:22.172137Z"} 2026-07-18T00:00:22.172137+00:00 https://vulnerability.circl.lu/sighting/e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9/export 2026-09-28T08:52:45.310355+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-18T00:00:21.914081Z"} 2026-07-18T00:00:21.914081+00:00 https://vulnerability.circl.lu/sighting/4a67869c-3b8b-4c87-bf8d-a7376f6ce677/export 2026-09-28T08:52:45.310475+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4a67869c-3b8b-4c87-bf8d-a7376f6ce677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-16T19:00:22.291600Z"} 2026-07-16T19:00:22.291600+00:00 https://vulnerability.circl.lu/sighting/f344c0b9-56f4-45d4-b553-549e95466400/export 2026-09-28T08:52:45.310567+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f344c0b9-56f4-45d4-b553-549e95466400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-16T19:00:22.097951Z"} 2026-07-16T19:00:22.097951+00:00 https://vulnerability.circl.lu/sighting/7cf96d70-d257-4a94-a869-799872c00871/export 2026-09-28T08:52:45.310660+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7cf96d70-d257-4a94-a869-799872c00871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (<1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.294944Z"} 2026-07-15T00:00:29.294944+00:00 https://vulnerability.circl.lu/sighting/2b496d8f-e76d-47f2-b9c7-fa7554e30ee3/export 2026-09-28T08:52:45.310751+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2b496d8f-e76d-47f2-b9c7-fa7554e30ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (<1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.934787Z"} 2026-07-13T22:00:12.934787+00:00 https://vulnerability.circl.lu/sighting/ff373e0d-1eed-4e63-9c7d-beb294bace33/export 2026-09-28T08:52:45.310821+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ff373e0d-1eed-4e63-9c7d-beb294bace33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3momt47f4ci2f", "content": "Critical path traversal in FileRise <3.16.0 (CVE-2026-54414): attackers with upload-enabled links can overwrite files, risking admin takeover/RCE. Update to 3.16.0+ now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #FileRise #infosec", "creation_timestamp": "2026-06-19T07:30:30.188873Z"} 2026-06-19T07:30:30.188873+00:00 https://vulnerability.circl.lu/sighting/35880e4d-1461-4441-94d5-0373f2ccd551/export 2026-09-28T08:52:45.310907+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "35880e4d-1461-4441-94d5-0373f2ccd551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116775598633883960", "content": "CVE-2026-54414: Critical path traversal in FileRise <3.16.0 allows attackers with a valid shared-folder upload link to write files outside the intended dir \u2014 can lead to admin takeover & RCE. Patch to 3.16.0+ ASAP. https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #vuln #FileRise", "creation_timestamp": "2026-06-19T07:30:28.372134Z"} 2026-06-19T07:30:28.372134+00:00 https://vulnerability.circl.lu/sighting/230f29ac-c970-4104-a5b6-fe152ad9da75/export 2026-09-28T08:52:45.310976+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "230f29ac-c970-4104-a5b6-fe152ad9da75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3momsieefw62x", "content": "CVE-2026-54414 - FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover\nCVE ID : CVE-2026-54414\n \n Published : June 19, 2026, 5:41 a.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : FileRise before 3.16.0 is vulnerable to path traversal in the ...", "creation_timestamp": "2026-06-19T07:19:23.609204Z"} 2026-06-19T07:19:23.609204+00:00 https://vulnerability.circl.lu/sighting/739d1dfa-a722-4880-8048-dae8aad61c28/export 2026-09-28T08:52:45.311043+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "739d1dfa-a722-4880-8048-dae8aad61c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokt35ifeb2z", "content": "CVE-2026-54419 - PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query\nCVE ID : CVE-2026-54419\n \n Published : June 18, 2026, 10:21 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no rele...", "creation_timestamp": "2026-06-18T12:24:39.032738Z"} 2026-06-18T12:24:39.032738+00:00