https://vulnerability.circl.lu/sightings/feed 2026-09-12T21:06:52.400036+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c483c750-d88f-4199-b7ce-f3275d02211e/export 2026-09-12T21:06:52.423808+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c483c750-d88f-4199-b7ce-f3275d02211e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/CyberDispatch/2888", "content": "New CVE-2026-67401 vulnerability in cPanel lets mail-privileged hosting accounts execute code as root.\n\ncPanel says every supported cPanel & WHM version is affected and has released fixed builds.", "creation_timestamp": "2026-09-12T00:00:56.596916Z"} 2026-09-12T00:00:56.596916+00:00 https://vulnerability.circl.lu/sighting/c2700a47-0103-4cbe-864f-28da24db6ca0/export 2026-09-12T21:06:52.426207+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c2700a47-0103-4cbe-864f-28da24db6ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvaaxhid2e2w", "content": "\ud83d\udce2 [VULN] Une faille cPanel distribue des acc\u00e8s root - CVE-2026-67401\n\nUne injection SQL dans EmailTrack de cPanel permet \u00e0 un client authentifi\u00e9 avec droits mail d'\u00e9crire des fichiers arbitraires et d'ex\u00e9cuter du code en root La CVE-2026-67401 obtient un score de 9,9\u2026\n\n#CVE #Cyberveille", "creation_timestamp": "2026-09-11T09:30:07.290135Z"} 2026-09-11T09:30:07.290135+00:00 https://vulnerability.circl.lu/sighting/be38e53e-5fe9-4e53-bea0-23ede2ed68c6/export 2026-09-12T21:06:52.426346+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "be38e53e-5fe9-4e53-bea0-23ede2ed68c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/CyberDispatch/2888", "content": "New CVE-2026-67401 vulnerability in cPanel lets mail-privileged hosting accounts execute code as root.\n\ncPanel says every supported cPanel & WHM version is affected and has released fixed builds.", "creation_timestamp": "2026-09-11T01:00:03.676619Z"} 2026-09-11T01:00:03.676619+00:00 https://vulnerability.circl.lu/sighting/42bd3822-1b12-44ff-8bdb-5865f9c16729/export 2026-09-12T21:06:52.426453+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "42bd3822-1b12-44ff-8bdb-5865f9c16729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-11T00:00:51.889824Z"} 2026-09-11T00:00:51.889824+00:00 https://vulnerability.circl.lu/sighting/748f9b2e-b924-40ee-9d18-bef84bb6a39d/export 2026-09-12T21:06:52.426559+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "748f9b2e-b924-40ee-9d18-bef84bb6a39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101929", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67401-cPanel-EmailTrack-SQLi\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:27:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67401 cPanel & WHM EmailTrack SQL Injection \u2014 IOC scanner, compromise detection, patch verification, incident response and remediation toolkit.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:34.609091Z"} 2026-09-11T00:00:34.609091+00:00 https://vulnerability.circl.lu/sighting/cc792857-0c00-4e51-9bc1-2b14bbcf0978/export 2026-09-12T21:06:52.426663+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cc792857-0c00-4e51-9bc1-2b14bbcf0978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48979", "content": "CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating \ud83d\udd25\n\nA vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/dIEpd\n\ud83d\udc49 Dork: http.title:cpanel OR http.headers.set_cookie:\"cprelogin\" OR http.headers.set_cookie:\"cpsession\"\n\nVendor's advisory:\nhttps://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026", "creation_timestamp": "2026-09-11T00:00:31.753134Z"} 2026-09-11T00:00:31.753134+00:00 https://vulnerability.circl.lu/sighting/62e56c57-b41e-4a1f-b7b1-5a644cee07e6/export 2026-09-12T21:06:52.426765+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "62e56c57-b41e-4a1f-b7b1-5a644cee07e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-908", "content": "", "creation_timestamp": "2026-09-10T20:15:12.430917Z"} 2026-09-10T20:15:12.430917+00:00 https://vulnerability.circl.lu/sighting/c409eb8b-6911-4874-8d47-7ebd963408e0/export 2026-09-12T21:06:52.427921+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c409eb8b-6911-4874-8d47-7ebd963408e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv6twpryjf2j", "content": "~Cybergcca~\nSix advisories address vulnerabilities; CVE-2026-71362 is reportedly exploited in the wild.\n-\nIOCs: CVE-2026-71362, CVE-2026-67401, CVE-2026-65638\n-\n#CVE202671362 #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-09-10T20:04:24.127964Z"} 2026-09-10T20:04:24.127964+00:00 https://vulnerability.circl.lu/sighting/21fc4284-ad54-487b-bca2-659be011d926/export 2026-09-12T21:06:52.428049+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "21fc4284-ad54-487b-bca2-659be011d926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48979", "content": "CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating \ud83d\udd25\n\nA vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/dIEpd\n\ud83d\udc49 Dork: http.title:cpanel OR http.headers.set_cookie:\"cprelogin\" OR http.headers.set_cookie:\"cpsession\"\n\nVendor's advisory:\nhttps://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026", "creation_timestamp": "2026-09-10T18:00:05.880025Z"} 2026-09-10T18:00:05.880025+00:00 https://vulnerability.circl.lu/sighting/570b8a53-a33e-4c37-9cd8-7ff1610761f9/export 2026-09-12T21:06:52.428161+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "570b8a53-a33e-4c37-9cd8-7ff1610761f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "https://t.me/GithubRedTeam/101929", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67401-cPanel-EmailTrack-SQLi\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:27:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67401 cPanel & WHM EmailTrack SQL Injection \u2014 IOC scanner, compromise detection, patch verification, incident response and remediation toolkit.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T15:00:05.889575Z"} 2026-09-10T15:00:05.889575+00:00