https://vulnerability.circl.lu/sightings/feed 2026-08-05T21:36:15.380488+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/768d58c2-3506-4d82-a9f8-fe585c379083/export 2026-08-05T21:36:15.398912+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "768d58c2-3506-4d82-a9f8-fe585c379083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mscevw6uqu2o", "content": "MaxSite CMS 105.2 has a CRITICAL RCE vulnerability (CVSS 9.3). Attackers can inject PHP code post-install via install endpoint. Restrict endpoint access & monitor for suspicious POSTs ASAP. https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-max...", "creation_timestamp": "2026-08-05T01:30:35.788037Z"} 2026-08-05T01:30:35.788037+00:00 https://vulnerability.circl.lu/sighting/0040b53c-4463-4a15-9faa-51829c27975c/export 2026-08-05T21:36:15.400429+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0040b53c-4463-4a15-9faa-51829c27975c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117040312010612030", "content": "CVE-2026-70553: CRITICAL RCE in MaxSite CMS 105.2 (CVSS 9.3). Attackers can inject PHP via POST to the install endpoint, gaining persistent code exec as www-data. Restrict endpoint & monitor traffic until patched. Details: https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-maxsite-maxsite-cms-5161bdfb2e6804e9 #OffSeq #CVE #websecurity #RCE", "creation_timestamp": "2026-08-05T01:30:33.470662Z"} 2026-08-05T01:30:33.470662+00:00 https://vulnerability.circl.lu/sighting/0dd99267-d08f-47f9-94b3-d48c2f06cbca/export 2026-08-05T21:36:15.400536+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0dd99267-d08f-47f9-94b3-d48c2f06cbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvszpbyv2t", "content": "\ud83d\udd34 CVE-2026-70553 - Critical (9.8)\n\nMaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70553/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T21:00:32.637761Z"} 2026-08-04T21:00:32.637761+00:00 https://vulnerability.circl.lu/sighting/9b3cec41-93e0-4b1e-b306-eff374abfd25/export 2026-08-05T21:36:15.400624+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9b3cec41-93e0-4b1e-b306-eff374abfd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbt7x7g372u", "content": "CVE-2026-70553 - maxsite cms\nMaxSite CMS allows attackers to inject malicious code into the application's configuration file, potentially leading to unauthorized access and data theft. This vulnerability\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxsitecms #maxsite #CVE #infosec", "creation_timestamp": "2026-08-04T20:14:04.354569Z"} 2026-08-04T20:14:04.354569+00:00