https://vulnerability.circl.lu/sightings/feed 2026-10-02T10:37:02.067146+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/be0cef2e-3f5f-4590-901a-e04fc7d9f26b/export 2026-10-02T10:37:02.093534+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "be0cef2e-3f5f-4590-901a-e04fc7d9f26b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "published-proof-of-concept", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "content": "", "creation_timestamp": "2026-09-23T00:00:14.372790Z"} 2026-09-23T00:00:14.372790+00:00 https://vulnerability.circl.lu/sighting/cff87764-7284-4334-831a-69c6da8b6dc5/export 2026-10-02T10:37:02.096472+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cff87764-7284-4334-831a-69c6da8b6dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "published-proof-of-concept", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "content": "", "creation_timestamp": "2026-09-23T00:00:12.554118Z"} 2026-09-23T00:00:12.554118+00:00 https://vulnerability.circl.lu/sighting/9a8d6cb9-0123-45c0-97f0-057aeba3ac0a/export 2026-10-02T10:37:02.096571+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9a8d6cb9-0123-45c0-97f0-057aeba3ac0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117316349455960712", "content": "CVE-2026-84434 Gravity Forms WordPress plugin, arbitrary file upload to RCE, CVSS 9.8, no patch yet. Unauthenticated attackers can run code. Update immediately or disable. https://www.valtersit.com/cve/CVE-2026-84434/ #CVE #infosec #WordPress", "creation_timestamp": "2026-09-22T19:30:33.563508Z"} 2026-09-22T19:30:33.563508+00:00 https://vulnerability.circl.lu/sighting/6e82fc5f-229e-4599-b49b-2450f2bceba5/export 2026-10-02T10:37:02.096644+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6e82fc5f-229e-4599-b49b-2450f2bceba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "content": "", "creation_timestamp": "2026-09-22T07:00:10.395523Z"} 2026-09-22T07:00:10.395523+00:00 https://vulnerability.circl.lu/sighting/3130a1d3-2799-442d-bc0f-9bb746528144/export 2026-10-02T10:37:02.096713+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3130a1d3-2799-442d-bc0f-9bb746528144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "content": "", "creation_timestamp": "2026-09-22T07:00:08.972135Z"} 2026-09-22T07:00:08.972135+00:00 https://vulnerability.circl.lu/sighting/49759a2e-2fc9-4d82-b2f6-ace4b1e99aa8/export 2026-10-02T10:37:02.096781+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "49759a2e-2fc9-4d82-b2f6-ace4b1e99aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-84434.yaml", "content": "", "creation_timestamp": "2026-09-21T06:00:03.758054Z"} 2026-09-21T06:00:03.758054+00:00 https://vulnerability.circl.lu/sighting/0eefcc38-bc8a-478f-9bd9-75db7f761e23/export 2026-10-02T10:37:02.096843+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0eefcc38-bc8a-478f-9bd9-75db7f761e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvxszbzrx32z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-84434: The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the \u2026\nCVSS 9.8 \u00b7 EPSS 0.7%\nhttps://beta.vulnsea.com/cve/CVE-2026-84434\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-20T18:24:30.015889Z"} 2026-09-20T18:24:30.015889+00:00 https://vulnerability.circl.lu/sighting/163f1cec-a9ab-453a-8ca2-2e1ca4197e9c/export 2026-10-02T10:37:02.096921+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "163f1cec-a9ab-453a-8ca2-2e1ca4197e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84434\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms \u22643.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T22:00:04.604142Z"} 2026-09-19T22:00:04.604142+00:00 https://vulnerability.circl.lu/sighting/55fdf1db-6b22-43d5-8b72-0c136fb9e0da/export 2026-10-02T10:37:02.097066+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "55fdf1db-6b22-43d5-8b72-0c136fb9e0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://gist.github.com/ichintu/3891ce0c6380cb100014a71d3f634404", "content": "This daily threat intelligence briefing highlights three critical security developments:\n\n- **Supply Chain Breach & Credential Theft:** CrowdSec reported that a May supply chain attack on TanStack npm packages compromised employee credentials. An unrevoked GitHub account belonging to a departed employee was exploited to copy ~170 private repositories.\n- **CISA KEV Catalog Updates:** CISA added three actively exploited Linux kernel vulnerabilities, plus flaws in Acronis Backup and Google Pixel, to its Known Exploited Vulnerabilities catalog.\n- **Critical Public Vulnerabilities:**\n \u2022 **Totolink Routers:** CVE-2026-93741 (CVSS 10.0) is a publicly exploitable remote buffer overflow in A3002MU firmware.\n \u2022 **Docker Desktop:** CVE-2026-77179 details a hypervisor escape vulnerability affecting macOS environments.\n \u2022 **WordPress Gravity Forms:** CVE-2026-84434 (CVSS 9.8) allows unauthenticated attackers to bypass file validation and achieve remote code execution.\n\n**Recommendation:** Organizations should immediately patch affected software, revoke unused or departed-employee credentials, and monitor CISA alerts for active exploitation indicators.", "creation_timestamp": "2026-09-19T08:02:12.227980Z"} 2026-09-19T08:02:12.227980+00:00 https://vulnerability.circl.lu/sighting/ee3960dc-d25c-435d-b60f-d76ac60859d0/export 2026-10-02T10:37:02.097178+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ee3960dc-d25c-435d-b60f-d76ac60859d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4ky3oiv2p", "content": "\ud83d\udd34 CVE-2026-84434 - Critical (9.8)\n\nThe Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:49.888889Z"} 2026-09-19T07:04:49.888889+00:00