https://vulnerability.circl.lu/sightings/feed 2026-09-24T14:51:27.726332+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/28bda4e0-4dcb-44ec-83e0-eb4148fee26e/export 2026-09-24T14:51:27.745246+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "28bda4e0-4dcb-44ec-83e0-eb4148fee26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwbimvgxjs2v", "content": "WordPress core CVE-2026-87902: path traversal \u2192 unauthenticated RCE, CVSS 8.1. active exploitation confirmed\u2026 https://0daynews.com/articles/2026-09-24-wordpress-core-cve-2026-87902-path-traversal-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3471", "creation_timestamp": "2026-09-24T14:45:14.656263Z"} 2026-09-24T14:45:14.656263+00:00 https://vulnerability.circl.lu/sighting/477687e9-0a38-4014-91b0-c24b2270422a/export 2026-09-24T14:51:27.747158+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "477687e9-0a38-4014-91b0-c24b2270422a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/it-administrator.de/post/3mwbhpohsbc2u", "content": "Die kritische WordPress-L\u00fccke CVE-2026-87902 zeigt, wie schnell aus einem Sicherheitsupdate ein Wettlauf gegen die Zeit wird. Was hinter der Schwachstelle steckt, wie die Angriffe in drei Stufen ablaufen und warum das Update jetzt dringend ist.\n\nwww.it-administrator.de/wordpress-sc...", "creation_timestamp": "2026-09-24T14:28:57.840016Z"} 2026-09-24T14:28:57.840016+00:00 https://vulnerability.circl.lu/sighting/570c3f34-1b40-4933-9977-bc0f76f182e4/export 2026-09-24T14:51:27.747289+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "570c3f34-1b40-4933-9977-bc0f76f182e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mwbhgv4okc23", "content": "Yesterday: patch and probes.\nToday: attackers writing PHP via pearcmd on unpatched WordPress (CVE-2026-87902).\n\nUpdate past 7.1.1 to 7.1.2 (or your branch backport), then check logs and /tmp|/var/tmp for names like wp-pear-rce-flag.php, poc87902.php, luci_.php, zeta_.php.", "creation_timestamp": "2026-09-24T14:23:58.875900Z"} 2026-09-24T14:23:58.875900+00:00 https://vulnerability.circl.lu/sighting/d8cc49f9-8aad-4c15-aa11-220a6ff90e30/export 2026-09-24T14:51:27.747395+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d8cc49f9-8aad-4c15-aa11-220a6ff90e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mwbfdtdj5h2j", "content": "Attackers are exploiting WordPress CVE-2026-87902 to include pearcmd.php and write PHP files when specific theme and server conditions are met.", "creation_timestamp": "2026-09-24T13:46:29.168723Z"} 2026-09-24T13:46:29.168723+00:00 https://vulnerability.circl.lu/sighting/c0ffb515-fe88-49da-83ef-14669cd4d3ab/export 2026-09-24T14:51:27.747497+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c0ffb515-fe88-49da-83ef-14669cd4d3ab", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d94335f8-a75d-4714-b625-7e5c5418779a", "content": "", "creation_timestamp": "2026-09-24T13:00:44.237763Z"} 2026-09-24T13:00:44.237763+00:00 https://vulnerability.circl.lu/sighting/fe2cc0d6-2b32-4063-bfdf-40e126a9b930/export 2026-09-24T14:51:27.747602+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fe2cc0d6-2b32-4063-bfdf-40e126a9b930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mwbbfw4ljs23", "content": "Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\nthehackernews.com/2026/09/atta...", "creation_timestamp": "2026-09-24T12:36:06.086569Z"} 2026-09-24T12:36:06.086569+00:00 https://vulnerability.circl.lu/sighting/a0452655-699f-4753-a394-23cf82ea43f4/export 2026-09-24T14:51:27.747703+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a0452655-699f-4753-a394-23cf82ea43f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3mwb7t3a2bg2v", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nAttackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-09-24T12:07:37.958001Z"} 2026-09-24T12:07:37.958001+00:00 https://vulnerability.circl.lu/sighting/8eb973dc-41be-469b-980b-da06b1bbf14f/export 2026-09-24T14:51:27.747802+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8eb973dc-41be-469b-980b-da06b1bbf14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mwb6deofqh2f", "content": "CVE-2026-87902 is waking up every WordPress admin who hasn't gone to bed yet. It's a path traversal flaw. That means it goes straight to remote code execution via pearcmd.php.\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-24T11:40:57.079057Z"} 2026-09-24T11:40:57.079057+00:00 https://vulnerability.circl.lu/sighting/91f1b6ea-cc42-46c2-9dd1-f216c86ca3df/export 2026-09-24T14:51:27.747895+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "91f1b6ea-cc42-46c2-9dd1-f216c86ca3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/targetsocialmedia.bsky.social/post/3mwb65ogluf2g", "content": "WordPress CVE-2026-87902: Probing and PHP File-Write Attempts Observed on Patch Day", "creation_timestamp": "2026-09-24T11:37:45.920698Z"} 2026-09-24T11:37:45.920698+00:00 https://vulnerability.circl.lu/sighting/530cad2e-e042-45e4-abe6-43dc891486dc/export 2026-09-24T14:51:27.747988+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "530cad2e-e042-45e4-abe6-43dc891486dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mwb5yk4rqh2x", "content": "Threat actors are actively exploiting a critical WordPress vulnerability, CVE-2026-87902, just hours after its public disclosure. The unauthenticated remote code [\u2026]", "creation_timestamp": "2026-09-24T11:34:54.594935Z"} 2026-09-24T11:34:54.594935+00:00