https://vulnerability.circl.lu/sightings/feed 2026-10-03T20:28:19.253549+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/009242dc-561d-43f8-8650-3f832c79f745/export 2026-10-03T20:28:19.280270+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "009242dc-561d-43f8-8650-3f832c79f745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwj3p3j6gp2i", "content": "AcyMailing 11.1.0's two quiet security fixes now have CVEs: CVE-2026-94132, a mailbox file write rated 9.5 Critical, and CVE-2026-94131, a file deletion. The changelog still says Bug fixes.\n\nmysites.guru/blog/acymail...", "creation_timestamp": "2026-09-27T15:15:07.947382Z"} 2026-09-27T15:15:07.947382+00:00 https://vulnerability.circl.lu/sighting/66086e3e-bea4-4971-b442-6fa9becc8f7b/export 2026-10-03T20:28:19.282018+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "66086e3e-bea4-4971-b442-6fa9becc8f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2l7qq32v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-94132: Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - \u2026\nCVSS 9.5\nhttps://beta.vulnsea.com/cve/CVE-2026-94132\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:35.012700Z"} 2026-09-27T12:22:35.012700+00:00 https://vulnerability.circl.lu/sighting/150c3ea5-1d68-411b-b340-7ab5f8c68635/export 2026-10-03T20:28:19.282179+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "150c3ea5-1d68-411b-b340-7ab5f8c68635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} 2026-09-27T09:00:04+00:00 https://vulnerability.circl.lu/sighting/21f81b99-8219-418f-9bf9-4362a122d86b/export 2026-10-03T20:28:19.282310+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "21f81b99-8219-418f-9bf9-4362a122d86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} 2026-09-27T09:00:04+00:00 https://vulnerability.circl.lu/sighting/edc92413-d393-4cb6-b608-112c986938a1/export 2026-10-03T20:28:19.282430+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "edc92413-d393-4cb6-b608-112c986938a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwifbvxbq52r", "content": "AcyMailing 11.1.0's two quiet security fixes now have CVEs: CVE-2026-94132, a mailbox file write rated 9.5 Critical, and CVE-2026-94131, a file deletion. The changelog still says Bug fixes.\n\nmysites.guru/blog/acymail...", "creation_timestamp": "2026-09-27T08:34:03.608510Z"} 2026-09-27T08:34:03.608510+00:00 https://vulnerability.circl.lu/sighting/ad4a0782-d2cd-46de-a3b1-165431c63543/export 2026-10-03T20:28:19.282561+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ad4a0782-d2cd-46de-a3b1-165431c63543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"} 2026-09-26T23:00:16+00:00 https://vulnerability.circl.lu/sighting/1abac6b2-ea60-47e8-b7b3-f8bded83e0ac/export 2026-10-03T20:28:19.282679+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1abac6b2-ea60-47e8-b7b3-f8bded83e0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"} 2026-09-26T23:00:16+00:00 https://vulnerability.circl.lu/sighting/dd88185f-8d86-49c9-94c2-91fff035c1a2/export 2026-10-03T20:28:19.282790+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd88185f-8d86-49c9-94c2-91fff035c1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94132\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:41:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitored inbox (CVE-2026-94132, CVSS 9.5). Python check/exploit PoC \u2014 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:07:06.000000Z"} 2026-09-26T21:07:06+00:00 https://vulnerability.circl.lu/sighting/874c5d82-2182-4c8e-a630-fe2eeb26d13f/export 2026-10-03T20:28:19.282906+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "874c5d82-2182-4c8e-a630-fe2eeb26d13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://t.me/GithubRedTeam/103474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94132\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:41:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitored inbox (CVE-2026-94132, CVSS 9.5). Python check/exploit PoC \u2014 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:07:06.000000Z"} 2026-09-26T21:07:06+00:00 https://vulnerability.circl.lu/sighting/4d0ffedc-1a84-427d-ae19-2ecdac1ff4f0/export 2026-10-03T20:28:19.282993+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4d0ffedc-1a84-427d-ae19-2ecdac1ff4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hmy5ekysbwems", "content": "CVE-2026-94132 - Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension\nCVE ID : CVE-2026-94132\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - acy...", "creation_timestamp": "2026-09-26T16:57:06.482306Z"} 2026-09-26T16:57:06.482306+00:00