https://vulnerability.circl.lu/sightings/feed 2026-10-04T20:26:39.320727+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/168983bd-6d1c-4843-a146-03fbc5aff04c/export 2026-10-04T20:26:39.349501+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "168983bd-6d1c-4843-a146-03fbc5aff04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/FJhHNxuddf7TpLw0kSRARdOIBivVItQHKCcKtq2qfHsVogM", "content": "", "creation_timestamp": "2026-10-01T03:00:06.000000Z"} 2026-10-01T03:00:06+00:00 https://vulnerability.circl.lu/sighting/6f2b2d45-549d-40e8-8dd1-236d14462615/export 2026-10-04T20:26:39.352441+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6f2b2d45-549d-40e8-8dd1-236d14462615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/p8fCe73qPhNi0gtkgFiWePACon_RGM1KmaCzYKDKoMfuYzQ", "content": "", "creation_timestamp": "2026-09-30T23:00:22.000000Z"} 2026-09-30T23:00:22+00:00 https://vulnerability.circl.lu/sighting/475ceb51-a938-446a-b527-66c31877a1ec/export 2026-10-04T20:26:39.352588+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "475ceb51-a938-446a-b527-66c31877a1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/p8fCe73qPhNi0gtkgFiWePACon_RGM1KmaCzYKDKoMfuYzQ", "content": "", "creation_timestamp": "2026-09-30T23:00:22.000000Z"} 2026-09-30T23:00:22+00:00 https://vulnerability.circl.lu/sighting/87afaddb-a5c9-4dd4-a136-ff546319d87c/export 2026-10-04T20:26:39.352692+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "87afaddb-a5c9-4dd4-a136-ff546319d87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103899", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 18:29:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T19:07:32.000000Z"} 2026-09-30T19:07:32+00:00 https://vulnerability.circl.lu/sighting/1fe32995-b7f6-4a57-89bb-772faa1a7ba5/export 2026-10-04T20:26:39.352805+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1fe32995-b7f6-4a57-89bb-772faa1a7ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103899", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 18:29:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T19:07:32.000000Z"} 2026-09-30T19:07:32+00:00 https://vulnerability.circl.lu/sighting/a0eb79f4-2393-431f-b806-723a921f39ff/export 2026-10-04T20:26:39.352902+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a0eb79f4-2393-431f-b806-723a921f39ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"} 2026-09-27T21:00:04+00:00 https://vulnerability.circl.lu/sighting/d7dc1973-8f49-41ef-b921-4289d80fdd34/export 2026-10-04T20:26:39.352993+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d7dc1973-8f49-41ef-b921-4289d80fdd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"} 2026-09-27T21:00:04+00:00 https://vulnerability.circl.lu/sighting/1811fd7a-28ea-4056-81a8-da23d0c73b24/export 2026-10-04T20:26:39.353077+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1811fd7a-28ea-4056-81a8-da23d0c73b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/Xs5RSNf8dUoer362h3C47eE9d4XRs66xIhTCunAO4l08ziA", "content": "", "creation_timestamp": "2026-09-27T11:00:15.000000Z"} 2026-09-27T11:00:15+00:00 https://vulnerability.circl.lu/sighting/d9a63071-0e14-45b2-8ef4-414e98dca7d3/export 2026-10-04T20:26:39.353165+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d9a63071-0e14-45b2-8ef4-414e98dca7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/Xs5RSNf8dUoer362h3C47eE9d4XRs66xIhTCunAO4l08ziA", "content": "", "creation_timestamp": "2026-09-27T11:00:15.000000Z"} 2026-09-27T11:00:15+00:00 https://vulnerability.circl.lu/sighting/12daa694-16c9-4ccc-81e1-068f3d60bf62/export 2026-10-04T20:26:39.353250+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "12daa694-16c9-4ccc-81e1-068f3d60bf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103511", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a be-keb\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 09:10:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T10:00:08.000000Z"} 2026-09-27T10:00:08+00:00