<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-12T13:59:23.410471+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ed04e015-94d3-4e3e-afb2-fbdf80d23861/export</id>
    <title>ed04e015-94d3-4e3e-afb2-fbdf80d23861</title>
    <updated>2026-09-12T13:59:23.439421+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ed04e015-94d3-4e3e-afb2-fbdf80d23861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muciz5xxok2o", "content": "\u300cPHP\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027 - \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ea\u30ea\u30fc\u30b9\u3092\u516c\u958b\n\n\u300cPHP\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670830\u65e5\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u300cPHP 8.5.9\u300d\u300c\u540c8.4.24\u300d\u300c\u540c8.3.33\u300d\u300c\u540c8.2.33\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u5404\u30d6\u30e9\u30f3\u30c1\u306e\u5229\u7528\u8005\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n\u4eca\u56de\u516c\u958b\u3057\u305f\u300c\u540c8.3.33\u300d\u300c\u540c8.2.33\u300d\u3067\u306f\u30013\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u5fdc\u3057\u305f\u3002\u300cPostgreSQL\u300d\u306b\u95a2\u3059\u308b\u51e6\u7406\u3092\u884c\u3046\u300cext-pgsql\u300d\u3067\u306f\u3001\u6587\u5b57\u5217\u51e6\u7406\u306e\u4e0d\u5099\u300cCVE-2026-17543\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\u6587\u5b57\u5217\u3092\u9014\u4e2d\u3067\u7d42\u4e86\u3055\u305b\u3001\u5f8c\u7d9a\u90e8\u5206\u3092SQL\u69cb\u6587\u3068\u3057\u3066\u89e3\u91c8\u3055\u305b\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002", "creation_timestamp": "2026-08-30T13:34:22.277801Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ed04e015-94d3-4e3e-afb2-fbdf80d23861/export"/>
    <published>2026-08-30T13:34:22.277801+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eb7905d9-61d2-43ad-94cc-7b6276e7c1e1/export</id>
    <title>eb7905d9-61d2-43ad-94cc-7b6276e7c1e1</title>
    <updated>2026-09-12T13:59:23.441634+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eb7905d9-61d2-43ad-94cc-7b6276e7c1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96931", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hunt-Benito\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-06 17:05:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-07T01:02:15.170527Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eb7905d9-61d2-43ad-94cc-7b6276e7c1e1/export"/>
    <published>2026-08-07T01:02:15.170527+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2b625b9d-b92c-4393-8014-73c780c8d3ac/export</id>
    <title>2b625b9d-b92c-4393-8014-73c780c8d3ac</title>
    <updated>2026-09-12T13:59:23.441755+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2b625b9d-b92c-4393-8014-73c780c8d3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msgtreixey2v", "content": "\ud83d\udccc CVE-2026-17543 - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions\u00a0from 8.2.* before 8.2.33, from ... https://www.cyberhub.blog/cves/CVE-2026-17543", "creation_timestamp": "2026-08-06T20:07:07.610206Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2b625b9d-b92c-4393-8014-73c780c8d3ac/export"/>
    <published>2026-08-06T20:07:07.610206+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7aca7235-a61b-4931-b2a1-23fa5b3444cc/export</id>
    <title>7aca7235-a61b-4931-b2a1-23fa5b3444cc</title>
    <updated>2026-09-12T13:59:23.441845+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7aca7235-a61b-4931-b2a1-23fa5b3444cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96931", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hunt-Benito\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-06 17:05:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T18:00:03.142379Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7aca7235-a61b-4931-b2a1-23fa5b3444cc/export"/>
    <published>2026-08-06T18:00:03.142379+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/541fe8b9-195c-487d-bde3-8ef4c134f078/export</id>
    <title>541fe8b9-195c-487d-bde3-8ef4c134f078</title>
    <updated>2026-09-12T13:59:23.441932+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "541fe8b9-195c-487d-bde3-8ef4c134f078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-05T00:00:26.488415Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/541fe8b9-195c-487d-bde3-8ef4c134f078/export"/>
    <published>2026-08-05T00:00:26.488415+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e718adeb-a3ed-4298-a1c9-e84039b832b5/export</id>
    <title>e718adeb-a3ed-4298-a1c9-e84039b832b5</title>
    <updated>2026-09-12T13:59:23.442015+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e718adeb-a3ed-4298-a1c9-e84039b832b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-05T00:00:26.216811Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e718adeb-a3ed-4298-a1c9-e84039b832b5/export"/>
    <published>2026-08-05T00:00:26.216811+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c602cf69-63e0-4a7a-9a47-f5ccb589437e/export</id>
    <title>c602cf69-63e0-4a7a-9a47-f5ccb589437e</title>
    <updated>2026-09-12T13:59:23.442094+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c602cf69-63e0-4a7a-9a47-f5ccb589437e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.777663Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c602cf69-63e0-4a7a-9a47-f5ccb589437e/export"/>
    <published>2026-08-04T17:00:04.777663+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/031594c5-2709-4cf4-a365-b2b6eea957c6/export</id>
    <title>031594c5-2709-4cf4-a365-b2b6eea957c6</title>
    <updated>2026-09-12T13:59:23.442173+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "031594c5-2709-4cf4-a365-b2b6eea957c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-04T17:00:04.533938Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/031594c5-2709-4cf4-a365-b2b6eea957c6/export"/>
    <published>2026-08-04T17:00:04.533938+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/af56cf03-ffca-4802-be69-25fe6d416078/export</id>
    <title>af56cf03-ffca-4802-be69-25fe6d416078</title>
    <updated>2026-09-12T13:59:23.442254+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "af56cf03-ffca-4802-be69-25fe6d416078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117032389013676245", "content": "Some increased actor activities are shown targeting PHP Group PHP (CVE-2026-17543) https://vuldb.com/vuln/384789/cti", "creation_timestamp": "2026-08-03T15:55:37.864227Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/af56cf03-ffca-4802-be69-25fe6d416078/export"/>
    <published>2026-08-03T15:55:37.864227+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f0111ee6-4606-424f-bf26-b235de2f6b28/export</id>
    <title>f0111ee6-4606-424f-bf26-b235de2f6b28</title>
    <updated>2026-09-12T13:59:23.442334+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f0111ee6-4606-424f-bf26-b235de2f6b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17543", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mry2xsn6qo2b", "content": "CVE-2026-17543 - php8.4\nA vulnerability in Debian Linux's sudo package allows unprivileged users to access files they shouldn't be able to. This can lead to unauthorized data exposure or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#php84 #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-31T23:06:03.711404Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f0111ee6-4606-424f-bf26-b235de2f6b28/export"/>
    <published>2026-07-31T23:06:03.711404+00:00</published>
  </entry>
</feed>
