<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-15T20:10:01.479011+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e484210c-1075-43a9-bc6f-bf3637ef5320/export</id>
    <title>e484210c-1075-43a9-bc6f-bf3637ef5320</title>
    <updated>2026-09-15T20:10:01.508671+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e484210c-1075-43a9-bc6f-bf3637ef5320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98244", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17544\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a r2qa\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 22:28:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-17544: PHP bcmath OOB write \u2192 universal memory-only RCE &amp;amp; disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on   PHP 8.4.x / 8.5.x.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:11.009490Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e484210c-1075-43a9-bc6f-bf3637ef5320/export"/>
    <published>2026-08-24T00:00:11.009490+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9404ae5d-28db-4aca-85a3-2a0fa061d628/export</id>
    <title>9404ae5d-28db-4aca-85a3-2a0fa061d628</title>
    <updated>2026-09-15T20:10:01.511355+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9404ae5d-28db-4aca-85a3-2a0fa061d628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "seen", "source": "https://t.me/GithubRedTeam/98244", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17544\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a r2qa\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 22:28:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-17544: PHP bcmath OOB write \u2192 universal memory-only RCE &amp;amp; disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on   PHP 8.4.x / 8.5.x.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:32.785997Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9404ae5d-28db-4aca-85a3-2a0fa061d628/export"/>
    <published>2026-08-23T00:00:32.785997+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/93701561-70c1-415e-994c-23678ebc219b/export</id>
    <title>93701561-70c1-415e-994c-23678ebc219b</title>
    <updated>2026-09-15T20:10:01.511493+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "93701561-70c1-415e-994c-23678ebc219b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "seen", "source": "https://t.me/GithubRedTeam/98244", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17544\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a r2qa\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 22:28:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-17544: PHP bcmath OOB write \u2192 universal memory-only RCE &amp;amp; disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on   PHP 8.4.x / 8.5.x.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:08.132149Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/93701561-70c1-415e-994c-23678ebc219b/export"/>
    <published>2026-08-22T19:00:08.132149+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a4d2be4-fc0c-4c8e-969a-ac850d0689de/export</id>
    <title>9a4d2be4-fc0c-4c8e-969a-ac850d0689de</title>
    <updated>2026-09-15T20:10:01.511609+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a4d2be4-fc0c-4c8e-969a-ac850d0689de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "published-proof-of-concept", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-18T00:00:10.330712Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a4d2be4-fc0c-4c8e-969a-ac850d0689de/export"/>
    <published>2026-08-18T00:00:10.330712+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0651b70b-4021-4b6c-9eeb-dba7e52b04bc/export</id>
    <title>0651b70b-4021-4b6c-9eeb-dba7e52b04bc</title>
    <updated>2026-09-15T20:10:01.511706+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0651b70b-4021-4b6c-9eeb-dba7e52b04bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "seen", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-17T18:00:05.924416Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0651b70b-4021-4b6c-9eeb-dba7e52b04bc/export"/>
    <published>2026-08-17T18:00:05.924416+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6dcfa66b-c727-4a6c-ba95-1ddd4c1b8df5/export</id>
    <title>6dcfa66b-c727-4a6c-ba95-1ddd4c1b8df5</title>
    <updated>2026-09-15T20:10:01.511808+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6dcfa66b-c727-4a6c-ba95-1ddd4c1b8df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:22.275826Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6dcfa66b-c727-4a6c-ba95-1ddd4c1b8df5/export"/>
    <published>2026-08-16T00:00:22.275826+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6d4b986b-b9ef-4e9b-a422-11b6144bdd61/export</id>
    <title>6d4b986b-b9ef-4e9b-a422-11b6144bdd61</title>
    <updated>2026-09-15T20:10:01.511905+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6d4b986b-b9ef-4e9b-a422-11b6144bdd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:06.751887Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6d4b986b-b9ef-4e9b-a422-11b6144bdd61/export"/>
    <published>2026-08-15T08:00:06.751887+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5e4ba8cc-0252-45a5-9330-4abc3efc5967/export</id>
    <title>5e4ba8cc-0252-45a5-9330-4abc3efc5967</title>
    <updated>2026-09-15T20:10:01.511998+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5e4ba8cc-0252-45a5-9330-4abc3efc5967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97769", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17544-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 17:48:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-17544 \u2014 PHP bcmath bccomp() OOB write (stack smashing). Verified: crash on 8.4.23/8.5.8, fixed in 8.4.24. GHSA-x692-q9x7-8c3f\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T00:00:06.661023Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5e4ba8cc-0252-45a5-9330-4abc3efc5967/export"/>
    <published>2026-08-13T00:00:06.661023+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/71cdd5c8-63f3-4423-af91-fc9c6fb552a8/export</id>
    <title>71cdd5c8-63f3-4423-af91-fc9c6fb552a8</title>
    <updated>2026-09-15T20:10:01.512098+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "71cdd5c8-63f3-4423-af91-fc9c6fb552a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "seen", "source": "https://t.me/GithubRedTeam/97769", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17544-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 17:48:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-17544 \u2014 PHP bcmath bccomp() OOB write (stack smashing). Verified: crash on 8.4.23/8.5.8, fixed in 8.4.24. GHSA-x692-q9x7-8c3f\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T19:00:03.574469Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/71cdd5c8-63f3-4423-af91-fc9c6fb552a8/export"/>
    <published>2026-08-12T19:00:03.574469+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ea0ad44c-cd24-4818-9ad8-84f85e9972b7/export</id>
    <title>ea0ad44c-cd24-4818-9ad8-84f85e9972b7</title>
    <updated>2026-09-15T20:10:01.512196+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ea0ad44c-cd24-4818-9ad8-84f85e9972b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17544", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msgvgxwa7s2y", "content": "\ud83d\udccc CVE-2026-17544 - Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and ... https://www.cyberhub.blog/cves/CVE-2026-17544", "creation_timestamp": "2026-08-06T20:37:06.597067Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ea0ad44c-cd24-4818-9ad8-84f85e9972b7/export"/>
    <published>2026-08-06T20:37:06.597067+00:00</published>
  </entry>
</feed>
