<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-10T20:19:40.451549+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a53a5f65-ff79-40fc-befd-e109305fe701/export</id>
    <title>a53a5f65-ff79-40fc-befd-e109305fe701</title>
    <updated>2026-07-10T20:19:40.473255+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a53a5f65-ff79-40fc-befd-e109305fe701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mqcofmrma52k", "content": "Critical alert for Adobe ColdFusion users: CVE-2026-56290 allows for potential RCE. Our latest forensic deep-dive breaks down the technical impact and provides the hardening steps you need to secure your production environment. Don't wait for the breach\u2014patch\u2026", "creation_timestamp": "2026-07-10T17:30:02.909694Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a53a5f65-ff79-40fc-befd-e109305fe701/export"/>
    <published>2026-07-10T17:30:02.909694+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9167a1bf-d8b4-4a2c-952f-2b6d32cccb3f/export</id>
    <title>9167a1bf-d8b4-4a2c-952f-2b6d32cccb3f</title>
    <updated>2026-07-10T20:19:40.475921+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9167a1bf-d8b4-4a2c-952f-2b6d32cccb3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://gist.github.com/zycoder0day/e0748291ba9f7e63533b60e8bd9eefbd", "content": "", "creation_timestamp": "2026-07-10T10:13:41.478263Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9167a1bf-d8b4-4a2c-952f-2b6d32cccb3f/export"/>
    <published>2026-07-10T10:13:41.478263+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/30e35126-0445-4044-8cb5-6ec133931c92/export</id>
    <title>30e35126-0445-4044-8cb5-6ec133931c92</title>
    <updated>2026-07-10T20:19:40.476057+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "30e35126-0445-4044-8cb5-6ec133931c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://gist.github.com/zycoder0day/84b690503eda36cf270f468c98d519d6", "content": "", "creation_timestamp": "2026-07-10T10:13:00.144958Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/30e35126-0445-4044-8cb5-6ec133931c92/export"/>
    <published>2026-07-10T10:13:00.144958+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2b09f458-90df-4ec9-916d-d25890857cc3/export</id>
    <title>2b09f458-90df-4ec9-916d-d25890857cc3</title>
    <updated>2026-07-10T20:19:40.476160+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2b09f458-90df-4ec9-916d-d25890857cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mq7sjkxaxo2o", "content": "\ud83d\udd34 Joomla hit by two KEV flaws: CVE-2026-48908 (zero-day PHP upload + rogue Super User via com_sppagebuilder) &amp;amp; CVE-2026-56290 / Page Builder CK (CVSS 10.0, unauth upload \u2192 RCE). Source: The Hacker News", "creation_timestamp": "2026-07-09T14:05:50.742832Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2b09f458-90df-4ec9-916d-d25890857cc3/export"/>
    <published>2026-07-09T14:05:50.742832+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18bec4bf-c2e8-4098-b18d-c60986542ac4/export</id>
    <title>18bec4bf-c2e8-4098-b18d-c60986542ac4</title>
    <updated>2026-07-10T20:19:40.476261+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18bec4bf-c2e8-4098-b18d-c60986542ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116884244173717703", "content": "CRITICAL vulnerabilities in Adobe ColdFusion (CVE-2026-48282), Langflow (CVE-2026-55255), Joomla SP Page Builder (CVE-2026-48908), &amp;amp; Page Builder CK (CVE-2026-56290) are being actively exploited for remote code execution &amp;amp; backdoors. Patch ASAP! https://radar.offseq.com/threat/cisa-urges-immediate-patching-of-exploited-coldfus-c7b23bd787139571 #OffSeq #CyberSec #CVE", "creation_timestamp": "2026-07-08T12:00:27.550117Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18bec4bf-c2e8-4098-b18d-c60986542ac4/export"/>
    <published>2026-07-08T12:00:27.550117+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3a833dba-4290-4021-8989-4f634cf54a0b/export</id>
    <title>3a833dba-4290-4021-8989-4f634cf54a0b</title>
    <updated>2026-07-10T20:19:40.476358+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3a833dba-4290-4021-8989-4f634cf54a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mq4cpumcxcfn", "content": "CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability  \nCVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability", "creation_timestamp": "2026-07-08T04:45:04.221867Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3a833dba-4290-4021-8989-4f634cf54a0b/export"/>
    <published>2026-07-08T04:45:04.221867+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c15cdb0e-4f16-4d20-88f8-a5d026c38b20/export</id>
    <title>c15cdb0e-4f16-4d20-88f8-a5d026c38b20</title>
    <updated>2026-07-10T20:19:40.476458+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c15cdb0e-4f16-4d20-88f8-a5d026c38b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq3cvhv6x524", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV \u2705\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary fil\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T19:15:31.497856Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c15cdb0e-4f16-4d20-88f8-a5d026c38b20/export"/>
    <published>2026-07-07T19:15:31.497856+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65f9e803-1509-42b1-b1b2-e40ebeb39266/export</id>
    <title>65f9e803-1509-42b1-b1b2-e40ebeb39266</title>
    <updated>2026-07-10T20:19:40.476566+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65f9e803-1509-42b1-b1b2-e40ebeb39266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6935162", "content": "2026-07-07: [CVE-2026-56290] Joomlack Page Builder Improper Access Control VulnerabilityJoomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.\ncisakev", "creation_timestamp": "2026-07-07T18:26:39.409283Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65f9e803-1509-42b1-b1b2-e40ebeb39266/export"/>
    <published>2026-07-07T18:26:39.409283+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1/export</id>
    <title>4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1</title>
    <updated>2026-07-10T20:19:40.476671+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/506817d1-03c3-41da-b990-e33f2ad9e33d", "content": "", "creation_timestamp": "2026-07-07T18:00:31.872519Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1/export"/>
    <published>2026-07-07T18:00:31.872519+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1200e718-8255-48c3-ae4a-dc98d8260f68/export</id>
    <title>1200e718-8255-48c3-ae4a-dc98d8260f68</title>
    <updated>2026-07-10T20:19:40.476766+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1200e718-8255-48c3-ae4a-dc98d8260f68", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ee34d77-b707-46d5-baed-7361fcc5150c", "content": "", "creation_timestamp": "2026-07-07T18:00:24.416565Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1200e718-8255-48c3-ae4a-dc98d8260f68/export"/>
    <published>2026-07-07T18:00:24.416565+00:00</published>
  </entry>
</feed>
