https://vulnerability.circl.lu/sightings/feed 2026-10-06T06:14:17.011917+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cc234953-2a48-4167-821e-0e6d8783d1b7/export 2026-10-06T06:14:17.037819+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cc234953-2a48-4167-821e-0e6d8783d1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw6m5diuvc2u", "content": "CVE-2026-82843 - wp oauth server ( login with wordpress )\nThe WP OAuth Server plugin for WordPress (versions before 6.4.0) can give a low\u2011level subscriber a forged login token that belongs to another account, even an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-09-23T11:10:07.869641Z"} 2026-09-23T11:10:07.869641+00:00 https://vulnerability.circl.lu/sighting/9a866332-dfde-4b08-a48e-dfc714cd0488/export 2026-10-06T06:14:17.040539+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9a866332-dfde-4b08-a48e-dfc714cd0488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82842", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxkzxxv7d2v", "content": "\ud83d\udfe0 CVE-2026-82842 - High (8.1)\n\nThe SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion f...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82842/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T16:01:44.413969Z"} 2026-09-20T16:01:44.413969+00:00 https://vulnerability.circl.lu/sighting/db443e6f-9d3e-4737-8de9-c5eb1cd19067/export 2026-10-06T06:14:17.040673+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "db443e6f-9d3e-4737-8de9-c5eb1cd19067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82842", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvwtiproyl24", "content": "SAML Single Sign On for WordPress <6.0.0 has a CRITICAL flaw: attackers with access to the identity provider can hijack any account, incl. admins. Upgrade to v6.0.0+ ASAP. https://radar.offseq.com/threat/cve-2026-82842-cwe-269-improper-privilege-management-in-saml-single-sign-on-ddad410b671d5b6b ...", "creation_timestamp": "2026-09-20T09:00:28.904174Z"} 2026-09-20T09:00:28.904174+00:00 https://vulnerability.circl.lu/sighting/a9c751fc-3faa-4e26-90f9-0ff83058e3f8/export 2026-10-06T06:14:17.040774+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a9c751fc-3faa-4e26-90f9-0ff83058e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82842", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117302547280316777", "content": "CVE-2026-82842 | CRITICAL: SAML Single Sign On WP plugin <6.0.0 fails to enforce SSO linking criteria, letting attackers with IDP control hijack any account, incl. admins. Upgrade to 6.0.0+ now. https://radar.offseq.com/threat/cve-2026-82842-cwe-269-improper-privilege-management-in-saml-single-sign-on-ddad410b671d5b6b #OffSeq #WordPress #CVE202682842 #SAML #infosec", "creation_timestamp": "2026-09-20T09:00:26.221630Z"} 2026-09-20T09:00:26.221630+00:00 https://vulnerability.circl.lu/sighting/48e4ec02-9abf-4dde-98fe-5352f9440ea8/export 2026-10-06T06:14:17.040867+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "48e4ec02-9abf-4dde-98fe-5352f9440ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82845", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdrezgjvp2r", "content": "\ud83d\udd34 CVE-2026-82845 - Critical (9.9)\n\nThe Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as me...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82845/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T19:02:03.826219Z"} 2026-09-12T19:02:03.826219+00:00 https://vulnerability.circl.lu/sighting/70b1c5fd-72b3-4db7-8799-b7493b1c8193/export 2026-10-06T06:14:17.040953+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "70b1c5fd-72b3-4db7-8799-b7493b1c8193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82845", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdjz5ikg222", "content": "CVE-2026-82845 - masteriyo lms\nThe Masteriyo LMS plugin for WordPress versions earlier than 3.4.1 can be tricked into loading data that a attacker controls, which may let them write files or execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#masteriyolms #unknown #CVE #infosec", "creation_timestamp": "2026-09-12T16:50:08.128467Z"} 2026-09-12T16:50:08.128467+00:00 https://vulnerability.circl.lu/sighting/bb2a826d-cfb0-48aa-8727-d823e13eef4d/export 2026-10-06T06:14:17.041038+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bb2a826d-cfb0-48aa-8727-d823e13eef4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8284", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr62dsikrz2s", "content": "CVE-2026-8284 - Open Redirect in Universal Sotware's FlexCity\nCVE ID : CVE-2026-8284\n \n Published : July 21, 2026, 1:17 p.m. | 27\u00a0minutes ago\n \n Description : URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc. FlexCity allows Input Dat...", "creation_timestamp": "2026-07-21T14:45:39.225742Z"} 2026-07-21T14:45:39.225742+00:00