https://vulnerability.circl.lu/sightings/feed 2026-09-29T15:44:25.834350+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ef3b58e5-4993-4944-a12b-8e7b66cb422e/export 2026-09-29T15:44:25.861183+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ef3b58e5-4993-4944-a12b-8e7b66cb422e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/itjs2fpdfbsch", "content": "CVE-2026-91048 - Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create\nCVE ID : CVE-2026-91048\n \n Published : Sept. 29, 2026, 8:34 a.m. | 11\u00a0minutes ago\n \n Description : The\u00a0jdbc\u00a0shell comm...", "creation_timestamp": "2026-09-29T09:18:32.716216Z"} 2026-09-29T09:18:32.716216+00:00 https://vulnerability.circl.lu/sighting/bb0e22c1-d569-42fa-ab66-83bb1faf033d/export 2026-09-29T15:44:25.862735+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bb0e22c1-d569-42fa-ab66-83bb1faf033d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmgdxnw2x32k", "content": "CVE-2026-9104 - Draft List\nCVE ID : CVE-2026-9104\n \n Published : May 22, 2026, 5:16 a.m. | 34\u00a0minutes ago\n \n Description : The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Draft Post Title in all versions up to, and including, 2.6.3 due to i...", "creation_timestamp": "2026-05-22T06:53:08.848375Z"} 2026-05-22T06:53:08.848375+00:00