https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 18 Sep 2026 02:21:37 +0000 https://vulnerability.circl.lu/sighting/b500450d-b9f2-47b6-bbde-456370b18d8c/export {"uuid": "b500450d-b9f2-47b6-bbde-456370b18d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-11T00:00:51.938349Z"} {"uuid": "b500450d-b9f2-47b6-bbde-456370b18d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-11T00:00:51.938349Z"} https://vulnerability.circl.lu/sighting/b500450d-b9f2-47b6-bbde-456370b18d8c/export Fri, 11 Sep 2026 00:00:51 +0000 https://vulnerability.circl.lu/sighting/61b75cbd-5868-44b6-9587-c49566d3da4d/export {"uuid": "61b75cbd-5868-44b6-9587-c49566d3da4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117248599082338332", "content": "\u203c\ufe0f CVE-2026-11387: A critical improper-authentication flaw in the WordPress plugin SMS Alert \u2013 SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery.\nGitHub: https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP", "creation_timestamp": "2026-09-10T20:20:42.060788Z"} {"uuid": "61b75cbd-5868-44b6-9587-c49566d3da4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117248599082338332", "content": "\u203c\ufe0f CVE-2026-11387: A critical improper-authentication flaw in the WordPress plugin SMS Alert \u2013 SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery.\nGitHub: https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP", "creation_timestamp": "2026-09-10T20:20:42.060788Z"} https://vulnerability.circl.lu/sighting/61b75cbd-5868-44b6-9587-c49566d3da4d/export Thu, 10 Sep 2026 20:20:42 +0000 https://vulnerability.circl.lu/sighting/274573de-6a0e-40e7-b393-81ca6dde9dac/export {"uuid": "274573de-6a0e-40e7-b393-81ca6dde9dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-10T05:00:05.032870Z"} {"uuid": "274573de-6a0e-40e7-b393-81ca6dde9dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/ywbCj1qC377X1uevfG1yFHPTnDAYE7AO0rak_508q64VcZA", "content": "", "creation_timestamp": "2026-09-10T05:00:05.032870Z"} https://vulnerability.circl.lu/sighting/274573de-6a0e-40e7-b393-81ca6dde9dac/export Thu, 10 Sep 2026 05:00:05 +0000 https://vulnerability.circl.lu/sighting/4191638c-d8f8-4f76-8965-3bd9e9401f32/export {"uuid": "4191638c-d8f8-4f76-8965-3bd9e9401f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11386", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqvtzsdbt22c", "content": "Ubuntu Pro Client vulnerability CVE-2026-11386 (CVSS 9.0) lets a spoofed contract server inject APT sources and run code with root privileges.\n\n#Ubuntu #UbuntuPro #CVE202611386 #Canonical #RCE #Linux #CyberSecurity", "creation_timestamp": "2026-07-18T08:31:23.433260Z"} {"uuid": "4191638c-d8f8-4f76-8965-3bd9e9401f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11386", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqvtzsdbt22c", "content": "Ubuntu Pro Client vulnerability CVE-2026-11386 (CVSS 9.0) lets a spoofed contract server inject APT sources and run code with root privileges.\n\n#Ubuntu #UbuntuPro #CVE202611386 #Canonical #RCE #Linux #CyberSecurity", "creation_timestamp": "2026-07-18T08:31:23.433260Z"} https://vulnerability.circl.lu/sighting/4191638c-d8f8-4f76-8965-3bd9e9401f32/export Sat, 18 Jul 2026 08:31:23 +0000 https://vulnerability.circl.lu/sighting/dc1a5d73-b08e-44c6-a0f7-66655adff18e/export {"uuid": "dc1a5d73-b08e-44c6-a0f7-66655adff18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-18T00:00:10.800342Z"} {"uuid": "dc1a5d73-b08e-44c6-a0f7-66655adff18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "published-proof-of-concept", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-18T00:00:10.800342Z"} https://vulnerability.circl.lu/sighting/dc1a5d73-b08e-44c6-a0f7-66655adff18e/export Sat, 18 Jul 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/a368b1ce-4f97-4297-9fde-3a3f0849f436/export {"uuid": "a368b1ce-4f97-4297-9fde-3a3f0849f436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11386", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116936433039987085", "content": "Some increased actor activities are shown targeting Canonical ubuntu-pro-client (CVE-2026-11386) https://vuldb.com/vuln/379514/cti", "creation_timestamp": "2026-07-17T17:12:45.954751Z"} {"uuid": "a368b1ce-4f97-4297-9fde-3a3f0849f436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11386", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116936433039987085", "content": "Some increased actor activities are shown targeting Canonical ubuntu-pro-client (CVE-2026-11386) https://vuldb.com/vuln/379514/cti", "creation_timestamp": "2026-07-17T17:12:45.954751Z"} https://vulnerability.circl.lu/sighting/a368b1ce-4f97-4297-9fde-3a3f0849f436/export Fri, 17 Jul 2026 17:12:45 +0000 https://vulnerability.circl.lu/sighting/ed4ac0d9-805e-4911-ad25-a764e2a5fbe3/export {"uuid": "ed4ac0d9-805e-4911-ad25-a764e2a5fbe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-17T01:00:21.246338Z"} {"uuid": "ed4ac0d9-805e-4911-ad25-a764e2a5fbe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-17T01:00:21.246338Z"} https://vulnerability.circl.lu/sighting/ed4ac0d9-805e-4911-ad25-a764e2a5fbe3/export Fri, 17 Jul 2026 01:00:21 +0000 https://vulnerability.circl.lu/sighting/5d6af9cf-672d-438c-9a45-975651dbd946/export {"uuid": "5d6af9cf-672d-438c-9a45-975651dbd946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11386", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsgzm7l7j2t", "content": "ubuntu-pro-client (ubuntu-advantage-tools) CRITICAL vuln: attackers can inject APT config and install root-level packages by manipulating contract server responses. Default on Ubuntu Pro images. Patch TBD. More: https://radar.offseq.com/threat/ubuntu-cve-2026-11386-a076c116b384b281 #OffSeq #Linux...", "creation_timestamp": "2026-07-17T00:00:39.363923Z"} {"uuid": "5d6af9cf-672d-438c-9a45-975651dbd946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11386", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsgzm7l7j2t", "content": "ubuntu-pro-client (ubuntu-advantage-tools) CRITICAL vuln: attackers can inject APT config and install root-level packages by manipulating contract server responses. Default on Ubuntu Pro images. Patch TBD. More: https://radar.offseq.com/threat/ubuntu-cve-2026-11386-a076c116b384b281 #OffSeq #Linux...", "creation_timestamp": "2026-07-17T00:00:39.363923Z"} https://vulnerability.circl.lu/sighting/5d6af9cf-672d-438c-9a45-975651dbd946/export Fri, 17 Jul 2026 00:00:39 +0000 https://vulnerability.circl.lu/sighting/c867171d-4118-4a29-bef2-7e6362b0e837/export {"uuid": "c867171d-4118-4a29-bef2-7e6362b0e837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11386", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116932374467367447", "content": "CRITICAL vuln in ubuntu-pro-client <37.2ubuntu~22.04.1: contract server manipulation can inject malicious APT config & install arbitrary packages as root. Preinstalled on Ubuntu Pro images. Patch status TBD. Details: https://radar.offseq.com/threat/ubuntu-cve-2026-11386-a076c116b384b281 #OffSeq #Ubuntu #LinuxSec #Vulnerability", "creation_timestamp": "2026-07-17T00:00:38.053492Z"} {"uuid": "c867171d-4118-4a29-bef2-7e6362b0e837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11386", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116932374467367447", "content": "CRITICAL vuln in ubuntu-pro-client <37.2ubuntu~22.04.1: contract server manipulation can inject malicious APT config & install arbitrary packages as root. Preinstalled on Ubuntu Pro images. Patch status TBD. Details: https://radar.offseq.com/threat/ubuntu-cve-2026-11386-a076c116b384b281 #OffSeq #Ubuntu #LinuxSec #Vulnerability", "creation_timestamp": "2026-07-17T00:00:38.053492Z"} https://vulnerability.circl.lu/sighting/c867171d-4118-4a29-bef2-7e6362b0e837/export Fri, 17 Jul 2026 00:00:38 +0000 https://vulnerability.circl.lu/sighting/dc3ace3c-e5e8-47fe-9fd2-a7c16aaa8281/export {"uuid": "dc3ace3c-e5e8-47fe-9fd2-a7c16aaa8281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-16T19:00:23.174359Z"} {"uuid": "dc3ace3c-e5e8-47fe-9fd2-a7c16aaa8281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11387", "type": "seen", "source": "Telegram/MkaIkROVQpeeF9JtM073PqkfEmOmst-NpG-Pr_p1mApowTg", "content": "", "creation_timestamp": "2026-07-16T19:00:23.174359Z"} https://vulnerability.circl.lu/sighting/dc3ace3c-e5e8-47fe-9fd2-a7c16aaa8281/export Thu, 16 Jul 2026 19:00:23 +0000