<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 21:55:31 +0000</lastBuildDate>
    <item>
      <title>168983bd-6d1c-4843-a146-03fbc5aff04c</title>
      <link>https://vulnerability.circl.lu/sighting/168983bd-6d1c-4843-a146-03fbc5aff04c/export</link>
      <description>{"uuid": "168983bd-6d1c-4843-a146-03fbc5aff04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/FJhHNxuddf7TpLw0kSRARdOIBivVItQHKCcKtq2qfHsVogM", "content": "", "creation_timestamp": "2026-10-01T03:00:06.000000Z"}</description>
      <content:encoded>{"uuid": "168983bd-6d1c-4843-a146-03fbc5aff04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/FJhHNxuddf7TpLw0kSRARdOIBivVItQHKCcKtq2qfHsVogM", "content": "", "creation_timestamp": "2026-10-01T03:00:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/168983bd-6d1c-4843-a146-03fbc5aff04c/export</guid>
      <pubDate>Thu, 01 Oct 2026 03:00:06 +0000</pubDate>
    </item>
    <item>
      <title>6f2b2d45-549d-40e8-8dd1-236d14462615</title>
      <link>https://vulnerability.circl.lu/sighting/6f2b2d45-549d-40e8-8dd1-236d14462615/export</link>
      <description>{"uuid": "6f2b2d45-549d-40e8-8dd1-236d14462615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/p8fCe73qPhNi0gtkgFiWePACon_RGM1KmaCzYKDKoMfuYzQ", "content": "", "creation_timestamp": "2026-09-30T23:00:22.000000Z"}</description>
      <content:encoded>{"uuid": "6f2b2d45-549d-40e8-8dd1-236d14462615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/p8fCe73qPhNi0gtkgFiWePACon_RGM1KmaCzYKDKoMfuYzQ", "content": "", "creation_timestamp": "2026-09-30T23:00:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6f2b2d45-549d-40e8-8dd1-236d14462615/export</guid>
      <pubDate>Wed, 30 Sep 2026 23:00:22 +0000</pubDate>
    </item>
    <item>
      <title>475ceb51-a938-446a-b527-66c31877a1ec</title>
      <link>https://vulnerability.circl.lu/sighting/475ceb51-a938-446a-b527-66c31877a1ec/export</link>
      <description>{"uuid": "475ceb51-a938-446a-b527-66c31877a1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/p8fCe73qPhNi0gtkgFiWePACon_RGM1KmaCzYKDKoMfuYzQ", "content": "", "creation_timestamp": "2026-09-30T23:00:22.000000Z"}</description>
      <content:encoded>{"uuid": "475ceb51-a938-446a-b527-66c31877a1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/p8fCe73qPhNi0gtkgFiWePACon_RGM1KmaCzYKDKoMfuYzQ", "content": "", "creation_timestamp": "2026-09-30T23:00:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/475ceb51-a938-446a-b527-66c31877a1ec/export</guid>
      <pubDate>Wed, 30 Sep 2026 23:00:22 +0000</pubDate>
    </item>
    <item>
      <title>87afaddb-a5c9-4dd4-a136-ff546319d87c</title>
      <link>https://vulnerability.circl.lu/sighting/87afaddb-a5c9-4dd4-a136-ff546319d87c/export</link>
      <description>{"uuid": "87afaddb-a5c9-4dd4-a136-ff546319d87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103899", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 18:29:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T19:07:32.000000Z"}</description>
      <content:encoded>{"uuid": "87afaddb-a5c9-4dd4-a136-ff546319d87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103899", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 18:29:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T19:07:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/87afaddb-a5c9-4dd4-a136-ff546319d87c/export</guid>
      <pubDate>Wed, 30 Sep 2026 19:07:32 +0000</pubDate>
    </item>
    <item>
      <title>1fe32995-b7f6-4a57-89bb-772faa1a7ba5</title>
      <link>https://vulnerability.circl.lu/sighting/1fe32995-b7f6-4a57-89bb-772faa1a7ba5/export</link>
      <description>{"uuid": "1fe32995-b7f6-4a57-89bb-772faa1a7ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103899", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 18:29:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T19:07:32.000000Z"}</description>
      <content:encoded>{"uuid": "1fe32995-b7f6-4a57-89bb-772faa1a7ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103899", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 18:29:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T19:07:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1fe32995-b7f6-4a57-89bb-772faa1a7ba5/export</guid>
      <pubDate>Wed, 30 Sep 2026 19:07:32 +0000</pubDate>
    </item>
    <item>
      <title>a0eb79f4-2393-431f-b806-723a921f39ff</title>
      <link>https://vulnerability.circl.lu/sighting/a0eb79f4-2393-431f-b806-723a921f39ff/export</link>
      <description>{"uuid": "a0eb79f4-2393-431f-b806-723a921f39ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}</description>
      <content:encoded>{"uuid": "a0eb79f4-2393-431f-b806-723a921f39ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a0eb79f4-2393-431f-b806-723a921f39ff/export</guid>
      <pubDate>Sun, 27 Sep 2026 21:00:04 +0000</pubDate>
    </item>
    <item>
      <title>d7dc1973-8f49-41ef-b921-4289d80fdd34</title>
      <link>https://vulnerability.circl.lu/sighting/d7dc1973-8f49-41ef-b921-4289d80fdd34/export</link>
      <description>{"uuid": "d7dc1973-8f49-41ef-b921-4289d80fdd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}</description>
      <content:encoded>{"uuid": "d7dc1973-8f49-41ef-b921-4289d80fdd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d7dc1973-8f49-41ef-b921-4289d80fdd34/export</guid>
      <pubDate>Sun, 27 Sep 2026 21:00:04 +0000</pubDate>
    </item>
    <item>
      <title>1811fd7a-28ea-4056-81a8-da23d0c73b24</title>
      <link>https://vulnerability.circl.lu/sighting/1811fd7a-28ea-4056-81a8-da23d0c73b24/export</link>
      <description>{"uuid": "1811fd7a-28ea-4056-81a8-da23d0c73b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/Xs5RSNf8dUoer362h3C47eE9d4XRs66xIhTCunAO4l08ziA", "content": "", "creation_timestamp": "2026-09-27T11:00:15.000000Z"}</description>
      <content:encoded>{"uuid": "1811fd7a-28ea-4056-81a8-da23d0c73b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/Xs5RSNf8dUoer362h3C47eE9d4XRs66xIhTCunAO4l08ziA", "content": "", "creation_timestamp": "2026-09-27T11:00:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1811fd7a-28ea-4056-81a8-da23d0c73b24/export</guid>
      <pubDate>Sun, 27 Sep 2026 11:00:15 +0000</pubDate>
    </item>
    <item>
      <title>d9a63071-0e14-45b2-8ef4-414e98dca7d3</title>
      <link>https://vulnerability.circl.lu/sighting/d9a63071-0e14-45b2-8ef4-414e98dca7d3/export</link>
      <description>{"uuid": "d9a63071-0e14-45b2-8ef4-414e98dca7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/Xs5RSNf8dUoer362h3C47eE9d4XRs66xIhTCunAO4l08ziA", "content": "", "creation_timestamp": "2026-09-27T11:00:15.000000Z"}</description>
      <content:encoded>{"uuid": "d9a63071-0e14-45b2-8ef4-414e98dca7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/Xs5RSNf8dUoer362h3C47eE9d4XRs66xIhTCunAO4l08ziA", "content": "", "creation_timestamp": "2026-09-27T11:00:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d9a63071-0e14-45b2-8ef4-414e98dca7d3/export</guid>
      <pubDate>Sun, 27 Sep 2026 11:00:15 +0000</pubDate>
    </item>
    <item>
      <title>12daa694-16c9-4ccc-81e1-068f3d60bf62</title>
      <link>https://vulnerability.circl.lu/sighting/12daa694-16c9-4ccc-81e1-068f3d60bf62/export</link>
      <description>{"uuid": "12daa694-16c9-4ccc-81e1-068f3d60bf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103511", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a be-keb\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 09:10:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T10:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "12daa694-16c9-4ccc-81e1-068f3d60bf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103511", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a be-keb\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 09:10:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T10:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/12daa694-16c9-4ccc-81e1-068f3d60bf62/export</guid>
      <pubDate>Sun, 27 Sep 2026 10:00:08 +0000</pubDate>
    </item>
  </channel>
</rss>
