<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 21 Sep 2026 23:44:36 +0000</lastBuildDate>
    <item>
      <title>46af911e-2733-4ff0-ae0e-561626bc56ae</title>
      <link>https://vulnerability.circl.lu/sighting/46af911e-2733-4ff0-ae0e-561626bc56ae/export</link>
      <description>{"uuid": "46af911e-2733-4ff0-ae0e-561626bc56ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://gist.github.com/ichintu/9cb86acb682c54ea7f3ed1ba71a63335", "content": "This daily threat intelligence roundup highlights critical software vulnerabilities and emerging AI security risks. Key traditional threats include unauthenticated RCEs in SolarWinds Access Rights Manager (CVE-2026-28326, patched), Orkes Conductor (CVE-2026-58138, actively exploited), and a critical command injection flaw in Totolink routers (CVE-2026-93742, public exploit). A high-severity authenticated RCE also affects The Welcomizer WordPress plugin (CVE-2026-4327). On the AI front, Google\u2019s Gemini model accidentally breached real corporate systems during a May 2026 security test due to a domain mix-up, while industry discussions emphasize that prompt injection and LLM routing flaws have become primary security challenges in AI agent development. Collectively, the reports underscore a threat landscape defined by high-impact software exploits and rapidly evolving AI vulnerabilities.", "creation_timestamp": "2026-09-19T12:02:14.690585Z"}</description>
      <content:encoded>{"uuid": "46af911e-2733-4ff0-ae0e-561626bc56ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://gist.github.com/ichintu/9cb86acb682c54ea7f3ed1ba71a63335", "content": "This daily threat intelligence roundup highlights critical software vulnerabilities and emerging AI security risks. Key traditional threats include unauthenticated RCEs in SolarWinds Access Rights Manager (CVE-2026-28326, patched), Orkes Conductor (CVE-2026-58138, actively exploited), and a critical command injection flaw in Totolink routers (CVE-2026-93742, public exploit). A high-severity authenticated RCE also affects The Welcomizer WordPress plugin (CVE-2026-4327). On the AI front, Google\u2019s Gemini model accidentally breached real corporate systems during a May 2026 security test due to a domain mix-up, while industry discussions emphasize that prompt injection and LLM routing flaws have become primary security challenges in AI agent development. Collectively, the reports underscore a threat landscape defined by high-impact software exploits and rapidly evolving AI vulnerabilities.", "creation_timestamp": "2026-09-19T12:02:14.690585Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/46af911e-2733-4ff0-ae0e-561626bc56ae/export</guid>
      <pubDate>Sat, 19 Sep 2026 12:02:14 +0000</pubDate>
    </item>
    <item>
      <title>d1199c11-c79f-48b7-866f-5f16683e1f81</title>
      <link>https://vulnerability.circl.lu/sighting/d1199c11-c79f-48b7-866f-5f16683e1f81/export</link>
      <description>{"uuid": "d1199c11-c79f-48b7-866f-5f16683e1f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvud4wwqfv2e", "content": "\ud83d\udfe0 CVE-2026-4327 - High (8.8)\n\nThe The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4327/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T09:02:14.264614Z"}</description>
      <content:encoded>{"uuid": "d1199c11-c79f-48b7-866f-5f16683e1f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvud4wwqfv2e", "content": "\ud83d\udfe0 CVE-2026-4327 - High (8.8)\n\nThe The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4327/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T09:02:14.264614Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d1199c11-c79f-48b7-866f-5f16683e1f81/export</guid>
      <pubDate>Sat, 19 Sep 2026 09:02:14 +0000</pubDate>
    </item>
    <item>
      <title>869f8202-126b-481e-a9f6-b83a06c9bf27</title>
      <link>https://vulnerability.circl.lu/sighting/869f8202-126b-481e-a9f6-b83a06c9bf27/export</link>
      <description>{"uuid": "869f8202-126b-481e-a9f6-b83a06c9bf27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvu7sqo4lc2f", "content": "CVE-2026-4327: the WordPress plugin The Welcomizer (sebwordpress), versions up to and including 2.8.1, lets subscriber-level users run arbitrary code via a missing authorization check. No fixed version is listed in the CVE record; treat as unpatched.", "creation_timestamp": "2026-09-19T08:02:50.257738Z"}</description>
      <content:encoded>{"uuid": "869f8202-126b-481e-a9f6-b83a06c9bf27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4327", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvu7sqo4lc2f", "content": "CVE-2026-4327: the WordPress plugin The Welcomizer (sebwordpress), versions up to and including 2.8.1, lets subscriber-level users run arbitrary code via a missing authorization check. No fixed version is listed in the CVE record; treat as unpatched.", "creation_timestamp": "2026-09-19T08:02:50.257738Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/869f8202-126b-481e-a9f6-b83a06c9bf27/export</guid>
      <pubDate>Sat, 19 Sep 2026 08:02:50 +0000</pubDate>
    </item>
    <item>
      <title>4c936824-2e76-4304-972e-f588cd48f793</title>
      <link>https://vulnerability.circl.lu/sighting/4c936824-2e76-4304-972e-f588cd48f793/export</link>
      <description>{"uuid": "4c936824-2e76-4304-972e-f588cd48f793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:54:05.035489Z"}</description>
      <content:encoded>{"uuid": "4c936824-2e76-4304-972e-f588cd48f793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:54:05.035489Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4c936824-2e76-4304-972e-f588cd48f793/export</guid>
      <pubDate>Mon, 03 Aug 2026 06:54:05 +0000</pubDate>
    </item>
    <item>
      <title>00d7f0ce-affd-4c8e-b378-07bd3d4f6f09</title>
      <link>https://vulnerability.circl.lu/sighting/00d7f0ce-affd-4c8e-b378-07bd3d4f6f09/export</link>
      <description>{"uuid": "00d7f0ce-affd-4c8e-b378-07bd3d4f6f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43277", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:54:01.488702Z"}</description>
      <content:encoded>{"uuid": "00d7f0ce-affd-4c8e-b378-07bd3d4f6f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43277", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:54:01.488702Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/00d7f0ce-affd-4c8e-b378-07bd3d4f6f09/export</guid>
      <pubDate>Mon, 03 Aug 2026 06:54:01 +0000</pubDate>
    </item>
    <item>
      <title>87f10889-be6a-419f-b0de-fcb506f5e2b4</title>
      <link>https://vulnerability.circl.lu/sighting/87f10889-be6a-419f-b0de-fcb506f5e2b4/export</link>
      <description>{"uuid": "87f10889-be6a-419f-b0de-fcb506f5e2b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43275", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:59.283834Z"}</description>
      <content:encoded>{"uuid": "87f10889-be6a-419f-b0de-fcb506f5e2b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43275", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:59.283834Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/87f10889-be6a-419f-b0de-fcb506f5e2b4/export</guid>
      <pubDate>Mon, 03 Aug 2026 06:53:59 +0000</pubDate>
    </item>
    <item>
      <title>84a1b076-996c-4762-8cbf-7c0aabfc41f4</title>
      <link>https://vulnerability.circl.lu/sighting/84a1b076-996c-4762-8cbf-7c0aabfc41f4/export</link>
      <description>{"uuid": "84a1b076-996c-4762-8cbf-7c0aabfc41f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43273", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:57.063642Z"}</description>
      <content:encoded>{"uuid": "84a1b076-996c-4762-8cbf-7c0aabfc41f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43273", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:57.063642Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/84a1b076-996c-4762-8cbf-7c0aabfc41f4/export</guid>
      <pubDate>Mon, 03 Aug 2026 06:53:57 +0000</pubDate>
    </item>
    <item>
      <title>7f1d8e56-6289-4a26-a432-701cbe0b9c94</title>
      <link>https://vulnerability.circl.lu/sighting/7f1d8e56-6289-4a26-a432-701cbe0b9c94/export</link>
      <description>{"uuid": "7f1d8e56-6289-4a26-a432-701cbe0b9c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43270", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:19.207486Z"}</description>
      <content:encoded>{"uuid": "7f1d8e56-6289-4a26-a432-701cbe0b9c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43270", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T06:53:19.207486Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7f1d8e56-6289-4a26-a432-701cbe0b9c94/export</guid>
      <pubDate>Mon, 03 Aug 2026 06:53:19 +0000</pubDate>
    </item>
    <item>
      <title>16b4e1e3-5be5-4fc5-9d59-deb7b639b86b</title>
      <link>https://vulnerability.circl.lu/sighting/16b4e1e3-5be5-4fc5-9d59-deb7b639b86b/export</link>
      <description>{"uuid": "16b4e1e3-5be5-4fc5-9d59-deb7b639b86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43276", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T00:45:19.098218Z"}</description>
      <content:encoded>{"uuid": "16b4e1e3-5be5-4fc5-9d59-deb7b639b86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43276", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-09T00:45:19.098218Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/16b4e1e3-5be5-4fc5-9d59-deb7b639b86b/export</guid>
      <pubDate>Thu, 09 Jul 2026 00:45:19 +0000</pubDate>
    </item>
    <item>
      <title>e34810da-6ed0-4442-8390-8d702bebf626</title>
      <link>https://vulnerability.circl.lu/sighting/e34810da-6ed0-4442-8390-8d702bebf626/export</link>
      <description>{"uuid": "e34810da-6ed0-4442-8390-8d702bebf626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:57:36.116844Z"}</description>
      <content:encoded>{"uuid": "e34810da-6ed0-4442-8390-8d702bebf626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:57:36.116844Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e34810da-6ed0-4442-8390-8d702bebf626/export</guid>
      <pubDate>Thu, 02 Jul 2026 06:57:36 +0000</pubDate>
    </item>
  </channel>
</rss>
