https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:49:09 +0000 https://vulnerability.circl.lu/sighting/b30adbc3-d3c6-45f4-9ffd-89e126d7b269/export {"uuid": "b30adbc3-d3c6-45f4-9ffd-89e126d7b269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/baseleeak/404", "content": "4 Vulnerabilities Already Under Attack: CISA Adds SharePoint, WSO2, MikroTik, and Adobe Commerce to Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its catalog of flaws known to be exploited in the wild. The security gaps affect Microsoft SharePoint servers, WSO2 API management products, Adobe Commerce and Magento e-commerce stores, and devices running MikroTik RouterOS. For some of these vulnerabilities, attackers require no credentials or user interaction to succeed.\nThe most critical flaw, CVE-2026-5430, affects WSO2 API Manager versions 4.1.0\u20134.6.0, as well as API Control Plane, Traffic Manager, and Universal Gateway versions 4.5.0 and 4.6.0. WSO2 assigned the vulnerability a maximum CVSS score of 10 for certain configurations, warning that a successful attack allows for full account takeover, including administrative access.\nThe flaw stems from the validation process of JSON Web Tokens (JWT), which act as digital passes between applications and services. WSO2 accepted tokens signed with an unsupported algorithm, allowing malicious actors to forge tokens and bypass authentication. The vendor released patches in the spring and recommends installing the relevant updates or upgrading to an unaffected version.\nThe second critical vulnerability, CVE-2026-71362 (CVSS score: 9.1), impacts Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. An authorization bypass flaw allows unauthenticated attackers to gain access to customer accounts. Experts at Sansec, who analyzed the patch, discovered that the system incorrectly handled user identity within a session, enabling an attacker to switch the session to another client and access their profile and personal data.\nAdobe addressed CVE-2026-71362 in its August update (APSB26-92). At the time of the advisory's release, the company stated it had no evidence of active exploitation. However, Sansec claimed its security systems had already blocked attempts to exploit CVE-2026-71362. Its inclusion in the CISA catalog now confirms that active exploitation has moved beyond lab proof-of-concepts.\nMicrosoft SharePoint is being targeted via CVE-2026-65660 (CVSS score: 8.8). The flaw allows a low-privileged user to inject and execute code on the server over the network. Microsoft patched the vulnerability in August for SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. Unlike the flaws in WSO2 and Adobe Commerce, exploiting CVE-2026-65660 requires a valid user account.\nThe fourth vulnerability, CVE-2026-67279, is located in the SSH server of MikroTik RouterOS. Under a specific sequence of actions, RouterOS began processing commands before the user authentication process was fully completed. As a result, an unauthenticated remote client could create, modify, and restore files within the accessible RouterOS directory, including configuration files and diagnostic data. Researchers described the issue after analyzing the September updates.\nMikroTik resolved the related flaws in RouterOS versions 6.49.21, 7.23.4, 7.24.2, and 7.25 beta 3. The company advises against leaving SSH exposed to untrusted networks. Following the update, administrators should inspect devices for unknown users, scripts, or other configuration changes. RouterOS may also label a device as \"Flagged\" if it detects known indicators of compromise.\nCISA has not disclosed who is exploiting these four vulnerabilities or which organizations are being targeted. U.S. federal agencies are required to remediate CVE-2026-5430 and CVE-2026-71362 by September 27, and CVE-2026-65660 and CVE-2026-67279 by September 28. For other organizations, inclusion in the CISA catalog serves as a high-priority alert that updates must be deployed immediately given the confirmed active exploitation, and internet-facing systems should be checked for signs of breach.\n\n____", "creation_timestamp": "2026-09-28T19:54:03.000000Z"} {"uuid": "b30adbc3-d3c6-45f4-9ffd-89e126d7b269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/baseleeak/404", "content": "4 Vulnerabilities Already Under Attack: CISA Adds SharePoint, WSO2, MikroTik, and Adobe Commerce to Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its catalog of flaws known to be exploited in the wild. The security gaps affect Microsoft SharePoint servers, WSO2 API management products, Adobe Commerce and Magento e-commerce stores, and devices running MikroTik RouterOS. For some of these vulnerabilities, attackers require no credentials or user interaction to succeed.\nThe most critical flaw, CVE-2026-5430, affects WSO2 API Manager versions 4.1.0\u20134.6.0, as well as API Control Plane, Traffic Manager, and Universal Gateway versions 4.5.0 and 4.6.0. WSO2 assigned the vulnerability a maximum CVSS score of 10 for certain configurations, warning that a successful attack allows for full account takeover, including administrative access.\nThe flaw stems from the validation process of JSON Web Tokens (JWT), which act as digital passes between applications and services. WSO2 accepted tokens signed with an unsupported algorithm, allowing malicious actors to forge tokens and bypass authentication. The vendor released patches in the spring and recommends installing the relevant updates or upgrading to an unaffected version.\nThe second critical vulnerability, CVE-2026-71362 (CVSS score: 9.1), impacts Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. An authorization bypass flaw allows unauthenticated attackers to gain access to customer accounts. Experts at Sansec, who analyzed the patch, discovered that the system incorrectly handled user identity within a session, enabling an attacker to switch the session to another client and access their profile and personal data.\nAdobe addressed CVE-2026-71362 in its August update (APSB26-92). At the time of the advisory's release, the company stated it had no evidence of active exploitation. However, Sansec claimed its security systems had already blocked attempts to exploit CVE-2026-71362. Its inclusion in the CISA catalog now confirms that active exploitation has moved beyond lab proof-of-concepts.\nMicrosoft SharePoint is being targeted via CVE-2026-65660 (CVSS score: 8.8). The flaw allows a low-privileged user to inject and execute code on the server over the network. Microsoft patched the vulnerability in August for SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. Unlike the flaws in WSO2 and Adobe Commerce, exploiting CVE-2026-65660 requires a valid user account.\nThe fourth vulnerability, CVE-2026-67279, is located in the SSH server of MikroTik RouterOS. Under a specific sequence of actions, RouterOS began processing commands before the user authentication process was fully completed. As a result, an unauthenticated remote client could create, modify, and restore files within the accessible RouterOS directory, including configuration files and diagnostic data. Researchers described the issue after analyzing the September updates.\nMikroTik resolved the related flaws in RouterOS versions 6.49.21, 7.23.4, 7.24.2, and 7.25 beta 3. The company advises against leaving SSH exposed to untrusted networks. Following the update, administrators should inspect devices for unknown users, scripts, or other configuration changes. RouterOS may also label a device as \"Flagged\" if it detects known indicators of compromise.\nCISA has not disclosed who is exploiting these four vulnerabilities or which organizations are being targeted. U.S. federal agencies are required to remediate CVE-2026-5430 and CVE-2026-71362 by September 27, and CVE-2026-65660 and CVE-2026-67279 by September 28. For other organizations, inclusion in the CISA catalog serves as a high-priority alert that updates must be deployed immediately given the confirmed active exploitation, and internet-facing systems should be checked for signs of breach.\n\n____", "creation_timestamp": "2026-09-28T19:54:03.000000Z"} https://vulnerability.circl.lu/sighting/b30adbc3-d3c6-45f4-9ffd-89e126d7b269/export Mon, 28 Sep 2026 19:54:03 +0000 https://vulnerability.circl.lu/sighting/ad266fc1-f32f-41a1-a78e-acbb4e4cf30b/export {"uuid": "ad266fc1-f32f-41a1-a78e-acbb4e4cf30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/baseleeak/404", "content": "4 Vulnerabilities Already Under Attack: CISA Adds SharePoint, WSO2, MikroTik, and Adobe Commerce to Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its catalog of flaws known to be exploited in the wild. The security gaps affect Microsoft SharePoint servers, WSO2 API management products, Adobe Commerce and Magento e-commerce stores, and devices running MikroTik RouterOS. For some of these vulnerabilities, attackers require no credentials or user interaction to succeed.\nThe most critical flaw, CVE-2026-5430, affects WSO2 API Manager versions 4.1.0\u20134.6.0, as well as API Control Plane, Traffic Manager, and Universal Gateway versions 4.5.0 and 4.6.0. WSO2 assigned the vulnerability a maximum CVSS score of 10 for certain configurations, warning that a successful attack allows for full account takeover, including administrative access.\nThe flaw stems from the validation process of JSON Web Tokens (JWT), which act as digital passes between applications and services. WSO2 accepted tokens signed with an unsupported algorithm, allowing malicious actors to forge tokens and bypass authentication. The vendor released patches in the spring and recommends installing the relevant updates or upgrading to an unaffected version.\nThe second critical vulnerability, CVE-2026-71362 (CVSS score: 9.1), impacts Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. An authorization bypass flaw allows unauthenticated attackers to gain access to customer accounts. Experts at Sansec, who analyzed the patch, discovered that the system incorrectly handled user identity within a session, enabling an attacker to switch the session to another client and access their profile and personal data.\nAdobe addressed CVE-2026-71362 in its August update (APSB26-92). At the time of the advisory's release, the company stated it had no evidence of active exploitation. However, Sansec claimed its security systems had already blocked attempts to exploit CVE-2026-71362. Its inclusion in the CISA catalog now confirms that active exploitation has moved beyond lab proof-of-concepts.\nMicrosoft SharePoint is being targeted via CVE-2026-65660 (CVSS score: 8.8). The flaw allows a low-privileged user to inject and execute code on the server over the network. Microsoft patched the vulnerability in August for SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. Unlike the flaws in WSO2 and Adobe Commerce, exploiting CVE-2026-65660 requires a valid user account.\nThe fourth vulnerability, CVE-2026-67279, is located in the SSH server of MikroTik RouterOS. Under a specific sequence of actions, RouterOS began processing commands before the user authentication process was fully completed. As a result, an unauthenticated remote client could create, modify, and restore files within the accessible RouterOS directory, including configuration files and diagnostic data. Researchers described the issue after analyzing the September updates.\nMikroTik resolved the related flaws in RouterOS versions 6.49.21, 7.23.4, 7.24.2, and 7.25 beta 3. The company advises against leaving SSH exposed to untrusted networks. Following the update, administrators should inspect devices for unknown users, scripts, or other configuration changes. RouterOS may also label a device as \"Flagged\" if it detects known indicators of compromise.\nCISA has not disclosed who is exploiting these four vulnerabilities or which organizations are being targeted. U.S. federal agencies are required to remediate CVE-2026-5430 and CVE-2026-71362 by September 27, and CVE-2026-65660 and CVE-2026-67279 by September 28. For other organizations, inclusion in the CISA catalog serves as a high-priority alert that updates must be deployed immediately given the confirmed active exploitation, and internet-facing systems should be checked for signs of breach.\n\n____", "creation_timestamp": "2026-09-28T19:54:03.000000Z"} {"uuid": "ad266fc1-f32f-41a1-a78e-acbb4e4cf30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/baseleeak/404", "content": "4 Vulnerabilities Already Under Attack: CISA Adds SharePoint, WSO2, MikroTik, and Adobe Commerce to Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its catalog of flaws known to be exploited in the wild. The security gaps affect Microsoft SharePoint servers, WSO2 API management products, Adobe Commerce and Magento e-commerce stores, and devices running MikroTik RouterOS. For some of these vulnerabilities, attackers require no credentials or user interaction to succeed.\nThe most critical flaw, CVE-2026-5430, affects WSO2 API Manager versions 4.1.0\u20134.6.0, as well as API Control Plane, Traffic Manager, and Universal Gateway versions 4.5.0 and 4.6.0. WSO2 assigned the vulnerability a maximum CVSS score of 10 for certain configurations, warning that a successful attack allows for full account takeover, including administrative access.\nThe flaw stems from the validation process of JSON Web Tokens (JWT), which act as digital passes between applications and services. WSO2 accepted tokens signed with an unsupported algorithm, allowing malicious actors to forge tokens and bypass authentication. The vendor released patches in the spring and recommends installing the relevant updates or upgrading to an unaffected version.\nThe second critical vulnerability, CVE-2026-71362 (CVSS score: 9.1), impacts Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. An authorization bypass flaw allows unauthenticated attackers to gain access to customer accounts. Experts at Sansec, who analyzed the patch, discovered that the system incorrectly handled user identity within a session, enabling an attacker to switch the session to another client and access their profile and personal data.\nAdobe addressed CVE-2026-71362 in its August update (APSB26-92). At the time of the advisory's release, the company stated it had no evidence of active exploitation. However, Sansec claimed its security systems had already blocked attempts to exploit CVE-2026-71362. Its inclusion in the CISA catalog now confirms that active exploitation has moved beyond lab proof-of-concepts.\nMicrosoft SharePoint is being targeted via CVE-2026-65660 (CVSS score: 8.8). The flaw allows a low-privileged user to inject and execute code on the server over the network. Microsoft patched the vulnerability in August for SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition. Unlike the flaws in WSO2 and Adobe Commerce, exploiting CVE-2026-65660 requires a valid user account.\nThe fourth vulnerability, CVE-2026-67279, is located in the SSH server of MikroTik RouterOS. Under a specific sequence of actions, RouterOS began processing commands before the user authentication process was fully completed. As a result, an unauthenticated remote client could create, modify, and restore files within the accessible RouterOS directory, including configuration files and diagnostic data. Researchers described the issue after analyzing the September updates.\nMikroTik resolved the related flaws in RouterOS versions 6.49.21, 7.23.4, 7.24.2, and 7.25 beta 3. The company advises against leaving SSH exposed to untrusted networks. Following the update, administrators should inspect devices for unknown users, scripts, or other configuration changes. RouterOS may also label a device as \"Flagged\" if it detects known indicators of compromise.\nCISA has not disclosed who is exploiting these four vulnerabilities or which organizations are being targeted. U.S. federal agencies are required to remediate CVE-2026-5430 and CVE-2026-71362 by September 27, and CVE-2026-65660 and CVE-2026-67279 by September 28. For other organizations, inclusion in the CISA catalog serves as a high-priority alert that updates must be deployed immediately given the confirmed active exploitation, and internet-facing systems should be checked for signs of breach.\n\n____", "creation_timestamp": "2026-09-28T19:54:03.000000Z"} https://vulnerability.circl.lu/sighting/ad266fc1-f32f-41a1-a78e-acbb4e4cf30b/export Mon, 28 Sep 2026 19:54:03 +0000 https://vulnerability.circl.lu/sighting/5f9c7f39-8e31-49b6-af53-f8d553e33947/export {"uuid": "5f9c7f39-8e31-49b6-af53-f8d553e33947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mweomxpex6at", "content": "CISA has added Adobe $ADBE Commerce flaw CVE-2026-71362 to its known-exploited catalog. Adobe rates it critical and lists fixes for affected versions. Store operators should check their installed version and apply the matching update.", "creation_timestamp": "2026-09-25T21:14:20.755084Z"} {"uuid": "5f9c7f39-8e31-49b6-af53-f8d553e33947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mweomxpex6at", "content": "CISA has added Adobe $ADBE Commerce flaw CVE-2026-71362 to its known-exploited catalog. Adobe rates it critical and lists fixes for affected versions. Store operators should check their installed version and apply the matching update.", "creation_timestamp": "2026-09-25T21:14:20.755084Z"} https://vulnerability.circl.lu/sighting/5f9c7f39-8e31-49b6-af53-f8d553e33947/export Fri, 25 Sep 2026 21:14:20 +0000 https://vulnerability.circl.lu/sighting/f4da692b-c1cd-4093-aeca-69d06c67dc1a/export {"uuid": "f4da692b-c1cd-4093-aeca-69d06c67dc1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mweeyxsbuf2v", "content": "\ud83e\udd16 CISA added two critical bugs to its KEV catalog: CVE-2026-5430, a WSO2 auth bypass, and CVE-2026-71362, an Adobe Commerce flaw \u2014 both actively exploited in the wild.\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks/", "creation_timestamp": "2026-09-25T18:18:23.675770Z"} {"uuid": "f4da692b-c1cd-4093-aeca-69d06c67dc1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mweeyxsbuf2v", "content": "\ud83e\udd16 CISA added two critical bugs to its KEV catalog: CVE-2026-5430, a WSO2 auth bypass, and CVE-2026-71362, an Adobe Commerce flaw \u2014 both actively exploited in the wild.\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks/", "creation_timestamp": "2026-09-25T18:18:23.675770Z"} https://vulnerability.circl.lu/sighting/f4da692b-c1cd-4093-aeca-69d06c67dc1a/export Fri, 25 Sep 2026 18:18:23 +0000 https://vulnerability.circl.lu/sighting/e3d4f68d-f998-4f15-824b-4f594f909459/export {"uuid": "e3d4f68d-f998-4f15-824b-4f594f909459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117332796561127193", "content": "CISA has updated the catalogue.\n- CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=&field_date_added_wrapper=all&sort_by=field_date_added&items_per_page=20\n- CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-67279\nYesterday:\n- CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-71362\n- CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-5430 #CISA #infosec #vulnerability #Microsoft #Adobe", "creation_timestamp": "2026-09-25T17:13:13.831078Z"} {"uuid": "e3d4f68d-f998-4f15-824b-4f594f909459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117332796561127193", "content": "CISA has updated the catalogue.\n- CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=&field_date_added_wrapper=all&sort_by=field_date_added&items_per_page=20\n- CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-67279\nYesterday:\n- CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-71362\n- CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-5430 #CISA #infosec #vulnerability #Microsoft #Adobe", "creation_timestamp": "2026-09-25T17:13:13.831078Z"} https://vulnerability.circl.lu/sighting/e3d4f68d-f998-4f15-824b-4f594f909459/export Fri, 25 Sep 2026 17:13:13 +0000 https://vulnerability.circl.lu/sighting/88adc67f-2aad-4443-bfc0-cd648a44cde3/export {"uuid": "88adc67f-2aad-4443-bfc0-cd648a44cde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71362", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwe5c3vhap2a", "content": "CISA KEV: CVE-2026-5430 (WSO2, CVSS 10.0) and CVE-2026-71362 (Adobe Commerce, CVSS 9.1) added 9/24. Federal\u2026 https://0daynews.com/articles/2026-09-25-wso2-adobe-commerce-cisa-kev-cve-2026-5430-cve-2026-71362/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3534", "creation_timestamp": "2026-09-25T16:00:21.336515Z"} {"uuid": "88adc67f-2aad-4443-bfc0-cd648a44cde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71362", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwe5c3vhap2a", "content": "CISA KEV: CVE-2026-5430 (WSO2, CVSS 10.0) and CVE-2026-71362 (Adobe Commerce, CVSS 9.1) added 9/24. Federal\u2026 https://0daynews.com/articles/2026-09-25-wso2-adobe-commerce-cisa-kev-cve-2026-5430-cve-2026-71362/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3534", "creation_timestamp": "2026-09-25T16:00:21.336515Z"} https://vulnerability.circl.lu/sighting/88adc67f-2aad-4443-bfc0-cd648a44cde3/export Fri, 25 Sep 2026 16:00:21 +0000 https://vulnerability.circl.lu/sighting/54ff7c83-18a9-4a84-934d-2bbece78e523/export {"uuid": "54ff7c83-18a9-4a84-934d-2bbece78e523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/bdufstecru/3481", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c\u0438 Magento Open Source, Adobe Commerce \u0438 Adobe Commerce B2B \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11928\nCVE-2026-71362\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://helpx.adobe.com/security/products/lightroom/apsb26-92.html", "creation_timestamp": "2026-09-25T13:57:01.000000Z"} {"uuid": "54ff7c83-18a9-4a84-934d-2bbece78e523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/bdufstecru/3481", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c\u0438 Magento Open Source, Adobe Commerce \u0438 Adobe Commerce B2B \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11928\nCVE-2026-71362\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://helpx.adobe.com/security/products/lightroom/apsb26-92.html", "creation_timestamp": "2026-09-25T13:57:01.000000Z"} https://vulnerability.circl.lu/sighting/54ff7c83-18a9-4a84-934d-2bbece78e523/export Fri, 25 Sep 2026 13:57:01 +0000 https://vulnerability.circl.lu/sighting/3c3fd73f-8653-4fb5-b397-3507e2810f26/export {"uuid": "3c3fd73f-8653-4fb5-b397-3507e2810f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3301", "content": "\ud83d\udd34 WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\n\nThe vulnerabilities are listed below -\n\nCVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway that could allow unrestricted file upload and lead to remote code execution.\n\nCVE-2026-71362 (CVSS score: 9.1) - An incorrect authorization vulnerability in Adobe Commerce and Magento that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.", "creation_timestamp": "2026-09-25T11:30:44.000000Z"} {"uuid": "3c3fd73f-8653-4fb5-b397-3507e2810f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3301", "content": "\ud83d\udd34 WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\n\nThe vulnerabilities are listed below -\n\nCVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway that could allow unrestricted file upload and lead to remote code execution.\n\nCVE-2026-71362 (CVSS score: 9.1) - An incorrect authorization vulnerability in Adobe Commerce and Magento that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.", "creation_timestamp": "2026-09-25T11:30:44.000000Z"} https://vulnerability.circl.lu/sighting/3c3fd73f-8653-4fb5-b397-3507e2810f26/export Fri, 25 Sep 2026 11:30:44 +0000 https://vulnerability.circl.lu/sighting/e866de98-2281-4549-b064-acfd3c1c104a/export {"uuid": "e866de98-2281-4549-b064-acfd3c1c104a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mwd5gyjoec2v", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-71362: \u26a0\ufe0f CVE-2026-71362: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 2.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-71362-adobe-commerce-is-affected-by-an", "creation_timestamp": "2026-09-25T06:30:24.269832Z"} {"uuid": "e866de98-2281-4549-b064-acfd3c1c104a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mwd5gyjoec2v", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-71362: \u26a0\ufe0f CVE-2026-71362: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 2.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-71362-adobe-commerce-is-affected-by-an", "creation_timestamp": "2026-09-25T06:30:24.269832Z"} https://vulnerability.circl.lu/sighting/e866de98-2281-4549-b064-acfd3c1c104a/export Fri, 25 Sep 2026 06:30:24 +0000 https://vulnerability.circl.lu/sighting/4682e16f-62a6-4478-87ea-2b1f9c00c61b/export {"uuid": "4682e16f-62a6-4478-87ea-2b1f9c00c61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mwcyrsdmlq2e", "content": "CISA added CVE-2026-5430, a JWT auth bypass in WSO2 API Manager exploited since Sept 13 per watchTowr, and CVE-2026-71362, an Adobe Commerce/Magento auth flaw exploited since August per Sansec, to its KEV catalog today.", "creation_timestamp": "2026-09-25T05:06:58.783306Z"} {"uuid": "4682e16f-62a6-4478-87ea-2b1f9c00c61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mwcyrsdmlq2e", "content": "CISA added CVE-2026-5430, a JWT auth bypass in WSO2 API Manager exploited since Sept 13 per watchTowr, and CVE-2026-71362, an Adobe Commerce/Magento auth flaw exploited since August per Sansec, to its KEV catalog today.", "creation_timestamp": "2026-09-25T05:06:58.783306Z"} https://vulnerability.circl.lu/sighting/4682e16f-62a6-4478-87ea-2b1f9c00c61b/export Fri, 25 Sep 2026 05:06:58 +0000