<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 13 Sep 2026 15:44:20 +0000</lastBuildDate>
    <item>
      <title>441d55c0-b13a-442c-8e7c-1fe5a7ff03d0</title>
      <link>https://vulnerability.circl.lu/sighting/441d55c0-b13a-442c-8e7c-1fe5a7ff03d0/export</link>
      <description>{"uuid": "441d55c0-b13a-442c-8e7c-1fe5a7ff03d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7u46jqdt2b", "content": "CVE-2026-79987 - cms\nA user who only has basic control\u2011panel access in Craft CMS can cause the web server to execute operating\u2011system commands. This could let an insider or compromised account perform actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-09-11T05:40:07.484697Z"}</description>
      <content:encoded>{"uuid": "441d55c0-b13a-442c-8e7c-1fe5a7ff03d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7u46jqdt2b", "content": "CVE-2026-79987 - cms\nA user who only has basic control\u2011panel access in Craft CMS can cause the web server to execute operating\u2011system commands. This could let an insider or compromised account perform actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-09-11T05:40:07.484697Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/441d55c0-b13a-442c-8e7c-1fe5a7ff03d0/export</guid>
      <pubDate>Fri, 11 Sep 2026 05:40:07 +0000</pubDate>
    </item>
    <item>
      <title>ecc57ab4-0a44-44b0-a689-d9ad68d487dd</title>
      <link>https://vulnerability.circl.lu/sighting/ecc57ab4-0a44-44b0-a689-d9ad68d487dd/export</link>
      <description>{"uuid": "ecc57ab4-0a44-44b0-a689-d9ad68d487dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv6wvho74f2b", "content": "Craft CMS Control Panel\u306b\u304a\u3044\u3066\u3001`accessCp`\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u975e\u7ba1\u7406\u8005\u30e6\u30fc\u30b6\u30fc\u306f\u3001PHP\u30a6\u30a7\u30d6\u30ef\u30fc\u30ab\u30fc\u3068\u3057\u3066OS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-79987 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-10T20:57:23.284406Z"}</description>
      <content:encoded>{"uuid": "ecc57ab4-0a44-44b0-a689-d9ad68d487dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv6wvho74f2b", "content": "Craft CMS Control Panel\u306b\u304a\u3044\u3066\u3001`accessCp`\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u975e\u7ba1\u7406\u8005\u30e6\u30fc\u30b6\u30fc\u306f\u3001PHP\u30a6\u30a7\u30d6\u30ef\u30fc\u30ab\u30fc\u3068\u3057\u3066OS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-79987 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-10T20:57:23.284406Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ecc57ab4-0a44-44b0-a689-d9ad68d487dd/export</guid>
      <pubDate>Thu, 10 Sep 2026 20:57:23 +0000</pubDate>
    </item>
    <item>
      <title>2787c369-a676-4845-bcb5-7555c1a69baf</title>
      <link>https://vulnerability.circl.lu/sighting/2787c369-a676-4845-bcb5-7555c1a69baf/export</link>
      <description>{"uuid": "2787c369-a676-4845-bcb5-7555c1a69baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7336jpbf7nxhm", "content": "CVE-2026-79987 - Low-privilege RCE through element-search eager loading\nCVE ID : CVE-2026-79987\n \n Published : Sept. 10, 2026, 4:05 p.m. | 23\u00a0minutes ago\n \n Description : A remote, authenticated, non-admin Craft CMS Control Panel user with only the\u00a0accessCp\u00a0permission can exec...", "creation_timestamp": "2026-09-10T17:30:55.433739Z"}</description>
      <content:encoded>{"uuid": "2787c369-a676-4845-bcb5-7555c1a69baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7336jpbf7nxhm", "content": "CVE-2026-79987 - Low-privilege RCE through element-search eager loading\nCVE ID : CVE-2026-79987\n \n Published : Sept. 10, 2026, 4:05 p.m. | 23\u00a0minutes ago\n \n Description : A remote, authenticated, non-admin Craft CMS Control Panel user with only the\u00a0accessCp\u00a0permission can exec...", "creation_timestamp": "2026-09-10T17:30:55.433739Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2787c369-a676-4845-bcb5-7555c1a69baf/export</guid>
      <pubDate>Thu, 10 Sep 2026 17:30:55 +0000</pubDate>
    </item>
  </channel>
</rss>
