<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 19 Sep 2026 21:38:22 +0000</lastBuildDate>
    <item>
      <title>acd3bea0-6263-47b6-bd0e-46494685417c</title>
      <link>https://vulnerability.circl.lu/sighting/acd3bea0-6263-47b6-bd0e-46494685417c/export</link>
      <description>{"uuid": "acd3bea0-6263-47b6-bd0e-46494685417c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/f4JrGHtkqt0dCR-QPLTbBys3Bbe_i0cnrbfRr-g9_w7f14I", "content": "", "creation_timestamp": "2026-09-19T00:00:50.425068Z"}</description>
      <content:encoded>{"uuid": "acd3bea0-6263-47b6-bd0e-46494685417c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/f4JrGHtkqt0dCR-QPLTbBys3Bbe_i0cnrbfRr-g9_w7f14I", "content": "", "creation_timestamp": "2026-09-19T00:00:50.425068Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/acd3bea0-6263-47b6-bd0e-46494685417c/export</guid>
      <pubDate>Sat, 19 Sep 2026 00:00:50 +0000</pubDate>
    </item>
    <item>
      <title>b279ec3a-7bb6-46f2-a508-0e10f46869e7</title>
      <link>https://vulnerability.circl.lu/sighting/b279ec3a-7bb6-46f2-a508-0e10f46869e7/export</link>
      <description>{"uuid": "b279ec3a-7bb6-46f2-a508-0e10f46869e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-19T00:00:26.411028Z"}</description>
      <content:encoded>{"uuid": "b279ec3a-7bb6-46f2-a508-0e10f46869e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-19T00:00:26.411028Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b279ec3a-7bb6-46f2-a508-0e10f46869e7/export</guid>
      <pubDate>Sat, 19 Sep 2026 00:00:26 +0000</pubDate>
    </item>
    <item>
      <title>6857daa3-0782-468e-ba46-79d8f17c5a72</title>
      <link>https://vulnerability.circl.lu/sighting/6857daa3-0782-468e-ba46-79d8f17c5a72/export</link>
      <description>{"uuid": "6857daa3-0782-468e-ba46-79d8f17c5a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102624", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 23:39:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-87796 - Multi Uploader for Gravity Forms &amp;lt;= 1.1.9; Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T00:00:10.320401Z"}</description>
      <content:encoded>{"uuid": "6857daa3-0782-468e-ba46-79d8f17c5a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102624", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 23:39:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-87796 - Multi Uploader for Gravity Forms &amp;lt;= 1.1.9; Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T00:00:10.320401Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6857daa3-0782-468e-ba46-79d8f17c5a72/export</guid>
      <pubDate>Sat, 19 Sep 2026 00:00:10 +0000</pubDate>
    </item>
    <item>
      <title>90c3e0b6-26bb-4782-b802-72f3d73527d3</title>
      <link>https://vulnerability.circl.lu/sighting/90c3e0b6-26bb-4782-b802-72f3d73527d3/export</link>
      <description>{"uuid": "90c3e0b6-26bb-4782-b802-72f3d73527d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-18T12:00:08.112215Z"}</description>
      <content:encoded>{"uuid": "90c3e0b6-26bb-4782-b802-72f3d73527d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-18T12:00:08.112215Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/90c3e0b6-26bb-4782-b802-72f3d73527d3/export</guid>
      <pubDate>Fri, 18 Sep 2026 12:00:08 +0000</pubDate>
    </item>
    <item>
      <title>d8dbad6f-8eb1-4750-b7cc-40e649f19464</title>
      <link>https://vulnerability.circl.lu/sighting/d8dbad6f-8eb1-4750-b7cc-40e649f19464/export</link>
      <description>{"uuid": "d8dbad6f-8eb1-4750-b7cc-40e649f19464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://t.me/GithubRedTeam/102624", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 23:39:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-87796 - Multi Uploader for Gravity Forms &amp;lt;= 1.1.9; Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T04:00:15.817792Z"}</description>
      <content:encoded>{"uuid": "d8dbad6f-8eb1-4750-b7cc-40e649f19464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://t.me/GithubRedTeam/102624", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 23:39:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-87796 - Multi Uploader for Gravity Forms &amp;lt;= 1.1.9; Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T04:00:15.817792Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d8dbad6f-8eb1-4750-b7cc-40e649f19464/export</guid>
      <pubDate>Fri, 18 Sep 2026 04:00:15 +0000</pubDate>
    </item>
    <item>
      <title>f97a993e-e59a-43e5-b66f-9f89fe5df015</title>
      <link>https://vulnerability.circl.lu/sighting/f97a993e-e59a-43e5-b66f-9f89fe5df015/export</link>
      <description>{"uuid": "f97a993e-e59a-43e5-b66f-9f89fe5df015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/f4JrGHtkqt0dCR-QPLTbBys3Bbe_i0cnrbfRr-g9_w7f14I", "content": "", "creation_timestamp": "2026-09-18T04:00:06.124885Z"}</description>
      <content:encoded>{"uuid": "f97a993e-e59a-43e5-b66f-9f89fe5df015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/f4JrGHtkqt0dCR-QPLTbBys3Bbe_i0cnrbfRr-g9_w7f14I", "content": "", "creation_timestamp": "2026-09-18T04:00:06.124885Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f97a993e-e59a-43e5-b66f-9f89fe5df015/export</guid>
      <pubDate>Fri, 18 Sep 2026 04:00:06 +0000</pubDate>
    </item>
    <item>
      <title>5c695eb8-2794-404a-8ace-38d1677d412a</title>
      <link>https://vulnerability.circl.lu/sighting/5c695eb8-2794-404a-8ace-38d1677d412a/export</link>
      <description>{"uuid": "5c695eb8-2794-404a-8ace-38d1677d412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoyfxypnb24", "content": "\ud83d\udea8 CVE-2026-87796 \u2014 CVSS 9.8 CRITICAL\n\nThe Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87796\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T06:07:06.751746Z"}</description>
      <content:encoded>{"uuid": "5c695eb8-2794-404a-8ace-38d1677d412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoyfxypnb24", "content": "\ud83d\udea8 CVE-2026-87796 \u2014 CVSS 9.8 CRITICAL\n\nThe Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87796\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T06:07:06.751746Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5c695eb8-2794-404a-8ace-38d1677d412a/export</guid>
      <pubDate>Thu, 17 Sep 2026 06:07:06 +0000</pubDate>
    </item>
    <item>
      <title>b4575726-dfe3-466b-a960-75e8f3984b73</title>
      <link>https://vulnerability.circl.lu/sighting/b4575726-dfe3-466b-a960-75e8f3984b73/export</link>
      <description>{"uuid": "b4575726-dfe3-466b-a960-75e8f3984b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvoy22zlsx2f", "content": "CRITICAL: CVE-2026-87796 in sh1zen Multi Uploader for Gravity Forms (\u22641.1.9) allows unauthenticated arbitrary file upload \u2014 potential RCE. Disable or restrict uploads until fix confirmed. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1...", "creation_timestamp": "2026-09-17T06:00:27.805915Z"}</description>
      <content:encoded>{"uuid": "b4575726-dfe3-466b-a960-75e8f3984b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvoy22zlsx2f", "content": "CRITICAL: CVE-2026-87796 in sh1zen Multi Uploader for Gravity Forms (\u22641.1.9) allows unauthenticated arbitrary file upload \u2014 potential RCE. Disable or restrict uploads until fix confirmed. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1...", "creation_timestamp": "2026-09-17T06:00:27.805915Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b4575726-dfe3-466b-a960-75e8f3984b73/export</guid>
      <pubDate>Thu, 17 Sep 2026 06:00:27 +0000</pubDate>
    </item>
    <item>
      <title>14c38728-b3f9-4588-a283-7445c1926bec</title>
      <link>https://vulnerability.circl.lu/sighting/14c38728-b3f9-4588-a283-7445c1926bec/export</link>
      <description>{"uuid": "14c38728-b3f9-4588-a283-7445c1926bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117284852533602073", "content": "CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms \u22641.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet \u2014 disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE", "creation_timestamp": "2026-09-17T06:00:25.757516Z"}</description>
      <content:encoded>{"uuid": "14c38728-b3f9-4588-a283-7445c1926bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117284852533602073", "content": "CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms \u22641.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet \u2014 disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE", "creation_timestamp": "2026-09-17T06:00:25.757516Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/14c38728-b3f9-4588-a283-7445c1926bec/export</guid>
      <pubDate>Thu, 17 Sep 2026 06:00:25 +0000</pubDate>
    </item>
    <item>
      <title>742b5d90-4f08-46cd-8133-bbed0efc9fec</title>
      <link>https://vulnerability.circl.lu/sighting/742b5d90-4f08-46cd-8133-bbed0efc9fec/export</link>
      <description>{"uuid": "742b5d90-4f08-46cd-8133-bbed0efc9fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoxhkad7t25", "content": "CVE-2026-87796 - multi uploader for gravity forms\nThe Multi Uploader for Gravity Forms plugin for WordPress lets unauthenticated users place any type of file on your server because it does not properly check file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sh1zen #CVE #infosec", "creation_timestamp": "2026-09-17T05:50:05.917786Z"}</description>
      <content:encoded>{"uuid": "742b5d90-4f08-46cd-8133-bbed0efc9fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoxhkad7t25", "content": "CVE-2026-87796 - multi uploader for gravity forms\nThe Multi Uploader for Gravity Forms plugin for WordPress lets unauthenticated users place any type of file on your server because it does not properly check file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sh1zen #CVE #infosec", "creation_timestamp": "2026-09-17T05:50:05.917786Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/742b5d90-4f08-46cd-8133-bbed0efc9fec/export</guid>
      <pubDate>Thu, 17 Sep 2026 05:50:05 +0000</pubDate>
    </item>
  </channel>
</rss>
