https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 24 Sep 2026 14:51:27 +0000 https://vulnerability.circl.lu/sighting/28bda4e0-4dcb-44ec-83e0-eb4148fee26e/export {"uuid": "28bda4e0-4dcb-44ec-83e0-eb4148fee26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwbimvgxjs2v", "content": "WordPress core CVE-2026-87902: path traversal \u2192 unauthenticated RCE, CVSS 8.1. active exploitation confirmed\u2026 https://0daynews.com/articles/2026-09-24-wordpress-core-cve-2026-87902-path-traversal-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3471", "creation_timestamp": "2026-09-24T14:45:14.656263Z"} {"uuid": "28bda4e0-4dcb-44ec-83e0-eb4148fee26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwbimvgxjs2v", "content": "WordPress core CVE-2026-87902: path traversal \u2192 unauthenticated RCE, CVSS 8.1. active exploitation confirmed\u2026 https://0daynews.com/articles/2026-09-24-wordpress-core-cve-2026-87902-path-traversal-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3471", "creation_timestamp": "2026-09-24T14:45:14.656263Z"} https://vulnerability.circl.lu/sighting/28bda4e0-4dcb-44ec-83e0-eb4148fee26e/export Thu, 24 Sep 2026 14:45:14 +0000 https://vulnerability.circl.lu/sighting/477687e9-0a38-4014-91b0-c24b2270422a/export {"uuid": "477687e9-0a38-4014-91b0-c24b2270422a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/it-administrator.de/post/3mwbhpohsbc2u", "content": "Die kritische WordPress-L\u00fccke CVE-2026-87902 zeigt, wie schnell aus einem Sicherheitsupdate ein Wettlauf gegen die Zeit wird. Was hinter der Schwachstelle steckt, wie die Angriffe in drei Stufen ablaufen und warum das Update jetzt dringend ist.\n\nwww.it-administrator.de/wordpress-sc...", "creation_timestamp": "2026-09-24T14:28:57.840016Z"} {"uuid": "477687e9-0a38-4014-91b0-c24b2270422a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/it-administrator.de/post/3mwbhpohsbc2u", "content": "Die kritische WordPress-L\u00fccke CVE-2026-87902 zeigt, wie schnell aus einem Sicherheitsupdate ein Wettlauf gegen die Zeit wird. Was hinter der Schwachstelle steckt, wie die Angriffe in drei Stufen ablaufen und warum das Update jetzt dringend ist.\n\nwww.it-administrator.de/wordpress-sc...", "creation_timestamp": "2026-09-24T14:28:57.840016Z"} https://vulnerability.circl.lu/sighting/477687e9-0a38-4014-91b0-c24b2270422a/export Thu, 24 Sep 2026 14:28:57 +0000 https://vulnerability.circl.lu/sighting/570c3f34-1b40-4933-9977-bc0f76f182e4/export {"uuid": "570c3f34-1b40-4933-9977-bc0f76f182e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mwbhgv4okc23", "content": "Yesterday: patch and probes.\nToday: attackers writing PHP via pearcmd on unpatched WordPress (CVE-2026-87902).\n\nUpdate past 7.1.1 to 7.1.2 (or your branch backport), then check logs and /tmp|/var/tmp for names like wp-pear-rce-flag.php, poc87902.php, luci_.php, zeta_.php.", "creation_timestamp": "2026-09-24T14:23:58.875900Z"} {"uuid": "570c3f34-1b40-4933-9977-bc0f76f182e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mwbhgv4okc23", "content": "Yesterday: patch and probes.\nToday: attackers writing PHP via pearcmd on unpatched WordPress (CVE-2026-87902).\n\nUpdate past 7.1.1 to 7.1.2 (or your branch backport), then check logs and /tmp|/var/tmp for names like wp-pear-rce-flag.php, poc87902.php, luci_.php, zeta_.php.", "creation_timestamp": "2026-09-24T14:23:58.875900Z"} https://vulnerability.circl.lu/sighting/570c3f34-1b40-4933-9977-bc0f76f182e4/export Thu, 24 Sep 2026 14:23:58 +0000 https://vulnerability.circl.lu/sighting/d8cc49f9-8aad-4c15-aa11-220a6ff90e30/export {"uuid": "d8cc49f9-8aad-4c15-aa11-220a6ff90e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mwbfdtdj5h2j", "content": "Attackers are exploiting WordPress CVE-2026-87902 to include pearcmd.php and write PHP files when specific theme and server conditions are met.", "creation_timestamp": "2026-09-24T13:46:29.168723Z"} {"uuid": "d8cc49f9-8aad-4c15-aa11-220a6ff90e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mwbfdtdj5h2j", "content": "Attackers are exploiting WordPress CVE-2026-87902 to include pearcmd.php and write PHP files when specific theme and server conditions are met.", "creation_timestamp": "2026-09-24T13:46:29.168723Z"} https://vulnerability.circl.lu/sighting/d8cc49f9-8aad-4c15-aa11-220a6ff90e30/export Thu, 24 Sep 2026 13:46:29 +0000 https://vulnerability.circl.lu/sighting/c0ffb515-fe88-49da-83ef-14669cd4d3ab/export {"uuid": "c0ffb515-fe88-49da-83ef-14669cd4d3ab", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d94335f8-a75d-4714-b625-7e5c5418779a", "content": "", "creation_timestamp": "2026-09-24T13:00:44.237763Z"} {"uuid": "c0ffb515-fe88-49da-83ef-14669cd4d3ab", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d94335f8-a75d-4714-b625-7e5c5418779a", "content": "", "creation_timestamp": "2026-09-24T13:00:44.237763Z"} https://vulnerability.circl.lu/sighting/c0ffb515-fe88-49da-83ef-14669cd4d3ab/export Thu, 24 Sep 2026 13:00:44 +0000 https://vulnerability.circl.lu/sighting/fe2cc0d6-2b32-4063-bfdf-40e126a9b930/export {"uuid": "fe2cc0d6-2b32-4063-bfdf-40e126a9b930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mwbbfw4ljs23", "content": "Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\nthehackernews.com/2026/09/atta...", "creation_timestamp": "2026-09-24T12:36:06.086569Z"} {"uuid": "fe2cc0d6-2b32-4063-bfdf-40e126a9b930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mwbbfw4ljs23", "content": "Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\nthehackernews.com/2026/09/atta...", "creation_timestamp": "2026-09-24T12:36:06.086569Z"} https://vulnerability.circl.lu/sighting/fe2cc0d6-2b32-4063-bfdf-40e126a9b930/export Thu, 24 Sep 2026 12:36:06 +0000 https://vulnerability.circl.lu/sighting/a0452655-699f-4753-a394-23cf82ea43f4/export {"uuid": "a0452655-699f-4753-a394-23cf82ea43f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3mwb7t3a2bg2v", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nAttackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-09-24T12:07:37.958001Z"} {"uuid": "a0452655-699f-4753-a394-23cf82ea43f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3mwb7t3a2bg2v", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nAttackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-09-24T12:07:37.958001Z"} https://vulnerability.circl.lu/sighting/a0452655-699f-4753-a394-23cf82ea43f4/export Thu, 24 Sep 2026 12:07:37 +0000 https://vulnerability.circl.lu/sighting/8eb973dc-41be-469b-980b-da06b1bbf14f/export {"uuid": "8eb973dc-41be-469b-980b-da06b1bbf14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mwb6deofqh2f", "content": "CVE-2026-87902 is waking up every WordPress admin who hasn't gone to bed yet. It's a path traversal flaw. That means it goes straight to remote code execution via pearcmd.php.\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-24T11:40:57.079057Z"} {"uuid": "8eb973dc-41be-469b-980b-da06b1bbf14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mwb6deofqh2f", "content": "CVE-2026-87902 is waking up every WordPress admin who hasn't gone to bed yet. It's a path traversal flaw. That means it goes straight to remote code execution via pearcmd.php.\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-24T11:40:57.079057Z"} https://vulnerability.circl.lu/sighting/8eb973dc-41be-469b-980b-da06b1bbf14f/export Thu, 24 Sep 2026 11:40:57 +0000 https://vulnerability.circl.lu/sighting/91f1b6ea-cc42-46c2-9dd1-f216c86ca3df/export {"uuid": "91f1b6ea-cc42-46c2-9dd1-f216c86ca3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/targetsocialmedia.bsky.social/post/3mwb65ogluf2g", "content": "WordPress CVE-2026-87902: Probing and PHP File-Write Attempts Observed on Patch Day", "creation_timestamp": "2026-09-24T11:37:45.920698Z"} {"uuid": "91f1b6ea-cc42-46c2-9dd1-f216c86ca3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/targetsocialmedia.bsky.social/post/3mwb65ogluf2g", "content": "WordPress CVE-2026-87902: Probing and PHP File-Write Attempts Observed on Patch Day", "creation_timestamp": "2026-09-24T11:37:45.920698Z"} https://vulnerability.circl.lu/sighting/91f1b6ea-cc42-46c2-9dd1-f216c86ca3df/export Thu, 24 Sep 2026 11:37:45 +0000 https://vulnerability.circl.lu/sighting/530cad2e-e042-45e4-abe6-43dc891486dc/export {"uuid": "530cad2e-e042-45e4-abe6-43dc891486dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mwb5yk4rqh2x", "content": "Threat actors are actively exploiting a critical WordPress vulnerability, CVE-2026-87902, just hours after its public disclosure. The unauthenticated remote code [\u2026]", "creation_timestamp": "2026-09-24T11:34:54.594935Z"} {"uuid": "530cad2e-e042-45e4-abe6-43dc891486dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mwb5yk4rqh2x", "content": "Threat actors are actively exploiting a critical WordPress vulnerability, CVE-2026-87902, just hours after its public disclosure. The unauthenticated remote code [\u2026]", "creation_timestamp": "2026-09-24T11:34:54.594935Z"} https://vulnerability.circl.lu/sighting/530cad2e-e042-45e4-abe6-43dc891486dc/export Thu, 24 Sep 2026 11:34:54 +0000