https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:28:18 +0000 https://vulnerability.circl.lu/sighting/009242dc-561d-43f8-8650-3f832c79f745/export {"uuid": "009242dc-561d-43f8-8650-3f832c79f745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwj3p3j6gp2i", "content": "AcyMailing 11.1.0's two quiet security fixes now have CVEs: CVE-2026-94132, a mailbox file write rated 9.5 Critical, and CVE-2026-94131, a file deletion. The changelog still says Bug fixes.\n\nmysites.guru/blog/acymail...", "creation_timestamp": "2026-09-27T15:15:07.947382Z"} {"uuid": "009242dc-561d-43f8-8650-3f832c79f745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwj3p3j6gp2i", "content": "AcyMailing 11.1.0's two quiet security fixes now have CVEs: CVE-2026-94132, a mailbox file write rated 9.5 Critical, and CVE-2026-94131, a file deletion. The changelog still says Bug fixes.\n\nmysites.guru/blog/acymail...", "creation_timestamp": "2026-09-27T15:15:07.947382Z"} https://vulnerability.circl.lu/sighting/009242dc-561d-43f8-8650-3f832c79f745/export Sun, 27 Sep 2026 15:15:07 +0000 https://vulnerability.circl.lu/sighting/66086e3e-bea4-4971-b442-6fa9becc8f7b/export {"uuid": "66086e3e-bea4-4971-b442-6fa9becc8f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2l7qq32v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-94132: Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - \u2026\nCVSS 9.5\nhttps://beta.vulnsea.com/cve/CVE-2026-94132\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:35.012700Z"} {"uuid": "66086e3e-bea4-4971-b442-6fa9becc8f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2l7qq32v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-94132: Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - \u2026\nCVSS 9.5\nhttps://beta.vulnsea.com/cve/CVE-2026-94132\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:35.012700Z"} https://vulnerability.circl.lu/sighting/66086e3e-bea4-4971-b442-6fa9becc8f7b/export Sun, 27 Sep 2026 12:22:35 +0000 https://vulnerability.circl.lu/sighting/150c3ea5-1d68-411b-b340-7ab5f8c68635/export {"uuid": "150c3ea5-1d68-411b-b340-7ab5f8c68635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} {"uuid": "150c3ea5-1d68-411b-b340-7ab5f8c68635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} https://vulnerability.circl.lu/sighting/150c3ea5-1d68-411b-b340-7ab5f8c68635/export Sun, 27 Sep 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/21f81b99-8219-418f-9bf9-4362a122d86b/export {"uuid": "21f81b99-8219-418f-9bf9-4362a122d86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} {"uuid": "21f81b99-8219-418f-9bf9-4362a122d86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} https://vulnerability.circl.lu/sighting/21f81b99-8219-418f-9bf9-4362a122d86b/export Sun, 27 Sep 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/edc92413-d393-4cb6-b608-112c986938a1/export {"uuid": "edc92413-d393-4cb6-b608-112c986938a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwifbvxbq52r", "content": "AcyMailing 11.1.0's two quiet security fixes now have CVEs: CVE-2026-94132, a mailbox file write rated 9.5 Critical, and CVE-2026-94131, a file deletion. The changelog still says Bug fixes.\n\nmysites.guru/blog/acymail...", "creation_timestamp": "2026-09-27T08:34:03.608510Z"} {"uuid": "edc92413-d393-4cb6-b608-112c986938a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwifbvxbq52r", "content": "AcyMailing 11.1.0's two quiet security fixes now have CVEs: CVE-2026-94132, a mailbox file write rated 9.5 Critical, and CVE-2026-94131, a file deletion. The changelog still says Bug fixes.\n\nmysites.guru/blog/acymail...", "creation_timestamp": "2026-09-27T08:34:03.608510Z"} https://vulnerability.circl.lu/sighting/edc92413-d393-4cb6-b608-112c986938a1/export Sun, 27 Sep 2026 08:34:03 +0000 https://vulnerability.circl.lu/sighting/ad4a0782-d2cd-46de-a3b1-165431c63543/export {"uuid": "ad4a0782-d2cd-46de-a3b1-165431c63543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"} {"uuid": "ad4a0782-d2cd-46de-a3b1-165431c63543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"} https://vulnerability.circl.lu/sighting/ad4a0782-d2cd-46de-a3b1-165431c63543/export Sat, 26 Sep 2026 23:00:16 +0000 https://vulnerability.circl.lu/sighting/1abac6b2-ea60-47e8-b7b3-f8bded83e0ac/export {"uuid": "1abac6b2-ea60-47e8-b7b3-f8bded83e0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"} {"uuid": "1abac6b2-ea60-47e8-b7b3-f8bded83e0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"} https://vulnerability.circl.lu/sighting/1abac6b2-ea60-47e8-b7b3-f8bded83e0ac/export Sat, 26 Sep 2026 23:00:16 +0000 https://vulnerability.circl.lu/sighting/dd88185f-8d86-49c9-94c2-91fff035c1a2/export {"uuid": "dd88185f-8d86-49c9-94c2-91fff035c1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94132\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:41:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitored inbox (CVE-2026-94132, CVSS 9.5). Python check/exploit PoC \u2014 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:07:06.000000Z"} {"uuid": "dd88185f-8d86-49c9-94c2-91fff035c1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94132\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:41:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitored inbox (CVE-2026-94132, CVSS 9.5). Python check/exploit PoC \u2014 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:07:06.000000Z"} https://vulnerability.circl.lu/sighting/dd88185f-8d86-49c9-94c2-91fff035c1a2/export Sat, 26 Sep 2026 21:07:06 +0000 https://vulnerability.circl.lu/sighting/874c5d82-2182-4c8e-a630-fe2eeb26d13f/export {"uuid": "874c5d82-2182-4c8e-a630-fe2eeb26d13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://t.me/GithubRedTeam/103474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94132\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:41:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitored inbox (CVE-2026-94132, CVSS 9.5). Python check/exploit PoC \u2014 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:07:06.000000Z"} {"uuid": "874c5d82-2182-4c8e-a630-fe2eeb26d13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://t.me/GithubRedTeam/103474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94132\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:41:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitored inbox (CVE-2026-94132, CVSS 9.5). Python check/exploit PoC \u2014 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:07:06.000000Z"} https://vulnerability.circl.lu/sighting/874c5d82-2182-4c8e-a630-fe2eeb26d13f/export Sat, 26 Sep 2026 21:07:06 +0000 https://vulnerability.circl.lu/sighting/4d0ffedc-1a84-427d-ae19-2ecdac1ff4f0/export {"uuid": "4d0ffedc-1a84-427d-ae19-2ecdac1ff4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hmy5ekysbwems", "content": "CVE-2026-94132 - Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension\nCVE ID : CVE-2026-94132\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - acy...", "creation_timestamp": "2026-09-26T16:57:06.482306Z"} {"uuid": "4d0ffedc-1a84-427d-ae19-2ecdac1ff4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hmy5ekysbwems", "content": "CVE-2026-94132 - Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension\nCVE ID : CVE-2026-94132\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - acy...", "creation_timestamp": "2026-09-26T16:57:06.482306Z"} https://vulnerability.circl.lu/sighting/4d0ffedc-1a84-427d-ae19-2ecdac1ff4f0/export Sat, 26 Sep 2026 16:57:06 +0000