<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 06 Oct 2026 09:33:45 +0000</lastBuildDate>
    <item>
      <title>3da9bc1d-74ab-4d61-80ae-5f998c24231c</title>
      <link>https://vulnerability.circl.lu/sighting/3da9bc1d-74ab-4d61-80ae-5f998c24231c/export</link>
      <description>{"uuid": "3da9bc1d-74ab-4d61-80ae-5f998c24231c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}</description>
      <content:encoded>{"uuid": "3da9bc1d-74ab-4d61-80ae-5f998c24231c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3da9bc1d-74ab-4d61-80ae-5f998c24231c/export</guid>
      <pubDate>Wed, 30 Sep 2026 15:00:07 +0000</pubDate>
    </item>
    <item>
      <title>b07a81fa-ece9-4e2a-b43c-8cf90e9f0fd2</title>
      <link>https://vulnerability.circl.lu/sighting/b07a81fa-ece9-4e2a-b43c-8cf90e9f0fd2/export</link>
      <description>{"uuid": "b07a81fa-ece9-4e2a-b43c-8cf90e9f0fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}</description>
      <content:encoded>{"uuid": "b07a81fa-ece9-4e2a-b43c-8cf90e9f0fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b07a81fa-ece9-4e2a-b43c-8cf90e9f0fd2/export</guid>
      <pubDate>Wed, 30 Sep 2026 15:00:07 +0000</pubDate>
    </item>
    <item>
      <title>f9d3e710-2fcb-41df-935d-628632be45f2</title>
      <link>https://vulnerability.circl.lu/sighting/f9d3e710-2fcb-41df-935d-628632be45f2/export</link>
      <description>{"uuid": "f9d3e710-2fcb-41df-935d-628632be45f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/exVAhrP1-AAubpKYl6FaYOVvUMj-EWVwuiZhrcEaPgn_YiI", "content": "", "creation_timestamp": "2026-09-30T11:00:16.000000Z"}</description>
      <content:encoded>{"uuid": "f9d3e710-2fcb-41df-935d-628632be45f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/exVAhrP1-AAubpKYl6FaYOVvUMj-EWVwuiZhrcEaPgn_YiI", "content": "", "creation_timestamp": "2026-09-30T11:00:16.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f9d3e710-2fcb-41df-935d-628632be45f2/export</guid>
      <pubDate>Wed, 30 Sep 2026 11:00:16 +0000</pubDate>
    </item>
    <item>
      <title>4cfaf1ea-fb82-4d1c-b8b3-72fedff829ee</title>
      <link>https://vulnerability.circl.lu/sighting/4cfaf1ea-fb82-4d1c-b8b3-72fedff829ee/export</link>
      <description>{"uuid": "4cfaf1ea-fb82-4d1c-b8b3-72fedff829ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/exVAhrP1-AAubpKYl6FaYOVvUMj-EWVwuiZhrcEaPgn_YiI", "content": "", "creation_timestamp": "2026-09-30T11:00:16.000000Z"}</description>
      <content:encoded>{"uuid": "4cfaf1ea-fb82-4d1c-b8b3-72fedff829ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/exVAhrP1-AAubpKYl6FaYOVvUMj-EWVwuiZhrcEaPgn_YiI", "content": "", "creation_timestamp": "2026-09-30T11:00:16.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4cfaf1ea-fb82-4d1c-b8b3-72fedff829ee/export</guid>
      <pubDate>Wed, 30 Sep 2026 11:00:16 +0000</pubDate>
    </item>
    <item>
      <title>39f50a0a-6a43-4ab8-853c-4e85abdf878c</title>
      <link>https://vulnerability.circl.lu/sighting/39f50a0a-6a43-4ab8-853c-4e85abdf878c/export</link>
      <description>{"uuid": "39f50a0a-6a43-4ab8-853c-4e85abdf878c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103828", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18143\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghannyxploit404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 04:40:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nsingle PoC for CVE-2026-18143 Unauth AFU (Arbitrary File Upload)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T05:00:07.000000Z"}</description>
      <content:encoded>{"uuid": "39f50a0a-6a43-4ab8-853c-4e85abdf878c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103828", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18143\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghannyxploit404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 04:40:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nsingle PoC for CVE-2026-18143 Unauth AFU (Arbitrary File Upload)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T05:00:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/39f50a0a-6a43-4ab8-853c-4e85abdf878c/export</guid>
      <pubDate>Wed, 30 Sep 2026 05:00:07 +0000</pubDate>
    </item>
    <item>
      <title>5b8ea8ae-98d4-4136-964c-bbf1841d7239</title>
      <link>https://vulnerability.circl.lu/sighting/5b8ea8ae-98d4-4136-964c-bbf1841d7239/export</link>
      <description>{"uuid": "5b8ea8ae-98d4-4136-964c-bbf1841d7239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/xYupCOiSFluxoRtEIIOqRNM-7ebwlq042DjZCiLHA-8Nahg", "content": "", "creation_timestamp": "2026-09-29T09:00:05.000000Z"}</description>
      <content:encoded>{"uuid": "5b8ea8ae-98d4-4136-964c-bbf1841d7239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/xYupCOiSFluxoRtEIIOqRNM-7ebwlq042DjZCiLHA-8Nahg", "content": "", "creation_timestamp": "2026-09-29T09:00:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5b8ea8ae-98d4-4136-964c-bbf1841d7239/export</guid>
      <pubDate>Tue, 29 Sep 2026 09:00:05 +0000</pubDate>
    </item>
    <item>
      <title>cc238eb4-d9e7-4aa9-b9e6-e2b63469d22e</title>
      <link>https://vulnerability.circl.lu/sighting/cc238eb4-d9e7-4aa9-b9e6-e2b63469d22e/export</link>
      <description>{"uuid": "cc238eb4-d9e7-4aa9-b9e6-e2b63469d22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/xYupCOiSFluxoRtEIIOqRNM-7ebwlq042DjZCiLHA-8Nahg", "content": "", "creation_timestamp": "2026-09-29T09:00:05.000000Z"}</description>
      <content:encoded>{"uuid": "cc238eb4-d9e7-4aa9-b9e6-e2b63469d22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/xYupCOiSFluxoRtEIIOqRNM-7ebwlq042DjZCiLHA-8Nahg", "content": "", "creation_timestamp": "2026-09-29T09:00:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cc238eb4-d9e7-4aa9-b9e6-e2b63469d22e/export</guid>
      <pubDate>Tue, 29 Sep 2026 09:00:05 +0000</pubDate>
    </item>
    <item>
      <title>99ed7fea-86be-4310-857e-7ed9ba10fc09</title>
      <link>https://vulnerability.circl.lu/sighting/99ed7fea-86be-4310-857e-7ed9ba10fc09/export</link>
      <description>{"uuid": "99ed7fea-86be-4310-857e-7ed9ba10fc09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18143", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwinhcvh7f2a", "content": "WooCommerce Request a Quote plugin \u22642.9.2: CVE-2026-18143, CVSS 9.8 arbitrary file upload. Patch to 2.9.3 now\u2026 https://0daynews.com/articles/2026-09-27-woocommerce-request-quote-cve-2026-18143-file-upload/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-3743", "creation_timestamp": "2026-09-27T11:00:14.265863Z"}</description>
      <content:encoded>{"uuid": "99ed7fea-86be-4310-857e-7ed9ba10fc09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18143", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwinhcvh7f2a", "content": "WooCommerce Request a Quote plugin \u22642.9.2: CVE-2026-18143, CVSS 9.8 arbitrary file upload. Patch to 2.9.3 now\u2026 https://0daynews.com/articles/2026-09-27-woocommerce-request-quote-cve-2026-18143-file-upload/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-3743", "creation_timestamp": "2026-09-27T11:00:14.265863Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/99ed7fea-86be-4310-857e-7ed9ba10fc09/export</guid>
      <pubDate>Sun, 27 Sep 2026 11:00:14 +0000</pubDate>
    </item>
    <item>
      <title>b2dc586d-c574-427a-adfc-28cd4beaf233</title>
      <link>https://vulnerability.circl.lu/sighting/b2dc586d-c574-427a-adfc-28cd4beaf233/export</link>
      <description>{"uuid": "b2dc586d-c574-427a-adfc-28cd4beaf233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwhjpizzjj2v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-18143: The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including\u2026\nCVSS 9.8 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-18143\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T00:20:33.958037Z"}</description>
      <content:encoded>{"uuid": "b2dc586d-c574-427a-adfc-28cd4beaf233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwhjpizzjj2v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-18143: The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including\u2026\nCVSS 9.8 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-18143\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T00:20:33.958037Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b2dc586d-c574-427a-adfc-28cd4beaf233/export</guid>
      <pubDate>Sun, 27 Sep 2026 00:20:33 +0000</pubDate>
    </item>
    <item>
      <title>9425bdb4-bcf8-4186-8dfa-aff237fd5c8b</title>
      <link>https://vulnerability.circl.lu/sighting/9425bdb4-bcf8-4186-8dfa-aff237fd5c8b/export</link>
      <description>{"uuid": "9425bdb4-bcf8-4186-8dfa-aff237fd5c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh7msd5pa2o", "content": "CVE-2026-18143 - request a quote for woocommerce\nThe Request a Quote for WooCommerce plugin for WordPress (versions up to 2.9.2) lets people who are not logged in upload files through a popup form. Because the upload\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#addify #CVE #infosec", "creation_timestamp": "2026-09-26T21:20:05.354064Z"}</description>
      <content:encoded>{"uuid": "9425bdb4-bcf8-4186-8dfa-aff237fd5c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh7msd5pa2o", "content": "CVE-2026-18143 - request a quote for woocommerce\nThe Request a Quote for WooCommerce plugin for WordPress (versions up to 2.9.2) lets people who are not logged in upload files through a popup form. Because the upload\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#addify #CVE #infosec", "creation_timestamp": "2026-09-26T21:20:05.354064Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9425bdb4-bcf8-4186-8dfa-aff237fd5c8b/export</guid>
      <pubDate>Sat, 26 Sep 2026 21:20:05 +0000</pubDate>
    </item>
  </channel>
</rss>
