https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 13 Jul 2026 21:35:37 +0000 https://vulnerability.circl.lu/sighting/d0982b0f-adab-44ee-9f95-ba448252280e/export {"uuid": "d0982b0f-adab-44ee-9f95-ba448252280e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:05.248782Z"} {"uuid": "d0982b0f-adab-44ee-9f95-ba448252280e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:05.248782Z"} https://vulnerability.circl.lu/sighting/d0982b0f-adab-44ee-9f95-ba448252280e/export Mon, 13 Jul 2026 10:15:05 +0000 https://vulnerability.circl.lu/sighting/66695597-dad1-4997-ba8f-90352abb4e74/export {"uuid": "66695597-dad1-4997-ba8f-90352abb4e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "content": "", "creation_timestamp": "2026-07-12T10:15:04.342925Z"} {"uuid": "66695597-dad1-4997-ba8f-90352abb4e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "content": "", "creation_timestamp": "2026-07-12T10:15:04.342925Z"} https://vulnerability.circl.lu/sighting/66695597-dad1-4997-ba8f-90352abb4e74/export Sun, 12 Jul 2026 10:15:04 +0000 https://vulnerability.circl.lu/sighting/f0b917c4-d66c-46f1-a5ca-01ac72a2a2d2/export {"uuid": "f0b917c4-d66c-46f1-a5ca-01ac72a2a2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2750", "content": "\ud83d\udea8 cPanelSniper \u2014 CVE-2026-41940\n\nCRITICAL auth bypass in cPanel & WHM (CVSS 10.0)\n\nZero credentials \u2192 Full root WHM access via CRLF injection + session file poisoning.\n\n~70 million domains affected.\n\n### Exploit Chain (4 stages):\n1. Pre-auth session minting \n2. CRLF injection via Authorization header \n3. do_token_denied gadget (raw \u2192 cache flush) \n4. /json-api/version \u2192 PWNED\n\nWhat you get:\n- \u2705 Interactive WHM root shell \n- \u2705 Account enumeration \n- \u2705 Command execution \n- \u2705 Backdoor admin creation \n- \u2705 Ready for bulk scanning (stdlib only, no extra deps)\n\nhttps://github.com/ynsmroztas/cPanelSniper", "creation_timestamp": "2026-07-12T00:00:53.395921Z"} {"uuid": "f0b917c4-d66c-46f1-a5ca-01ac72a2a2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2750", "content": "\ud83d\udea8 cPanelSniper \u2014 CVE-2026-41940\n\nCRITICAL auth bypass in cPanel & WHM (CVSS 10.0)\n\nZero credentials \u2192 Full root WHM access via CRLF injection + session file poisoning.\n\n~70 million domains affected.\n\n### Exploit Chain (4 stages):\n1. Pre-auth session minting \n2. CRLF injection via Authorization header \n3. do_token_denied gadget (raw \u2192 cache flush) \n4. /json-api/version \u2192 PWNED\n\nWhat you get:\n- \u2705 Interactive WHM root shell \n- \u2705 Account enumeration \n- \u2705 Command execution \n- \u2705 Backdoor admin creation \n- \u2705 Ready for bulk scanning (stdlib only, no extra deps)\n\nhttps://github.com/ynsmroztas/cPanelSniper", "creation_timestamp": "2026-07-12T00:00:53.395921Z"} https://vulnerability.circl.lu/sighting/f0b917c4-d66c-46f1-a5ca-01ac72a2a2d2/export Sun, 12 Jul 2026 00:00:53 +0000 https://vulnerability.circl.lu/sighting/99b69ecd-076e-493b-b407-ede1a24dac49/export {"uuid": "99b69ecd-076e-493b-b407-ede1a24dac49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2689", "content": "\ud83d\udd25CVE-2026-41940 cPanel/WHM Authentication Bypass - Detection Artifact Generator\n\n\ud83d\udea8https://github.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py", "creation_timestamp": "2026-07-12T00:00:52.765912Z"} {"uuid": "99b69ecd-076e-493b-b407-ede1a24dac49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2689", "content": "\ud83d\udd25CVE-2026-41940 cPanel/WHM Authentication Bypass - Detection Artifact Generator\n\n\ud83d\udea8https://github.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py", "creation_timestamp": "2026-07-12T00:00:52.765912Z"} https://vulnerability.circl.lu/sighting/99b69ecd-076e-493b-b407-ede1a24dac49/export Sun, 12 Jul 2026 00:00:52 +0000 https://vulnerability.circl.lu/sighting/94c02b0a-a4f6-42fd-8d01-1534e98d6ece/export {"uuid": "94c02b0a-a4f6-42fd-8d01-1534e98d6ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2691", "content": "\ud83d\udea8 cPanelSniper \u2014 CVE-2026-41940\n\ncPanel & WHM'de CVSS 10.0 kritik auth bypass.\n\nCRLF injection \u2192 session file poisoning \u2192 root WHM access.\n\nhttps://github.com/ynsmroztas/cPanelSniper", "creation_timestamp": "2026-07-12T00:00:52.728811Z"} {"uuid": "94c02b0a-a4f6-42fd-8d01-1534e98d6ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2691", "content": "\ud83d\udea8 cPanelSniper \u2014 CVE-2026-41940\n\ncPanel & WHM'de CVSS 10.0 kritik auth bypass.\n\nCRLF injection \u2192 session file poisoning \u2192 root WHM access.\n\nhttps://github.com/ynsmroztas/cPanelSniper", "creation_timestamp": "2026-07-12T00:00:52.728811Z"} https://vulnerability.circl.lu/sighting/94c02b0a-a4f6-42fd-8d01-1534e98d6ece/export Sun, 12 Jul 2026 00:00:52 +0000 https://vulnerability.circl.lu/sighting/906a57fa-9cca-4ff4-b8f4-1362726fd91e/export {"uuid": "906a57fa-9cca-4ff4-b8f4-1362726fd91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2691", "content": "\ud83d\udea8 cPanelSniper \u2014 CVE-2026-41940\n\ncPanel & WHM'de CVSS 10.0 kritik auth bypass.\n\nCRLF injection \u2192 session file poisoning \u2192 root WHM access.\n\nhttps://github.com/ynsmroztas/cPanelSniper", "creation_timestamp": "2026-07-11T11:00:05.901881Z"} {"uuid": "906a57fa-9cca-4ff4-b8f4-1362726fd91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2691", "content": "\ud83d\udea8 cPanelSniper \u2014 CVE-2026-41940\n\ncPanel & WHM'de CVSS 10.0 kritik auth bypass.\n\nCRLF injection \u2192 session file poisoning \u2192 root WHM access.\n\nhttps://github.com/ynsmroztas/cPanelSniper", "creation_timestamp": "2026-07-11T11:00:05.901881Z"} https://vulnerability.circl.lu/sighting/906a57fa-9cca-4ff4-b8f4-1362726fd91e/export Sat, 11 Jul 2026 11:00:05 +0000 https://vulnerability.circl.lu/sighting/61900a2d-1e3b-474c-a633-2c93fe3a7089/export {"uuid": "61900a2d-1e3b-474c-a633-2c93fe3a7089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:15:05.043706Z"} {"uuid": "61900a2d-1e3b-474c-a633-2c93fe3a7089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:15:05.043706Z"} https://vulnerability.circl.lu/sighting/61900a2d-1e3b-474c-a633-2c93fe3a7089/export Sat, 11 Jul 2026 10:15:05 +0000 https://vulnerability.circl.lu/sighting/073b8449-dc18-4ddb-ba60-f1bbd9773f91/export {"uuid": "073b8449-dc18-4ddb-ba60-f1bbd9773f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2689", "content": "\ud83d\udd25CVE-2026-41940 cPanel/WHM Authentication Bypass - Detection Artifact Generator\n\n\ud83d\udea8https://github.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py", "creation_timestamp": "2026-07-11T10:00:06.162907Z"} {"uuid": "073b8449-dc18-4ddb-ba60-f1bbd9773f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2689", "content": "\ud83d\udd25CVE-2026-41940 cPanel/WHM Authentication Bypass - Detection Artifact Generator\n\n\ud83d\udea8https://github.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py", "creation_timestamp": "2026-07-11T10:00:06.162907Z"} https://vulnerability.circl.lu/sighting/073b8449-dc18-4ddb-ba60-f1bbd9773f91/export Sat, 11 Jul 2026 10:00:06 +0000 https://vulnerability.circl.lu/sighting/22180f9d-39af-4b92-9c0a-8d3f963a4ee6/export {"uuid": "22180f9d-39af-4b92-9c0a-8d3f963a4ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:00:04.570231Z"} {"uuid": "22180f9d-39af-4b92-9c0a-8d3f963a4ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:00:04.570231Z"} https://vulnerability.circl.lu/sighting/22180f9d-39af-4b92-9c0a-8d3f963a4ee6/export Sat, 11 Jul 2026 10:00:04 +0000 https://vulnerability.circl.lu/sighting/3e9d80cb-73b9-4b1b-a29a-103f3f3af6b6/export {"uuid": "3e9d80cb-73b9-4b1b-a29a-103f3f3af6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2750", "content": "\ud83d\udea8 cPanelSniper \u2014 CVE-2026-41940\n\nCRITICAL auth bypass in cPanel & WHM (CVSS 10.0)\n\nZero credentials \u2192 Full root WHM access via CRLF injection + session file poisoning.\n\n~70 million domains affected.\n\n### Exploit Chain (4 stages):\n1. Pre-auth session minting \n2. CRLF injection via Authorization header \n3. do_token_denied gadget (raw \u2192 cache flush) \n4. /json-api/version \u2192 PWNED\n\nWhat you get:\n- \u2705 Interactive WHM root shell \n- \u2705 Account enumeration \n- \u2705 Command execution \n- \u2705 Backdoor admin creation \n- \u2705 Ready for bulk scanning (stdlib only, no extra deps)\n\nhttps://github.com/ynsmroztas/cPanelSniper", "creation_timestamp": "2026-07-11T09:00:04.701588Z"} {"uuid": "3e9d80cb-73b9-4b1b-a29a-103f3f3af6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2750", "content": "\ud83d\udea8 cPanelSniper \u2014 CVE-2026-41940\n\nCRITICAL auth bypass in cPanel & WHM (CVSS 10.0)\n\nZero credentials \u2192 Full root WHM access via CRLF injection + session file poisoning.\n\n~70 million domains affected.\n\n### Exploit Chain (4 stages):\n1. Pre-auth session minting \n2. CRLF injection via Authorization header \n3. do_token_denied gadget (raw \u2192 cache flush) \n4. /json-api/version \u2192 PWNED\n\nWhat you get:\n- \u2705 Interactive WHM root shell \n- \u2705 Account enumeration \n- \u2705 Command execution \n- \u2705 Backdoor admin creation \n- \u2705 Ready for bulk scanning (stdlib only, no extra deps)\n\nhttps://github.com/ynsmroztas/cPanelSniper", "creation_timestamp": "2026-07-11T09:00:04.701588Z"} https://vulnerability.circl.lu/sighting/3e9d80cb-73b9-4b1b-a29a-103f3f3af6b6/export Sat, 11 Jul 2026 09:00:04 +0000