https://vulnerability.circl.lu/sightings/feed 2026-10-04T12:29:31.737700+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f6e8fd4c-44a7-4b27-b283-a048359bfb63/export 2026-10-04T12:29:31.762421+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f6e8fd4c-44a7-4b27-b283-a048359bfb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105123", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwzontqtmc22", "content": "wcms 3.18.0\u4ee5\u4e0b\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30a8\u30c7\u30a3\u30bf\u30fc\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\uff08php\u30d5\u30a1\u30a4\u30eb\u542b\u3080\uff09\u3092\u66f8\u304d\u63db\u3048\u308b\u3001\u307e\u305f\u306f\u524a\u9664\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-105123 CVSS 8.8 | HIGH", "creation_timestamp": "2026-10-04T05:37:03.141871Z"} 2026-10-04T05:37:03.141871+00:00 https://vulnerability.circl.lu/sighting/5f5298df-ba90-4998-a23c-da9faf8228c4/export 2026-10-04T12:29:31.764457+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5f5298df-ba90-4998-a23c-da9faf8228c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105123", "type": "seen", "source": "https://gist.github.com/ichintu/1d0f62e7f5bbc80cb4372e1a7110c679", "content": "On October 4, 2026, three high-severity vulnerabilities were disclosed:\n\u2022 **CVE-2026-88779 (8.7):** Memory overflow in older NetScaler ADC/Gateway versions, causing Denial of Service.\n\u2022 **CVE-2026-105126 (8.6):** Privilege escalation in LaraDashboard (<1.4.8) allowing admins to gain Superadmin rights, risking account takeover and code execution.\n\u2022 **CVE-2026-105123 (8.8):** Remote Code Execution and arbitrary file manipulation in W CMS (\u22643.18.0) via an unvalidated media upload API.\n\nImmediate patching or version updates are strongly recommended to mitigate these critical risks.", "creation_timestamp": "2026-10-04T04:00:28.000000Z"} 2026-10-04T04:00:28+00:00 https://vulnerability.circl.lu/sighting/7fa9bfc6-d614-4df1-b727-efe88194073b/export 2026-10-04T12:29:31.764663+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7fa9bfc6-d614-4df1-b727-efe88194073b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105123", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwzauvzaqs2p", "content": "vincent-peugnet wcms \u22643.18.0 has a HIGH-severity vuln: CVE-2026-105123 allows editor-level RCE via arbitrary file upload. Restrict privileges & monitor endpoints. https://radar.offseq.com/threat/cve-2026-105123-unrestricted-upload-of-file-with-dangerous-type-in-vincent-peugnet-wcms-9cc4f5671e51d0...", "creation_timestamp": "2026-10-04T01:30:27.475823Z"} 2026-10-04T01:30:27.475823+00:00 https://vulnerability.circl.lu/sighting/ff0fb017-fdd2-481c-a8f6-40b40a7abb43/export 2026-10-04T12:29:31.764814+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ff0fb017-fdd2-481c-a8f6-40b40a7abb43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105123", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117380050105304564", "content": "vincent-peugnet wcms \u22643.18.0 is vulnerable (CVE-2026-105123, HIGH, CVSS 8.7): Authenticated editors can upload malicious files via /api/v0/media/upload/ and delete arbitrary files. Restrict privileges, monitor uploads. https://radar.offseq.com/threat/cve-2026-105123-unrestricted-upload-of-file-with-dangerous-type-in-vincent-peugnet-wcms-9cc4f5671e51d0dd #OffSeq #RCE #WebSecurity #Vuln", "creation_timestamp": "2026-10-04T01:30:25.437272Z"} 2026-10-04T01:30:25.437272+00:00 https://vulnerability.circl.lu/sighting/d75f78a0-5c48-464d-a27b-15f56af694c2/export 2026-10-04T12:29:31.764961+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d75f78a0-5c48-464d-a27b-15f56af694c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105123", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwz5kqs3yn2b", "content": "\ud83d\udfe0 CVE-2026-105123 - High (8.8)\n\nW (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105123/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T00:31:07.367854Z"} 2026-10-04T00:31:07.367854+00:00