https://vulnerability.circl.lu/sightings/feed 2026-10-09T06:44:24.367247+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e7552608-5ef9-4285-a957-aab5cf3a7ce8/export 2026-10-09T06:44:24.393956+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e7552608-5ef9-4285-a957-aab5cf3a7ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcwgjgtyj24", "content": "CVE-2026-42417 - armember premium\nThe ARMember Premium add\u2011on for WordPress can be accessed by anyone on the internet without logging in, allowing them to send specially crafted requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#armemberpremium #reputeinfosystems #CVE #infosec", "creation_timestamp": "2026-10-07T21:50:04.309591Z"} 2026-10-07T21:50:04.309591+00:00 https://vulnerability.circl.lu/sighting/ffa7e3c9-4aae-4802-b6ed-ce4bc335b170/export 2026-10-09T06:44:24.396643+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ffa7e3c9-4aae-4802-b6ed-ce4bc335b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tvfzxs2l", "content": "\ud83d\udea8 CVE-2026-42417 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in ARMember Premium <= 7.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42417\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:10:03.575295Z"} 2026-10-06T10:10:03.575295+00:00 https://vulnerability.circl.lu/sighting/3491f6ca-a2ed-4d44-93a1-794feff6e0bf/export 2026-10-09T06:44:24.396742+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3491f6ca-a2ed-4d44-93a1-794feff6e0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx72xgtcgb2j", "content": "CRITICAL SQL Injection in ARMember Premium <= 7.8 (CVE-2026-42417) allows unauthenticated exploitation. No fix yet \u2014 audit your sites and restrict access. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21e...", "creation_timestamp": "2026-10-06T09:00:28.304797Z"} 2026-10-06T09:00:28.304797+00:00 https://vulnerability.circl.lu/sighting/9a3d9795-3e40-4be7-b3e1-b115fd3a865a/export 2026-10-09T06:44:24.396818+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9a3d9795-3e40-4be7-b3e1-b115fd3a865a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393144240761553", "content": "CVE-2026-42417 (CRITICAL): ARMember Premium <= 7.8 is vulnerable to unauthenticated SQL Injection (CWE-89). No mitigation yet \u2014 review deployments & monitor databases closely. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21ef978d1d38 #OffSeq #Vulnerability #SQLInjection #WordPress", "creation_timestamp": "2026-10-06T09:00:26.167471Z"} 2026-10-06T09:00:26.167471+00:00