https://vulnerability.circl.lu/sightings/feed 2026-07-08T15:22:46.301822+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/18bec4bf-c2e8-4098-b18d-c60986542ac4/export 2026-07-08T15:22:46.327875+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "18bec4bf-c2e8-4098-b18d-c60986542ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116884244173717703", "content": "CRITICAL vulnerabilities in Adobe ColdFusion (CVE-2026-48282), Langflow (CVE-2026-55255), Joomla SP Page Builder (CVE-2026-48908), & Page Builder CK (CVE-2026-56290) are being actively exploited for remote code execution & backdoors. Patch ASAP! https://radar.offseq.com/threat/cisa-urges-immediate-patching-of-exploited-coldfus-c7b23bd787139571 #OffSeq #CyberSec #CVE", "creation_timestamp": "2026-07-08T12:00:27.550117Z"} 2026-07-08T12:00:27.550117+00:00 https://vulnerability.circl.lu/sighting/3a833dba-4290-4021-8989-4f634cf54a0b/export 2026-07-08T15:22:46.331386+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3a833dba-4290-4021-8989-4f634cf54a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mq4cpumcxcfn", "content": "CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability \nCVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability", "creation_timestamp": "2026-07-08T04:45:04.221867Z"} 2026-07-08T04:45:04.221867+00:00 https://vulnerability.circl.lu/sighting/c15cdb0e-4f16-4d20-88f8-a5d026c38b20/export 2026-07-08T15:22:46.331542+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c15cdb0e-4f16-4d20-88f8-a5d026c38b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq3cvhv6x524", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV \u2705\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary fil\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T19:15:31.497856Z"} 2026-07-07T19:15:31.497856+00:00 https://vulnerability.circl.lu/sighting/65f9e803-1509-42b1-b1b2-e40ebeb39266/export 2026-07-08T15:22:46.331677+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "65f9e803-1509-42b1-b1b2-e40ebeb39266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6935162", "content": "2026-07-07: [CVE-2026-56290] Joomlack Page Builder Improper Access Control VulnerabilityJoomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.\ncisakev", "creation_timestamp": "2026-07-07T18:26:39.409283Z"} 2026-07-07T18:26:39.409283+00:00 https://vulnerability.circl.lu/sighting/4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1/export 2026-07-08T15:22:46.331786+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/506817d1-03c3-41da-b990-e33f2ad9e33d", "content": "", "creation_timestamp": "2026-07-07T18:00:31.872519Z"} 2026-07-07T18:00:31.872519+00:00 https://vulnerability.circl.lu/sighting/1200e718-8255-48c3-ae4a-dc98d8260f68/export 2026-07-08T15:22:46.331891+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1200e718-8255-48c3-ae4a-dc98d8260f68", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ee34d77-b707-46d5-baed-7361fcc5150c", "content": "", "creation_timestamp": "2026-07-07T18:00:24.416565Z"} 2026-07-07T18:00:24.416565+00:00 https://vulnerability.circl.lu/sighting/6f483719-f557-4b71-ac41-ec29d693d195/export 2026-07-08T15:22:46.331992+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6f483719-f557-4b71-ac41-ec29d693d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq36drvbnv2c", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV: No\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary f\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T17:54:07.284820Z"} 2026-07-07T17:54:07.284820+00:00 https://vulnerability.circl.lu/sighting/32c8511b-42bf-41d5-b506-f541d713e1a0/export 2026-07-08T15:22:46.332101+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "32c8511b-42bf-41d5-b506-f541d713e1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879890133195498", "content": "CISA has updated the KEV catalogue.\n- CVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-56290\n- CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-55255\n- CVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48908\nSeveral industrial vulnerabilities: https://www.cisa.gov/ #infosec #vulnerability #CISA", "creation_timestamp": "2026-07-07T17:33:09.803361Z"} 2026-07-07T17:33:09.803361+00:00 https://vulnerability.circl.lu/sighting/942727e8-1bcc-4b4b-b6d0-54c084b7bec3/export 2026-07-08T15:22:46.332210+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "942727e8-1bcc-4b4b-b6d0-54c084b7bec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq354jypwd2k", "content": "CVE-2026-56290 - page_builder_ck [known exploited]\nThe Joomla Page Builder CK extension is vulnerable to a serious security risk. An attacker can upload malicious files without logging in, which can lead to a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#joomlack #CVE #infosec", "creation_timestamp": "2026-07-07T17:32:05.670583Z"} 2026-07-07T17:32:05.670583+00:00 https://vulnerability.circl.lu/sighting/ffd27df6-5b7b-45f5-b9e9-8af0d23ed644/export 2026-07-08T15:22:46.332315+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ffd27df6-5b7b-45f5-b9e9-8af0d23ed644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mq34zqoytw2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-56290", "creation_timestamp": "2026-07-07T17:30:32.363770Z"} 2026-07-07T17:30:32.363770+00:00