https://vulnerability.circl.lu/sightings/feed 2026-09-17T16:33:07.099316+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/278c8f89-23dd-4d90-85e7-e825bd7837e4/export 2026-09-17T16:33:07.137091+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "278c8f89-23dd-4d90-85e7-e825bd7837e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-23T00:00:43.512467Z"} 2026-08-23T00:00:43.512467+00:00 https://vulnerability.circl.lu/sighting/3098b876-f35f-4ba7-84ae-1a4520eb64ed/export 2026-09-17T16:33:07.144476+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3098b876-f35f-4ba7-84ae-1a4520eb64ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-22T00:00:26.538534Z"} 2026-08-22T00:00:26.538534+00:00 https://vulnerability.circl.lu/sighting/bfab85f0-9e51-4a42-bdc2-4500201d30da/export 2026-09-17T16:33:07.144622+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bfab85f0-9e51-4a42-bdc2-4500201d30da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-21T23:00:09.327764Z"} 2026-08-21T23:00:09.327764+00:00 https://vulnerability.circl.lu/sighting/cde7f042-5b76-4fc8-813b-57a619b54c57/export 2026-09-17T16:33:07.144724+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cde7f042-5b76-4fc8-813b-57a619b54c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57804", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsdgdlfl2n", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05e4\u05d9\u05dc\u05d5\u05e1\u05d5\u05e4\u05d9\u05d4 - CVE-2026-57804 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/03303EBD-B98B-40B9-A5ED-B610285987B9", "creation_timestamp": "2026-07-16T08:17:39.940187Z"} 2026-07-16T08:17:39.940187+00:00 https://vulnerability.circl.lu/sighting/e4ef0c64-2897-4b20-8f2a-f23a6235cb14/export 2026-09-17T16:33:07.144820+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e4ef0c64-2897-4b20-8f2a-f23a6235cb14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57803", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsdc63w32n", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1-PHP: CVE-2026-57803 - \u05de\u05d4 \u05d6\u05d4, \u05db\u05d9\u05e6\u05d3 \u05d6\u05d4 \u05e4\u05d5\u05d2\u05e2 \u05d5\u05de\u05d4 \u05dc\u05e2\u05e9\u05d5\u05ea?\n\n\n\nhttps://khesef.xyz/posts/7AF2D539-3B65-4FDA-A879-599A3A11CFC5", "creation_timestamp": "2026-07-16T08:17:35.630680Z"} 2026-07-16T08:17:35.630680+00:00 https://vulnerability.circl.lu/sighting/d1c20c29-469a-4307-876c-28dc5980fee8/export 2026-09-17T16:33:07.144916+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d1c20c29-469a-4307-876c-28dc5980fee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57800", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqryzkfi72p", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1-PHP: CVE-2026-57800 - \u05d0\u05d9\u05da \u05d4\u05d9\u05d0 \u05de\u05e1\u05db\u05e0\u05ea \u05d0\u05ea \u05d4\u05d0\u05ea\u05e8 \u05e9\u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/EF92061D-AE13-410A-85E4-A937AD5CA642", "creation_timestamp": "2026-07-16T08:11:51.267459Z"} 2026-07-16T08:11:51.267459+00:00 https://vulnerability.circl.lu/sighting/fbccb665-ebfa-479b-b868-583f3ae07f8b/export 2026-09-17T16:33:07.145011+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fbccb665-ebfa-479b-b868-583f3ae07f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57803", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrsanwhf2i", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05e4\u05d9.\u05d0\u05e3.\u05d0\u05d9: CVE-2026-57803 - \u05e1\u05db\u05e0\u05d4 \u05e9\u05dc \u05d1\u05e7\u05e8\u05ea \u05e9\u05de\u05d5\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05dc\u05d0 \u05e0\u05db\u05d5\u05e0\u05d4\n\n\n\nhttps://khesef.xyz/posts/BF7D2DEC-0318-4EA1-87C9-729584496DD1", "creation_timestamp": "2026-07-16T08:08:03.439711Z"} 2026-07-16T08:08:03.439711+00:00 https://vulnerability.circl.lu/sighting/4502f02d-a447-48e2-b10f-559b1c16eff4/export 2026-09-17T16:33:07.145104+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4502f02d-a447-48e2-b10f-559b1c16eff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57802", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrs4lork2p", "content": "\u05d4\u05ea\u05e7\u05e4\u05ea CVE-2026-57802: \u05e1\u05d9\u05db\u05d5\u05df \u05d7\u05de\u05d5\u05e8 \u05e9\u05dc \u05d1\u05e7\u05e8\u05ea \u05e9\u05d2\u05d5\u05d9 \u05e9\u05dc \u05e9\u05de\u05d5\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05d1\u05e4\u05d9\u05dc\u05d5\u05e1\u05d5\u05e4\u05d9\u05d4\n\n\n\nhttps://khesef.xyz/posts/93E663F4-9253-4C6C-ABDA-603068436A82", "creation_timestamp": "2026-07-16T08:07:59.239246Z"} 2026-07-16T08:07:59.239246+00:00 https://vulnerability.circl.lu/sighting/09f20922-00b1-4158-b476-7bafa649e71c/export 2026-09-17T16:33:07.145195+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "09f20922-00b1-4158-b476-7bafa649e71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqnwy4trhl2f", "content": "Daily IT Security Digest \u2014 2026-07-15\nPatch Yet\n\nA critical authentication bypass vulnerability (CVE-2026-57807) was discovered in miniOrange OAuth SSO plugins (versions \u2264 38.5.8), particularly those integrating with Microsoft Copilot and SharePoint for Drupal. The flaw can be exploited via the", "creation_timestamp": "2026-07-15T05:02:50.246964Z"} 2026-07-15T05:02:50.246964+00:00 https://vulnerability.circl.lu/sighting/e498a2d0-d080-468b-ac06-d41a7e8e8a9e/export 2026-09-17T16:33:07.145290+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e498a2d0-d080-468b-ac06-d41a7e8e8a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjyftrh2p", "content": "Daily IT Security Digest \u2014 2026-07-14\nor later as soon as possible to close this attack vector.\nSources: https://infosec.exchange/@offseq/116887783224020082\n\n## 6. CRITICAL \u2014 miniOrange OAuth SSO Auth Bypass (CVE-2026-57807)\nAn authentication bypass flaw in miniOrange OAuth SSO (versions \u226438.5.8)", "creation_timestamp": "2026-07-14T05:03:16.829011Z"} 2026-07-14T05:03:16.829011+00:00