https://vulnerability.circl.lu/sightings/feed 2026-08-05T09:45:32.121330+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8213293e-308a-49bc-8e6f-6e62106541c8/export 2026-08-05T09:45:32.138523+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8213293e-308a-49bc-8e6f-6e62106541c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66748", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95604", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66748-Camaleon-CMS---Authenticated-RCE-via-select_eval-Custom-Field\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 23:10:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Camaleon CMS - Authenticated RCE via `select_eval` Custom Field\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:03:19.733817Z"} 2026-07-30T00:03:19.733817+00:00 https://vulnerability.circl.lu/sighting/4eef325c-26bd-49df-8c64-663e812b6e33/export 2026-08-05T09:45:32.140257+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4eef325c-26bd-49df-8c64-663e812b6e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66748", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrrwmbzm7x2z", "content": "CVE-2026-66748\nCamaleon CMS versions 2.1.1 to 2.9.1 have a security flaw that allows authorized users to run unauthorized code on the server. This could lead to sensitive data being accessed or modified. To stay secure,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T12:32:03.986696Z"} 2026-07-29T12:32:03.986696+00:00 https://vulnerability.circl.lu/sighting/4bf785cf-2d20-460c-be81-b722dbbb8ae5/export 2026-08-05T09:45:32.140409+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4bf785cf-2d20-460c-be81-b722dbbb8ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66748", "type": "seen", "source": "https://t.me/GithubRedTeam/95604", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66748-Camaleon-CMS---Authenticated-RCE-via-select_eval-Custom-Field\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 23:10:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Camaleon CMS - Authenticated RCE via `select_eval` Custom Field\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T01:00:03.988638Z"} 2026-07-29T01:00:03.988638+00:00 https://vulnerability.circl.lu/sighting/5a995cf7-2471-4e84-9d8a-f70b921021ee/export 2026-08-05T09:45:32.140543+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5a995cf7-2471-4e84-9d8a-f70b921021ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66748", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6bv23f2w", "content": "\ud83d\udfe0 CVE-2026-66748 - High (8.8)\n\nCamaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnera...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66748/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T17:01:00.967225Z"} 2026-07-28T17:01:00.967225+00:00