https://vulnerability.circl.lu/sightings/feed 2026-09-14T18:10:21.911986+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/727d5e6e-dad6-4bd6-89dc-dbf597010b22/export 2026-09-14T18:10:21.940381+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "727d5e6e-dad6-4bd6-89dc-dbf597010b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71294", "type": "seen", "source": "Telegram/Xd9MCt58vfyPbg-F6qOCyvwIVlM-njRL6_Zm9d3ZY13haCU", "content": "", "creation_timestamp": "2026-09-14T03:00:07.881211Z"} 2026-09-14T03:00:07.881211+00:00 https://vulnerability.circl.lu/sighting/8dfce56a-aca4-47c4-b4da-15766006c42e/export 2026-09-14T18:10:21.943808+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8dfce56a-aca4-47c4-b4da-15766006c42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71294", "type": "seen", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "content": "", "creation_timestamp": "2026-09-14T03:00:07.311452Z"} 2026-09-14T03:00:07.311452+00:00 https://vulnerability.circl.lu/sighting/dce7ab52-f157-4e1a-b539-c8bd24e04fc2/export 2026-09-14T18:10:21.944142+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dce7ab52-f157-4e1a-b539-c8bd24e04fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71294", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102176", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cotonti-commentswidget-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HarshRajSinghania\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-13 05:31:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSafe local proof of concept for the Cotonti CommentsWidget PHP object injection vulnerability (CAN-2026-2035973 / CVE-2026-71294).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T00:00:30.163036Z"} 2026-09-14T00:00:30.163036+00:00 https://vulnerability.circl.lu/sighting/e8d26783-d809-4037-b7a0-daa7e584a830/export 2026-09-14T18:10:21.944388+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e8d26783-d809-4037-b7a0-daa7e584a830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71294", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102176", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cotonti-commentswidget-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HarshRajSinghania\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-13 05:31:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSafe local proof of concept for the Cotonti CommentsWidget PHP object injection vulnerability (CAN-2026-2035973 / CVE-2026-71294).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-13T07:00:05.238277Z"} 2026-09-13T07:00:05.238277+00:00 https://vulnerability.circl.lu/sighting/cbc245a3-8e40-485b-9252-89b073f92818/export 2026-09-14T18:10:21.944510+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cbc245a3-8e40-485b-9252-89b073f92818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71290", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtflxf32vw2f", "content": "CVE-2026-71290\uff1aApache HttpClient\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304c\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u508d\u53d7\u304a\u3088\u3073\u6539\u3056\u3093\u3067\u304d\u308b\uff08CVSS 9.1\uff09 \n\nCVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1) #DailyCyberSecurity (Aug 18)\n\nsecurityonline.info/apache-httpc...", "creation_timestamp": "2026-08-19T01:39:51.603277Z"} 2026-08-19T01:39:51.603277+00:00 https://vulnerability.circl.lu/sighting/56a6cc9f-4460-4802-90f7-c10e55eb1a8e/export 2026-09-14T18:10:21.944630+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "56a6cc9f-4460-4802-90f7-c10e55eb1a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71290", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtebn73vsd26", "content": "CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)", "creation_timestamp": "2026-08-18T13:02:32.711849Z"} 2026-08-18T13:02:32.711849+00:00 https://vulnerability.circl.lu/sighting/508306ee-b8b3-414a-8fd0-0e513538bd42/export 2026-09-14T18:10:21.944736+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "508306ee-b8b3-414a-8fd0-0e513538bd42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxyo5sadu2p", "content": "CVE-2026-71290 - httpcomponents-client\nApache HttpComponents Client versions 5.4 and newer have a security issue that allows an attacker to pretend to be a trusted server. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#httpcomponentsclient #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-13T15:50:04.206495Z"} 2026-08-13T15:50:04.206495+00:00 https://vulnerability.circl.lu/sighting/d54ad314-fae4-4d2c-b3c4-87aec6369f88/export 2026-09-14T18:10:21.944836+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d54ad314-fae4-4d2c-b3c4-87aec6369f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvwq7ghwx2p", "content": "CVE-2026-71290 - apache httpcomponents client\nUsing Apache HttpComponents Client 5.4 or newer with an async HttpClient can allow an attacker to pretend to be a trusted server. This can happen if the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-12T20:10:05.759890Z"} 2026-08-12T20:10:05.759890+00:00 https://vulnerability.circl.lu/sighting/43cbadc0-0070-41e0-ad0b-e5ab91dc6bc5/export 2026-09-14T18:10:21.944934+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "43cbadc0-0070-41e0-ad0b-e5ab91dc6bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71294", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msdot46tz22p", "content": "\ud83d\udfe0 CVE-2026-71294 - High (7.6)\n\nCotonti CMS's Comments plugin deserializes user-supplied data without restricting the classes tha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71294/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-05T14:00:38.839156Z"} 2026-08-05T14:00:38.839156+00:00