<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T17:31:07.012256+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0d68815b-f07d-412f-b6e0-5dfe683b5d95/export</id>
    <title>0d68815b-f07d-412f-b6e0-5dfe683b5d95</title>
    <updated>2026-09-14T17:31:07.038087+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0d68815b-f07d-412f-b6e0-5dfe683b5d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74014", "type": "seen", "source": "https://t.me/DBXTERSLEARNING/1224", "content": "https://www.cve.org/CVERecord?id=CVE-2026-74014", "creation_timestamp": "2026-09-01T00:00:09.556890Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0d68815b-f07d-412f-b6e0-5dfe683b5d95/export"/>
    <published>2026-09-01T00:00:09.556890+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/781bdc6a-d3ac-4a16-8eb9-d6ef6a0243db/export</id>
    <title>781bdc6a-d3ac-4a16-8eb9-d6ef6a0243db</title>
    <updated>2026-09-14T17:31:07.040488+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "781bdc6a-d3ac-4a16-8eb9-d6ef6a0243db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74014", "type": "seen", "source": "https://t.me/DBXTERSLEARNING/1224", "content": "https://www.cve.org/CVERecord?id=CVE-2026-74014", "creation_timestamp": "2026-08-31T14:00:05.624376Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/781bdc6a-d3ac-4a16-8eb9-d6ef6a0243db/export"/>
    <published>2026-08-31T14:00:05.624376+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/799c94e1-97e4-46ca-ac30-eefae7c09618/export</id>
    <title>799c94e1-97e4-46ca-ac30-eefae7c09618</title>
    <updated>2026-09-14T17:31:07.040950+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "799c94e1-97e4-46ca-ac30-eefae7c09618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74018", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjgvo56pl2u", "content": "CVE-2026-74018 - warehouse cargo\nThe Warehouse Cargo theme for WordPress, up through version 2.6.9, can be tricked into accepting any file an attacker provides. This could let a malicious file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#warehousecargo #themagnifico52 #CVE #infosec", "creation_timestamp": "2026-08-20T14:20:04.187235Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/799c94e1-97e4-46ca-ac30-eefae7c09618/export"/>
    <published>2026-08-20T14:20:04.187235+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/937a55bc-e5ee-4bfa-80df-c2eae52e1d88/export</id>
    <title>937a55bc-e5ee-4bfa-80df-c2eae52e1d88</title>
    <updated>2026-09-14T17:31:07.041080+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "937a55bc-e5ee-4bfa-80df-c2eae52e1d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74016", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjgdtljt22j", "content": "CVE-2026-74016 - smart cleaning\nThe WordPress theme called Smart Cleaning, up through version 4.8.6, allows a user with basic permissions to upload any type of file to the site. An attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#smartcleaning #themagnifico52 #CVE #infosec", "creation_timestamp": "2026-08-20T14:10:06.455417Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/937a55bc-e5ee-4bfa-80df-c2eae52e1d88/export"/>
    <published>2026-08-20T14:10:06.455417+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/06b0cd36-6254-4ee6-ac0a-4156e0296b73/export</id>
    <title>06b0cd36-6254-4ee6-ac0a-4156e0296b73</title>
    <updated>2026-09-14T17:31:07.041216+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "06b0cd36-6254-4ee6-ac0a-4156e0296b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74014", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjgds3hhj2b", "content": "CVE-2026-74014 - it residence\nThe IT Residence theme for WordPress, up through version 3.2.1, lets anyone with a basic user account place any file onto the website. This could let a malicious person\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#itresidence #indithemes #CVE #infosec", "creation_timestamp": "2026-08-20T14:10:05.418755Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/06b0cd36-6254-4ee6-ac0a-4156e0296b73/export"/>
    <published>2026-08-20T14:10:05.418755+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fa52d839-e7ef-4266-9b25-13146b52d8d0/export</id>
    <title>fa52d839-e7ef-4266-9b25-13146b52d8d0</title>
    <updated>2026-09-14T17:31:07.041328+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fa52d839-e7ef-4266-9b25-13146b52d8d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74018", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjgdd73qh2t", "content": "\ud83d\udea8 CVE-2026-74018 \u2014 CVSS 9.9 CRITICAL\n\nSubscriber Arbitrary File Upload in Warehouse Cargo &amp;lt;= 2.6.9 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74018\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T14:09:48.733882Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fa52d839-e7ef-4266-9b25-13146b52d8d0/export"/>
    <published>2026-08-20T14:09:48.733882+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/509f7e04-9501-4cd8-8188-3b8ef5d60d7e/export</id>
    <title>509f7e04-9501-4cd8-8188-3b8ef5d60d7e</title>
    <updated>2026-09-14T17:31:07.041431+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "509f7e04-9501-4cd8-8188-3b8ef5d60d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74016", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjgd3bwrq2c", "content": "\ud83d\udea8 CVE-2026-74016 \u2014 CVSS 9.9 CRITICAL\n\nSubscriber Arbitrary File Upload in Smart Cleaning &amp;lt;= 4.8.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74016\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T14:09:39.983513Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/509f7e04-9501-4cd8-8188-3b8ef5d60d7e/export"/>
    <published>2026-08-20T14:09:39.983513+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c18d652-0be1-4494-958e-040921343f56/export</id>
    <title>6c18d652-0be1-4494-958e-040921343f56</title>
    <updated>2026-09-14T17:31:07.041878+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6c18d652-0be1-4494-958e-040921343f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74014", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjgct3uyj2b", "content": "\ud83d\udea8 CVE-2026-74014 \u2014 CVSS 9.9 CRITICAL\n\nSubscriber Arbitrary File Upload in IT Residence &amp;lt;= 3.2.1 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74014\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T14:09:31.657164Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c18d652-0be1-4494-958e-040921343f56/export"/>
    <published>2026-08-20T14:09:31.657164+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/697d187d-80e6-42da-b683-f894e8c1d316/export</id>
    <title>697d187d-80e6-42da-b683-f894e8c1d316</title>
    <updated>2026-09-14T17:31:07.041980+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "697d187d-80e6-42da-b683-f894e8c1d316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74015", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtesbazrec25", "content": "CVE-2026-74015\nAn attacker can inject malicious SQL code to access sensitive data without a password. This affects WordPress sites using Readabler plugin versions less than 2.0.18. To protect your site, update the Readabler\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-18T18:00:05.487032Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/697d187d-80e6-42da-b683-f894e8c1d316/export"/>
    <published>2026-08-18T18:00:05.487032+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2d9e172d-ed44-4855-b32d-73bc4c1c5ff1/export</id>
    <title>2d9e172d-ed44-4855-b32d-73bc4c1c5ff1</title>
    <updated>2026-09-14T17:31:07.042075+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2d9e172d-ed44-4855-b32d-73bc4c1c5ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74015", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117117599578583976", "content": "CVE-2026-74015 - Unauthenticated SQLi in Readabler &amp;lt; 2.0.18. CVSS 9.3. No patch yet. Disable or isolate now. #CVE #infosec #SQLi\nhttps://www.valtersit.com/cve/CVE-2026-74015/", "creation_timestamp": "2026-08-18T17:06:11.497411Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2d9e172d-ed44-4855-b32d-73bc4c1c5ff1/export"/>
    <published>2026-08-18T17:06:11.497411+00:00</published>
  </entry>
</feed>
