https://vulnerability.circl.lu/sightings/feed 2026-09-11T10:25:25.403059+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/df03c166-3a34-4f40-aaff-1b78d45c3741/export 2026-09-11T10:25:25.433478+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "df03c166-3a34-4f40-aaff-1b78d45c3741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://t.me/CyberDispatch/2854", "content": "Adobe patches a Magento zero-day already exploited to deploy malware.\n\nCVE-2026-75650 abuses Magento template processing for unauthenticated code execution. Attacks have delivered a Rust #Linux backdoor and PHP web shell.", "creation_timestamp": "2026-09-11T01:00:03.719390Z"} 2026-09-11T01:00:03.719390+00:00 https://vulnerability.circl.lu/sighting/fc324369-eb0c-4470-a23c-8d1f85255fd4/export 2026-09-11T10:25:25.435450+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fc324369-eb0c-4470-a23c-8d1f85255fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://t.me/pphm_HackerNews/3101", "content": "\ud83d\udd34 U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog:\n\n- CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability\n\n- CVE-2026-81963 Microsoft Windows Link Following Vulnerability\n\n- CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability\n\n- CVE-2026-86218 N-able N-central Static Code Injection Vulnerability", "creation_timestamp": "2026-09-11T00:00:28.037292Z"} 2026-09-11T00:00:28.037292+00:00 https://vulnerability.circl.lu/sighting/65bd8302-8549-4fa7-8548-206037270037/export 2026-09-11T10:25:25.435548+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "65bd8302-8549-4fa7-8548-206037270037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://t.me/pphm_HackerNews/3101", "content": "\ud83d\udd34 U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog:\n\n- CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability\n\n- CVE-2026-81963 Microsoft Windows Link Following Vulnerability\n\n- CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability\n\n- CVE-2026-86218 N-able N-central Static Code Injection Vulnerability", "creation_timestamp": "2026-09-10T20:00:09.604010Z"} 2026-09-10T20:00:09.604010+00:00 https://vulnerability.circl.lu/sighting/18dd278d-1dcd-4ec0-aec2-ba370a08711a/export 2026-09-11T10:25:25.435627+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "18dd278d-1dcd-4ec0-aec2-ba370a08711a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75650", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv5wefeoqm2b", "content": "CVE-2026-75650: CVSS 10.0 zero-day in Adobe Commerce and Magento, actively exploited via template injection to deploy Rust\u2026 https://0daynews.com/articles/2026-09-09-adobe-stylesmuggler-cve-2026-75650-patch/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1570", "creation_timestamp": "2026-09-10T11:15:10.809748Z"} 2026-09-10T11:15:10.809748+00:00 https://vulnerability.circl.lu/sighting/0d28d39f-18f7-431a-a492-3f9da0732407/export 2026-09-11T10:25:25.435690+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0d28d39f-18f7-431a-a492-3f9da0732407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mv5raafrlv2z", "content": "Executive alert: CVE-2026-75650 actively threatens Adobe Commerce and Magento infrastructure. Review board-ready risk evaluation protocols, asset integrity measures, and strategic remediation steps to protect your enterprise value today.\n\nhttps://thecybermind.co/hip4", "creation_timestamp": "2026-09-10T09:43:23.811669Z"} 2026-09-10T09:43:23.811669+00:00 https://vulnerability.circl.lu/sighting/f346bbd6-dc61-4825-b282-fc0a65aa6ea9/export 2026-09-11T10:25:25.435754+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f346bbd6-dc61-4825-b282-fc0a65aa6ea9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f980a061-7bb8-490b-ab20-3a039e8543cb", "content": "", "creation_timestamp": "2026-09-10T07:10:09.444419Z"} 2026-09-10T07:10:09.444419+00:00 https://vulnerability.circl.lu/sighting/a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7/export 2026-09-11T10:25:25.435813+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a6cd31cb-a4ff-4ea0-ab98-6681d869cfb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75650", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv557praqc2r", "content": "Adobe emergency patch (Sep 8) fixes CVE-2026-75650, CVSS 10.0 template-injection zero-day in Magento/Commerce. StyleSmuggler\u2026 https://0daynews.com/articles/2026-09-09-adobe-stylesmuggler-cve-2026-75650-patch/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1569", "creation_timestamp": "2026-09-10T03:45:10.700027Z"} 2026-09-10T03:45:10.700027+00:00 https://vulnerability.circl.lu/sighting/e2084e48-af8d-4cac-9d12-5395abc133d1/export 2026-09-11T10:25:25.435878+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e2084e48-af8d-4cac-9d12-5395abc133d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mv4txuhoed2y", "content": "Critical CVE-2026-75650 alert for Adobe Commerce and Magento. Active CISA KEV exploitation requires immediate template parsing audits and endpoint hardening. Access our technical forensic brief to secure your enterprise perimeter today.\n\nhttps://thecybermind.co/8in9", "creation_timestamp": "2026-09-10T00:59:43.646576Z"} 2026-09-10T00:59:43.646576+00:00 https://vulnerability.circl.lu/sighting/b3de3ce1-47dd-46a5-b675-6be05560b057/export 2026-09-11T10:25:25.435937+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b3de3ce1-47dd-46a5-b675-6be05560b057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "seen", "source": "https://t.me/information_security_channel/55868", "content": "Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day\nhttps://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/\n\nTracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code.\nThe post Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day (https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T00:00:55.098300Z"} 2026-09-10T00:00:55.098300+00:00 https://vulnerability.circl.lu/sighting/0ec357b5-0220-4d8a-9458-ca1f3b4c55a3/export 2026-09-11T10:25:25.435999+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0ec357b5-0220-4d8a-9458-ca1f3b4c55a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75650", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101768", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a stylesmuggler-ioc-toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jithinkrishnanrs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 05:37:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells, persistence artifacts, and known indicators of compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:44.793995Z"} 2026-09-10T00:00:44.793995+00:00