https://vulnerability.circl.lu/sightings/feed 2026-09-28T12:58:02.306241+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/eec6e37c-3479-49ad-a956-666a3286eb63/export 2026-09-28T12:58:02.328708+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "eec6e37c-3479-49ad-a956-666a3286eb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv36hko4jm2m", "content": "\ud83d\udfe0 CVE-2026-76009 - High (8.1)\n\nThe Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76009/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T09:02:08.391074Z"} 2026-09-09T09:02:08.391074+00:00 https://vulnerability.circl.lu/sighting/bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0/export 2026-09-28T12:58:02.332418+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6frwvztmdadfn", "content": "CVE-2026-76009 - Next-Cart Store to WooCommerce Migration\nCVE ID : CVE-2026-76009\n \n Published : 9. September 2026 06:17 | 42\u00a0Minuten ago\n \n Description : The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions u...", "creation_timestamp": "2026-09-09T07:05:49.979480Z"} 2026-09-09T07:05:49.979480+00:00 https://vulnerability.circl.lu/sighting/50c9f2ee-3fb0-4a6f-ab84-b457429b79e2/export 2026-09-28T12:58:02.332563+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "50c9f2ee-3fb0-4a6f-ab84-b457429b79e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2ucq2csq2h", "content": "Next-Cart Store to WooCommerce Migration plugin (\u22643.9.8) hit by HIGH severity auth bypass \u2014 enables unauthenticated SQL execution & admin account creation. Check vendor guidance & monitor for patches. https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen19...", "creation_timestamp": "2026-09-09T06:00:28.471008Z"} 2026-09-09T06:00:28.471008+00:00 https://vulnerability.circl.lu/sighting/a528f2d2-73cf-4e07-a657-ae63ade7deeb/export 2026-09-28T12:58:02.332668+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a528f2d2-73cf-4e07-a657-ae63ade7deeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239554096140693", "content": "CVE-2026-76009 (HIGH): Next-Cart Store to WooCommerce Migration \u22643.9.8 exposes an auth bypass via REST API. Attackers can execute arbitrary SQL & delete files \u2014 full site compromise possible. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen1990-next-cart-store-to-woocommerce-e35aad4a96ee528d #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-09-09T06:00:26.725303Z"} 2026-09-09T06:00:26.725303+00:00 https://vulnerability.circl.lu/sighting/8f24c38f-05c6-487e-a822-94b1d361178e/export 2026-09-28T12:58:02.332767+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8f24c38f-05c6-487e-a822-94b1d361178e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtgk5eacfy2e", "content": "CVE-2026-76008 - cf-n1-s\nA security issue has been discovered in the Comfast CF-N1-S 2.6.0.1. This affects the way it handles certain image files. An attacker can potentially send a malicious image to the device,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#comfast #CVE #infosec", "creation_timestamp": "2026-08-19T10:40:04.265315Z"} 2026-08-19T10:40:04.265315+00:00 https://vulnerability.circl.lu/sighting/f987c12c-4ee1-4e84-83b2-d814c3742c51/export 2026-09-28T12:58:02.332866+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f987c12c-4ee1-4e84-83b2-d814c3742c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117120645700764366", "content": "CVE-2026-76003 (CRITICAL): Stack-based buffer overflow in UTT HiPER 1200GW (2.5.3-170306). Remote code execution possible via timestart argument; public exploit exists. No patch yet. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-76003-stack-based-buffer-overflow-in-utt-hiper-1200gw-f42b168f89ef1ec7 #OffSeq #CVE202676003 #infosec #vuln", "creation_timestamp": "2026-08-19T06:00:32.813450Z"} 2026-08-19T06:00:32.813450+00:00 https://vulnerability.circl.lu/sighting/d4969e4e-0d81-4dae-a5a9-cdaa1c2f2439/export 2026-09-28T12:58:02.332961+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d4969e4e-0d81-4dae-a5a9-cdaa1c2f2439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtg2jh5t4z2e", "content": "UTT HiPER 1200GW v2.5.3-170306 faces a CRITICAL stack buffer overflow (CVE-2026-76003). Exploit code is public \u2014 no patch yet. Restrict access & monitor for attacks. https://radar.offseq.com/threat/cve-2026-76003-stack-based-buffer-overflow-in-utt-hiper-1200gw-f42b168f89ef1ec7 #OffSeq #CVE2026760...", "creation_timestamp": "2026-08-19T06:00:30.899920Z"} 2026-08-19T06:00:30.899920+00:00 https://vulnerability.circl.lu/sighting/ed4888ce-5574-4960-acbd-4843d4bac095/export 2026-09-28T12:58:02.333052+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ed4888ce-5574-4960-acbd-4843d4bac095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtfxuh3xr42j", "content": "Daily IT Security Digest \u2014 2026-08-19\nTRENDnet TEW-823DRU (CVSS 9.4, RCE via `/cgi-bin/wan.cgi`) and **CVE-2026-76008** on Comfast CF-N1-S v2.6.0.1 (CVSS 10, stack-based overflow in `get_para_from_uri`). Both enable remote code execution on widely-deployed consumer/enterprise networking gear.", "creation_timestamp": "2026-08-19T05:13:00.174117Z"} 2026-08-19T05:13:00.174117+00:00 https://vulnerability.circl.lu/sighting/450cc067-41df-4c61-bb14-7e526eb138c7/export 2026-09-28T12:58:02.333143+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "450cc067-41df-4c61-bb14-7e526eb138c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76004", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtfvig7y6o2c", "content": "CRITICAL buffer overflow (CVE-2026-76004) in UTT HiPER 1250GW v3.2.7-210907-180535. No patch \u2014 restrict remote HTTP access & monitor for suspicious 'pvid' traffic. Details: https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE...", "creation_timestamp": "2026-08-19T04:30:26.994529Z"} 2026-08-19T04:30:26.994529+00:00 https://vulnerability.circl.lu/sighting/15b25e73-f4db-425c-bc29-c26e373dadf3/export 2026-09-28T12:58:02.333235+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "15b25e73-f4db-425c-bc29-c26e373dadf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76004", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117120291598213539", "content": "UTT HiPER 1250GW v3.2.7-210907-180535 hit by CRITICAL stack-based buffer overflow (CVE-2026-76004) in HTTP handler. Exploitable via 'pvid' arg. No patch yet \u2014 restrict remote access & monitor traffic. https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE202676004 #Vuln #Infosec", "creation_timestamp": "2026-08-19T04:30:25.116433Z"} 2026-08-19T04:30:25.116433+00:00