<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-24T23:13:38.202054+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/38d1b5f1-9d37-4901-b33b-b7d8bd9c9617/export</id>
    <title>38d1b5f1-9d37-4901-b33b-b7d8bd9c9617</title>
    <updated>2026-08-24T23:13:38.222208+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "38d1b5f1-9d37-4901-b33b-b7d8bd9c9617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmnpx6ct52t", "content": "CVE-2026-76613 - yootheme pro extension for joomla\nThe YOOtheme Pro extension for Joomla (versions 1.0.0 to 5.0.40) lets users with contributor rights add crafted content that changes the website's database. This could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-21T21:00:07.633288Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/38d1b5f1-9d37-4901-b33b-b7d8bd9c9617/export"/>
    <published>2026-08-21T21:00:07.633288+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7d518497-8ece-404b-b892-5400059dcccc/export</id>
    <title>7d518497-8ece-404b-b892-5400059dcccc</title>
    <updated>2026-08-24T23:13:38.224659+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7d518497-8ece-404b-b892-5400059dcccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jda5phzqedbeq", "content": "CVE-2026-76613 - Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40\nCVE ID : CVE-2026-76613\n \n Published : Aug. 21, 2026, 1:18 p.m. | 31\u00a0minutes ago\n \n Description : Joomla Extension - yootheme.com - Authenticated, privileged...", "creation_timestamp": "2026-08-21T14:43:31.734322Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7d518497-8ece-404b-b892-5400059dcccc/export"/>
    <published>2026-08-21T14:43:31.734322+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a77b0039-1524-4610-94f6-f3689f5080d3/export</id>
    <title>a77b0039-1524-4610-94f6-f3689f5080d3</title>
    <updated>2026-08-24T23:13:38.224801+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a77b0039-1524-4610-94f6-f3689f5080d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtlx6e2yo22p", "content": "\ud83d\udea8 Critical security update for YOOtheme\n\nWe fixed 2 vulnerabilities:\n\nCVE-2026-75115: Arbitrary file read (contributor-level)\nCVE-2026-76613: SQL injection (contributor-level)\n\nUpdate YOOtheme immediately to 5.0.41 if untrusted users have permission to create articles.", "creation_timestamp": "2026-08-21T14:16:35.272942Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a77b0039-1524-4610-94f6-f3689f5080d3/export"/>
    <published>2026-08-21T14:16:35.272942+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb7524d7-64ed-4a54-867f-9643f87fea32/export</id>
    <title>fb7524d7-64ed-4a54-867f-9643f87fea32</title>
    <updated>2026-08-24T23:13:38.224916+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb7524d7-64ed-4a54-867f-9643f87fea32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtlwnw47fs23", "content": "\ud83d\udea8 CVE-2026-76613 \u2014 CVSS 9.2 CRITICAL\n\nJoomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76613\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T14:07:23.057528Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb7524d7-64ed-4a54-867f-9643f87fea32/export"/>
    <published>2026-08-21T14:07:23.057528+00:00</published>
  </entry>
</feed>
