https://vulnerability.circl.lu/sightings/feed 2026-09-28T12:58:02.584503+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fb975034-497b-4e23-9c47-d8c46baa7995/export 2026-09-28T12:58:02.609963+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fb975034-497b-4e23-9c47-d8c46baa7995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76801", "type": "seen", "source": "https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355", "content": "On September 9, 2026, Microsoft released a record-breaking Patch Tuesday update addressing 972\u2013974 vulnerabilities, including 113 critical flaws and two actively exploited zero-days across Windows, Office, and SQL. The digest also highlights several high-severity CVEs: a CVSS 10.0 pre-auth RCE in N-able N-central (CVE-2026-86218) added to CISA\u2019s KEV catalog with a federal patch deadline of Sept 11; an authenticated RCE in the WordPress FireBox plugin (CVE-2026-76801); and a high-severity out-of-bounds write in Android\u2019s Keymaster trustlet (CVE-2026-21085). Finally, the update covers emerging AI cybersecurity trends, featuring Alovia\u2014a new security layer for AI-driven platforms\u2014and ongoing industry discussions on the escalating AI arms race and agentic AI applications for both attackers and defenders.", "creation_timestamp": "2026-09-09T08:11:50.449929Z"} 2026-09-09T08:11:50.449929+00:00 https://vulnerability.circl.lu/sighting/a7a29d99-70b3-4c04-aebe-59e36c4a45f5/export 2026-09-28T12:58:02.611569+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a7a29d99-70b3-4c04-aebe-59e36c4a45f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76801", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv2jipzoo52g", "content": "CVE-2026-76801 affects the FireBox WordPress plugin by fireplugins, versions through 3.1.10. Authenticated users with author-level access or above can execute remote code on the server. No exploitation is confirmed. Update the plugin to the latest available version.", "creation_timestamp": "2026-09-09T02:46:58.007409Z"} 2026-09-09T02:46:58.007409+00:00 https://vulnerability.circl.lu/sighting/53e52150-9fe8-4556-b140-8d2f66dd18bb/export 2026-09-28T12:58:02.611688+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "53e52150-9fe8-4556-b140-8d2f66dd18bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5kq2ocmjpslig", "content": "CVE-2026-76800 - DeDeCMS select_media_post.php unrestricted upload\nCVE ID : CVE-2026-76800\n \n Published : Aug. 20, 2026, 3:16 a.m. | 34\u00a0minutes ago\n \n Description : A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /incl...", "creation_timestamp": "2026-08-20T03:58:49.561168Z"} 2026-08-20T03:58:49.561168+00:00