<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T14:09:58.588982+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3187ff09-587b-4031-8adf-87fea49ac8ba/export</id>
    <title>3187ff09-587b-4031-8adf-87fea49ac8ba</title>
    <updated>2026-10-11T14:09:58.604403+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3187ff09-587b-4031-8adf-87fea49ac8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkmubidy22n", "content": "CVE-2026-78535 - photolia\nThe Photolia theme for WordPress (versions up to 1.0.3) lets anyone send specially crafted data that can cause the server to execute unwanted code. This could let attackers take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#photolia #themerex #CVE #infosec", "creation_timestamp": "2026-10-10T23:20:05.949053Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3187ff09-587b-4031-8adf-87fea49ac8ba/export"/>
    <published>2026-10-10T23:20:05.949053+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0fd5b723-ca9f-4157-b416-20005336a3e5/export</id>
    <title>0fd5b723-ca9f-4157-b416-20005336a3e5</title>
    <updated>2026-10-11T14:09:58.607068+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0fd5b723-ca9f-4157-b416-20005336a3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkj3fj6uf27", "content": "\ud83d\udea8 CVE-2026-78535 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Photolia &amp;lt;= 1.0.3 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78535\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:12:30.035132Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0fd5b723-ca9f-4157-b416-20005336a3e5/export"/>
    <published>2026-10-10T22:12:30.035132+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6f584bc1-ab50-4767-b83d-c7e960e4ebb7/export</id>
    <title>6f584bc1-ab50-4767-b83d-c7e960e4ebb7</title>
    <updated>2026-10-11T14:09:58.607412+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6f584bc1-ab50-4767-b83d-c7e960e4ebb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2xitdbphglmcu", "content": "CVE-2026-78535 - WordPress Photolia theme\nCVE ID : CVE-2026-78535\n \n Published : Oct. 10, 2026, 8:16 p.m. | 1\u00a0hour, 6\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Photolia &amp;lt;= 1.0.3 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for more deta...", "creation_timestamp": "2026-10-10T21:50:09.765315Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6f584bc1-ab50-4767-b83d-c7e960e4ebb7/export"/>
    <published>2026-10-10T21:50:09.765315+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/926fc6a1-48f3-4bcf-adf1-ad62caa092d1/export</id>
    <title>926fc6a1-48f3-4bcf-adf1-ad62caa092d1</title>
    <updated>2026-10-11T14:09:58.607703+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "926fc6a1-48f3-4bcf-adf1-ad62caa092d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418629288171392", "content": "CVE-2026-78535 WordPress Photolia theme &amp;lt;= 1.0.3 - PHP Object Injection vulnerability Unauthenticated PHP Object Injection in Photolia &amp;lt;= 1.0.3 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-78535https://patchstack.com/database/wordpress/theme/photolia/vulnerability/wordpress-photolia-theme-1-0-3-php-object-injection-vulnerability?_s_id=cve#ThemeRex #Photolia#CVE_2026_78535#bot", "creation_timestamp": "2026-10-10T21:01:36.918333Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/926fc6a1-48f3-4bcf-adf1-ad62caa092d1/export"/>
    <published>2026-10-10T21:01:36.918333+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dd323dd2-16bb-43d2-8034-99300ca8bef0/export</id>
    <title>dd323dd2-16bb-43d2-8034-99300ca8bef0</title>
    <updated>2026-10-11T14:09:58.607933+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dd323dd2-16bb-43d2-8034-99300ca8bef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxkdgvmafr23", "content": "\ud83d\udd34 CVE-2026-78535 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Photolia &amp;lt;= 1.0.3 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78535/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T20:31:33.893319Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dd323dd2-16bb-43d2-8034-99300ca8bef0/export"/>
    <published>2026-10-10T20:31:33.893319+00:00</published>
  </entry>
</feed>
