<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-11T23:50:32.956577+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/441d55c0-b13a-442c-8e7c-1fe5a7ff03d0/export</id>
    <title>441d55c0-b13a-442c-8e7c-1fe5a7ff03d0</title>
    <updated>2026-09-11T23:50:32.982126+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "441d55c0-b13a-442c-8e7c-1fe5a7ff03d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7u46jqdt2b", "content": "CVE-2026-79987 - cms\nA user who only has basic control\u2011panel access in Craft CMS can cause the web server to execute operating\u2011system commands. This could let an insider or compromised account perform actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-09-11T05:40:07.484697Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/441d55c0-b13a-442c-8e7c-1fe5a7ff03d0/export"/>
    <published>2026-09-11T05:40:07.484697+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ecc57ab4-0a44-44b0-a689-d9ad68d487dd/export</id>
    <title>ecc57ab4-0a44-44b0-a689-d9ad68d487dd</title>
    <updated>2026-09-11T23:50:32.985207+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ecc57ab4-0a44-44b0-a689-d9ad68d487dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv6wvho74f2b", "content": "Craft CMS Control Panel\u306b\u304a\u3044\u3066\u3001`accessCp`\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u975e\u7ba1\u7406\u8005\u30e6\u30fc\u30b6\u30fc\u306f\u3001PHP\u30a6\u30a7\u30d6\u30ef\u30fc\u30ab\u30fc\u3068\u3057\u3066OS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-79987 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-10T20:57:23.284406Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ecc57ab4-0a44-44b0-a689-d9ad68d487dd/export"/>
    <published>2026-09-10T20:57:23.284406+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2787c369-a676-4845-bcb5-7555c1a69baf/export</id>
    <title>2787c369-a676-4845-bcb5-7555c1a69baf</title>
    <updated>2026-09-11T23:50:32.985365+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2787c369-a676-4845-bcb5-7555c1a69baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7336jpbf7nxhm", "content": "CVE-2026-79987 - Low-privilege RCE through element-search eager loading\nCVE ID : CVE-2026-79987\n \n Published : Sept. 10, 2026, 4:05 p.m. | 23\u00a0minutes ago\n \n Description : A remote, authenticated, non-admin Craft CMS Control Panel user with only the\u00a0accessCp\u00a0permission can exec...", "creation_timestamp": "2026-09-10T17:30:55.433739Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2787c369-a676-4845-bcb5-7555c1a69baf/export"/>
    <published>2026-09-10T17:30:55.433739+00:00</published>
  </entry>
</feed>
