https://vulnerability.circl.lu/sightings/feed 2026-08-03T20:46:20.411148+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a08847f9-224d-4ea6-a8b8-42ef4a858307/export 2026-08-03T20:46:20.437206+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a08847f9-224d-4ea6-a8b8-42ef4a858307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95407", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9830\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 16:42:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:10.397320Z"} 2026-07-28T00:00:10.397320+00:00 https://vulnerability.circl.lu/sighting/bfb271ec-e830-48c5-a74e-8f0b48865210/export 2026-08-03T20:46:20.439742+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bfb271ec-e830-48c5-a74e-8f0b48865210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "Telegram/MNUQPIGpAGeGg3W_QfZgMMHal6jpwzokF-mfI2PhU7te8xo", "content": "", "creation_timestamp": "2026-07-28T00:00:10.247783Z"} 2026-07-28T00:00:10.247783+00:00 https://vulnerability.circl.lu/sighting/d3a6a336-27eb-41c5-bc72-84605ef70c79/export 2026-08-03T20:46:20.440040+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d3a6a336-27eb-41c5-bc72-84605ef70c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-28T00:00:10.060002Z"} 2026-07-28T00:00:10.060002+00:00 https://vulnerability.circl.lu/sighting/623f2e8a-49d6-4501-9326-1b71620177b6/export 2026-08-03T20:46:20.440244+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "623f2e8a-49d6-4501-9326-1b71620177b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-27T21:00:03.659707Z"} 2026-07-27T21:00:03.659707+00:00 https://vulnerability.circl.lu/sighting/c38c4da0-1709-4b3e-8250-4510133cd5dd/export 2026-08-03T20:46:20.440428+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c38c4da0-1709-4b3e-8250-4510133cd5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "Telegram/MNUQPIGpAGeGg3W_QfZgMMHal6jpwzokF-mfI2PhU7te8xo", "content": "", "creation_timestamp": "2026-07-27T21:00:03.619441Z"} 2026-07-27T21:00:03.619441+00:00 https://vulnerability.circl.lu/sighting/ca70addc-b2ab-467f-b764-4537faaf4499/export 2026-08-03T20:46:20.440610+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ca70addc-b2ab-467f-b764-4537faaf4499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "https://t.me/GithubRedTeam/95407", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9830\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 16:42:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T21:00:03.456513Z"} 2026-07-27T21:00:03.456513+00:00