https://vulnerability.circl.lu/sightings/feed 2026-09-28T05:36:38.100327+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/12daa694-16c9-4ccc-81e1-068f3d60bf62/export 2026-09-28T05:36:38.130452+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "12daa694-16c9-4ccc-81e1-068f3d60bf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103511", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a be-keb\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 09:10:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T10:00:08.000000Z"} 2026-09-27T10:00:08+00:00 https://vulnerability.circl.lu/sighting/8523036d-33ef-4129-b878-d516e60123c6/export 2026-09-28T05:36:38.132633+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8523036d-33ef-4129-b878-d516e60123c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/qZC90S3reg2BYBoeaZDLMoqfl021M9e_UnMBthvWa2cdvlY", "content": "", "creation_timestamp": "2026-09-25T03:00:05.000000Z"} 2026-09-25T03:00:05+00:00 https://vulnerability.circl.lu/sighting/d3731f02-0ca6-4a36-9fdb-c5249f4d36a4/export 2026-09-28T05:36:38.132770+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d3731f02-0ca6-4a36-9fdb-c5249f4d36a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/qZC90S3reg2BYBoeaZDLMoqfl021M9e_UnMBthvWa2cdvlY", "content": "", "creation_timestamp": "2026-09-25T03:00:05.000000Z"} 2026-09-25T03:00:05+00:00 https://vulnerability.circl.lu/sighting/9fb8726a-f0e5-4355-a968-0e39d0ef5658/export 2026-09-28T05:36:38.132875+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9fb8726a-f0e5-4355-a968-0e39d0ef5658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/XmZSdpY4T0rmzyootlW7VMaseMzYz4SaH1hTXJ2jQLx35-A", "content": "", "creation_timestamp": "2026-09-24T19:00:17.000000Z"} 2026-09-24T19:00:17+00:00 https://vulnerability.circl.lu/sighting/735c2ae6-9944-47d4-87a6-702a08209bc7/export 2026-09-28T05:36:38.132977+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "735c2ae6-9944-47d4-87a6-702a08209bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/XmZSdpY4T0rmzyootlW7VMaseMzYz4SaH1hTXJ2jQLx35-A", "content": "", "creation_timestamp": "2026-09-24T19:00:17.000000Z"} 2026-09-24T19:00:17+00:00 https://vulnerability.circl.lu/sighting/8885e693-aa14-4516-8ba3-6560dfe2dd8b/export 2026-09-28T05:36:38.133078+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8885e693-aa14-4516-8ba3-6560dfe2dd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:12:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder \u226445.16.0 \u2014 unauthenticated local file inclusion via vcv-template. Educational PoC only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T19:00:06.000000Z"} 2026-09-24T19:00:06+00:00 https://vulnerability.circl.lu/sighting/045afa6e-e699-497e-bbdc-9aa55ec27daf/export 2026-09-28T05:36:38.133183+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "045afa6e-e699-497e-bbdc-9aa55ec27daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:12:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder \u226445.16.0 \u2014 unauthenticated local file inclusion via vcv-template. Educational PoC only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T19:00:06.000000Z"} 2026-09-24T19:00:06+00:00 https://vulnerability.circl.lu/sighting/89caf823-3a81-4948-acdf-2f76316635d4/export 2026-09-28T05:36:38.133284+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "89caf823-3a81-4948-acdf-2f76316635d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227-visualcomposer-lfi-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 - Visual Composer <= 45.16.0 unauthenticated LFI via vcv-template (CVSS 9.8): Docker validation lab, safe-oracle PoC, nuclei template. Root cause: validate-then-mutate on the theme: prefix. Verified: vendor fix never landed - fires through 45.16.3 on WP <= 7.1.1; masked by WP 7.1.2 core gate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T18:00:08.000000Z"} 2026-09-24T18:00:08+00:00 https://vulnerability.circl.lu/sighting/5c409a31-da5a-44ae-9080-c837cf0a6781/export 2026-09-28T05:36:38.133397+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5c409a31-da5a-44ae-9080-c837cf0a6781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227-visualcomposer-lfi-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 - Visual Composer <= 45.16.0 unauthenticated LFI via vcv-template (CVSS 9.8): Docker validation lab, safe-oracle PoC, nuclei template. Root cause: validate-then-mutate on the theme: prefix. Verified: vendor fix never landed - fires through 45.16.3 on WP <= 7.1.1; masked by WP 7.1.2 core gate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T18:00:08.000000Z"} 2026-09-24T18:00:08+00:00 https://vulnerability.circl.lu/sighting/5ee87da2-9e25-499f-b79b-685b14216e97/export 2026-09-28T05:36:38.133502+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5ee87da2-9e25-499f-b79b-685b14216e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbamk45uy24", "content": "\ud83d\udd34 CVE-2026-12227 - Critical (9.8)\n\nThe Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12227/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T12:21:53.304008Z"} 2026-09-24T12:21:53.304008+00:00