https://vulnerability.circl.lu/sightings/feed 2026-07-11T12:57:53.658140+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e6722b75-541e-4eb2-9aae-7f2c663eeb0e/export 2026-07-11T12:57:53.676954+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e6722b75-541e-4eb2-9aae-7f2c663eeb0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4661", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqe72esgut2a", "content": "\ud83d\udfe0 CVE-2026-4661 - High (7.5)\n\nThe WP CTA \u2013 Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerab...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4661/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T08:00:38.844791Z"} 2026-07-11T08:00:38.844791+00:00 https://vulnerability.circl.lu/sighting/44af21cc-67c2-474d-b334-1bcf0a7e1db4/export 2026-07-11T12:57:53.679736+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "44af21cc-67c2-474d-b334-1bcf0a7e1db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqe6hic4ql2k", "content": "CVE-2026-4661 - WP CTA\nCVE ID : CVE-2026-4661\n \n Published : July 11, 2026, 5:35 a.m. | 1\u00a0hour, 48\u00a0minutes ago\n \n Description : The WP CTA \u2013 Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname...", "creation_timestamp": "2026-07-11T07:50:05.377804Z"} 2026-07-11T07:50:05.377804+00:00 https://vulnerability.circl.lu/sighting/d1a90f23-20b8-4272-ab07-243b1a594a1c/export 2026-07-11T12:57:53.679889+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d1a90f23-20b8-4272-ab07-243b1a594a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4661", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5rxtqrn2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4661 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP CTA: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B60B37E9-DF6C-4A56-B8C3-F4A39CF6860D", "creation_timestamp": "2026-07-11T07:38:03.234474Z"} 2026-07-11T07:38:03.234474+00:00 https://vulnerability.circl.lu/sighting/879a0910-77b8-4181-8eb8-a01708123341/export 2026-07-11T12:57:53.680010+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "879a0910-77b8-4181-8eb8-a01708123341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46611", "type": "published-proof-of-concept", "source": "https://github.com/nicolargo/glances/security/advisories/GHSA-w856-8p3r-p338", "content": "", "creation_timestamp": "2026-06-13T13:42:35.000000Z"} 2026-06-13T13:42:35+00:00 https://vulnerability.circl.lu/sighting/473d96bd-ae01-49bd-ab9d-4670ba92c80c/export 2026-07-11T12:57:53.681036+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "473d96bd-ae01-49bd-ab9d-4670ba92c80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46614", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxhs5smf72i", "content": "CVE-2026-46614 - Fission router exposes /fission-function/ / on its public listener, allowing invocation of any function without an HTTPTrigger\nCVE ID : CVE-2026-46614\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernet...", "creation_timestamp": "2026-06-10T19:42:06.622907Z"} 2026-06-10T19:42:06.622907+00:00 https://vulnerability.circl.lu/sighting/30bfbac1-4a1e-4c47-815d-7a18278a0ca0/export 2026-07-11T12:57:53.681159+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "30bfbac1-4a1e-4c47-815d-7a18278a0ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46612", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgfz4oop24", "content": "CVE-2026-46612 - Fission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archives\nCVE ID : CVE-2026-46612\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverless framework ...", "creation_timestamp": "2026-06-10T19:17:44.774567Z"} 2026-06-10T19:17:44.774567+00:00 https://vulnerability.circl.lu/sighting/0adc23d7-539b-4606-a33e-709e1cd32da3/export 2026-07-11T12:57:53.681259+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0adc23d7-539b-4606-a33e-709e1cd32da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46617", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxg5ymu4n2y", "content": "CVE-2026-46617 - Fission runtime pods automount the fission-fetcher service-account token into the user function container, granting function code namespace-wide secret / configmap read\nCVE ID : CVE-2026-46617\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Descrip...", "creation_timestamp": "2026-06-10T19:12:56.279465Z"} 2026-06-10T19:12:56.279465+00:00 https://vulnerability.circl.lu/sighting/2304ecaa-b7f4-4d46-b96e-fca6a766260b/export 2026-07-11T12:57:53.681356+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2304ecaa-b7f4-4d46-b96e-fca6a766260b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46618", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxg2fosui25", "content": "CVE-2026-46618 - Fission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables\nCVE ID : CVE-2026-46618\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an o...", "creation_timestamp": "2026-06-10T19:10:55.719182Z"} 2026-06-10T19:10:55.719182+00:00