<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-12T19:37:26.892160+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e3063a9b-e011-4c9a-ad66-59e240511eec/export</id>
    <title>e3063a9b-e011-4c9a-ad66-59e240511eec</title>
    <updated>2026-09-12T19:37:26.917730+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e3063a9b-e011-4c9a-ad66-59e240511eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muzono44oc2i", "content": "CVE-2026-65643 is trending. Hype score 7, currently #7 on cvemon.\n\nEval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-65643", "creation_timestamp": "2026-09-08T18:46:32.687644Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e3063a9b-e011-4c9a-ad66-59e240511eec/export"/>
    <published>2026-09-08T18:46:32.687644+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d91cc7e7-422a-409b-9d01-cfa53130e3cd/export</id>
    <title>d91cc7e7-422a-409b-9d01-cfa53130e3cd</title>
    <updated>2026-09-12T19:37:26.919847+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d91cc7e7-422a-409b-9d01-cfa53130e3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muqphnln4a2a", "content": "\ud83d\udccc CVE-2026-65643 - Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root. https://www.potatohub.blog/cves/CVE-2026-65643", "creation_timestamp": "2026-09-05T05:07:07.911593Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d91cc7e7-422a-409b-9d01-cfa53130e3cd/export"/>
    <published>2026-09-05T05:07:07.911593+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18768bd8-73d4-4aae-b9e6-8b5f3d746459/export</id>
    <title>18768bd8-73d4-4aae-b9e6-8b5f3d746459</title>
    <updated>2026-09-12T19:37:26.920031+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18768bd8-73d4-4aae-b9e6-8b5f3d746459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muqphmzzg42c", "content": "\ud83d\udccc CVE-2026-65643 - Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root. https://www.cyberhub.blog/cves/CVE-2026-65643", "creation_timestamp": "2026-09-05T05:07:07.159946Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18768bd8-73d4-4aae-b9e6-8b5f3d746459/export"/>
    <published>2026-09-05T05:07:07.159946+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/11fd685b-5b5c-4239-9bbe-b21db0053576/export</id>
    <title>11fd685b-5b5c-4239-9bbe-b21db0053576</title>
    <updated>2026-09-12T19:37:26.920176+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "11fd685b-5b5c-4239-9bbe-b21db0053576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "published-proof-of-concept", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "content": "", "creation_timestamp": "2026-09-05T01:00:38.190791Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/11fd685b-5b5c-4239-9bbe-b21db0053576/export"/>
    <published>2026-09-05T01:00:38.190791+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/199c0138-19a3-4074-8ea2-4c0850b8436c/export</id>
    <title>199c0138-19a3-4074-8ea2-4c0850b8436c</title>
    <updated>2026-09-12T19:37:26.920338+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "199c0138-19a3-4074-8ea2-4c0850b8436c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101060", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65643-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 09:54:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83e\uddf0 CVE-2026-65643 \u2013 cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel &amp;amp; WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. \ud83e\uddbe Only Use Ethically, Stay Legal &amp;lt;3 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T01:00:28.638875Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/199c0138-19a3-4074-8ea2-4c0850b8436c/export"/>
    <published>2026-09-05T01:00:28.638875+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/49a79e16-2ebc-4565-8a58-5784e1b3652e/export</id>
    <title>49a79e16-2ebc-4565-8a58-5784e1b3652e</title>
    <updated>2026-09-12T19:37:26.920483+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "49a79e16-2ebc-4565-8a58-5784e1b3652e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "seen", "source": "https://t.me/GithubRedTeam/101060", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65643-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 09:54:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83e\uddf0 CVE-2026-65643 \u2013 cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel &amp;amp; WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. \ud83e\uddbe Only Use Ethically, Stay Legal &amp;lt;3 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T12:00:11.403598Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/49a79e16-2ebc-4565-8a58-5784e1b3652e/export"/>
    <published>2026-09-04T12:00:11.403598+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/417a60ac-1d60-445e-bc78-6c08d5fb838f/export</id>
    <title>417a60ac-1d60-445e-bc78-6c08d5fb838f</title>
    <updated>2026-09-12T19:37:26.920627+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "417a60ac-1d60-445e-bc78-6c08d5fb838f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "seen", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "content": "", "creation_timestamp": "2026-09-04T05:00:04.876313Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/417a60ac-1d60-445e-bc78-6c08d5fb838f/export"/>
    <published>2026-09-04T05:00:04.876313+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ca61a0cd-f817-48ac-ae34-da7f17dca850/export</id>
    <title>ca61a0cd-f817-48ac-ae34-da7f17dca850</title>
    <updated>2026-09-12T19:37:26.920759+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ca61a0cd-f817-48ac-ae34-da7f17dca850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100978", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65643-PoC-Toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 18:20:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83e\uddf0 CVE-2026-65643 \u2013 cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel &amp;amp; WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. \ud83e\uddbe Only Use Ethically, Stay Legal &amp;lt;3 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T00:00:10.409646Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ca61a0cd-f817-48ac-ae34-da7f17dca850/export"/>
    <published>2026-09-04T00:00:10.409646+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/595c646e-57ee-437a-b5ce-26801f8ec1e2/export</id>
    <title>595c646e-57ee-437a-b5ce-26801f8ec1e2</title>
    <updated>2026-09-12T19:37:26.920901+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "595c646e-57ee-437a-b5ce-26801f8ec1e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "seen", "source": "https://t.me/GithubRedTeam/100978", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65643-PoC-Toolkit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 18:20:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83e\uddf0 CVE-2026-65643 \u2013 cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel &amp;amp; WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. \ud83e\uddbe Only Use Ethically, Stay Legal &amp;lt;3 \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T22:00:05.624323Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/595c646e-57ee-437a-b5ce-26801f8ec1e2/export"/>
    <published>2026-09-03T22:00:05.624323+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8bdccde9-49b4-4f87-ae7d-7bc59daabae8/export</id>
    <title>8bdccde9-49b4-4f87-ae7d-7bc59daabae8</title>
    <updated>2026-09-12T19:37:26.921268+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8bdccde9-49b4-4f87-ae7d-7bc59daabae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65643", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muf2fnake62q", "content": "Discover the details of the critical CVE-2026-65643 vulnerability in cPanel &amp;amp; WHM, allowing attackers to gain full root access on shared hosting servers.\n\n#cPanel #Cybersecurity #Vulnerability #SharedHosting #InfoSec", "creation_timestamp": "2026-08-31T13:50:54.640437Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8bdccde9-49b4-4f87-ae7d-7bc59daabae8/export"/>
    <published>2026-08-31T13:50:54.640437+00:00</published>
  </entry>
</feed>
