https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 22 Sep 2026 10:12:23 +0000 https://vulnerability.circl.lu/sighting/5ed4a1e4-b398-4e8a-9713-fb3cdd64a92e/export {"uuid": "5ed4a1e4-b398-4e8a-9713-fb3cdd64a92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/26064", "content": "Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data \u2013 gbhackers.com\n\nTue, 22 Sep 2026 14:40:37", "creation_timestamp": "2026-09-22T10:00:05.385993Z"} {"uuid": "5ed4a1e4-b398-4e8a-9713-fb3cdd64a92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/26064", "content": "Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data \u2013 gbhackers.com\n\nTue, 22 Sep 2026 14:40:37", "creation_timestamp": "2026-09-22T10:00:05.385993Z"} https://vulnerability.circl.lu/sighting/5ed4a1e4-b398-4e8a-9713-fb3cdd64a92e/export Tue, 22 Sep 2026 10:00:05 +0000 https://vulnerability.circl.lu/sighting/a05b5574-f300-4685-a4ed-d5c8b733d01a/export {"uuid": "a05b5574-f300-4685-a4ed-d5c8b733d01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/16676", "content": "Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data \u2013 gbhackers.com\n\nTue, 22 Sep 2026 14:40:37", "creation_timestamp": "2026-09-22T09:00:04.451259Z"} {"uuid": "a05b5574-f300-4685-a4ed-d5c8b733d01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/16676", "content": "Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data \u2013 gbhackers.com\n\nTue, 22 Sep 2026 14:40:37", "creation_timestamp": "2026-09-22T09:00:04.451259Z"} https://vulnerability.circl.lu/sighting/a05b5574-f300-4685-a4ed-d5c8b733d01a/export Tue, 22 Sep 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/1be79f6a-404b-44b5-9e9f-cf6ed71e5ad1/export {"uuid": "1be79f6a-404b-44b5-9e9f-cf6ed71e5ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/14861", "content": "Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data \u2013 gbhackers.com\n\nTue, 22 Sep 2026 14:40:37", "creation_timestamp": "2026-09-22T09:00:04.348334Z"} {"uuid": "1be79f6a-404b-44b5-9e9f-cf6ed71e5ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/14861", "content": "Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data \u2013 gbhackers.com\n\nTue, 22 Sep 2026 14:40:37", "creation_timestamp": "2026-09-22T09:00:04.348334Z"} https://vulnerability.circl.lu/sighting/1be79f6a-404b-44b5-9e9f-cf6ed71e5ad1/export Tue, 22 Sep 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/80ba4dc4-768e-4cf1-ba88-6e2f543b84d5/export {"uuid": "80ba4dc4-768e-4cf1-ba88-6e2f543b84d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/RS5m0OdVynqfpAXslopdUI2FReOGMsRVPyHSkkL3z1_1Kmc", "content": "", "creation_timestamp": "2026-09-22T07:00:11.565340Z"} {"uuid": "80ba4dc4-768e-4cf1-ba88-6e2f543b84d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "Telegram/RS5m0OdVynqfpAXslopdUI2FReOGMsRVPyHSkkL3z1_1Kmc", "content": "", "creation_timestamp": "2026-09-22T07:00:11.565340Z"} https://vulnerability.circl.lu/sighting/80ba4dc4-768e-4cf1-ba88-6e2f543b84d5/export Tue, 22 Sep 2026 07:00:11 +0000 https://vulnerability.circl.lu/sighting/d6856d91-1646-4c63-95a9-cbd7a3e11384/export {"uuid": "d6856d91-1646-4c63-95a9-cbd7a3e11384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43589", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog \n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability\nCVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability \u00a0\nCVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability \u00a0\nCVE-2026-60137 WordPress Core SQL Injection Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T00:00:43.639261Z"} {"uuid": "d6856d91-1646-4c63-95a9-cbd7a3e11384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43589", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog \n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability\nCVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability \u00a0\nCVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability \u00a0\nCVE-2026-60137 WordPress Core SQL Injection Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T00:00:43.639261Z"} https://vulnerability.circl.lu/sighting/d6856d91-1646-4c63-95a9-cbd7a3e11384/export Sat, 19 Sep 2026 00:00:43 +0000 https://vulnerability.circl.lu/sighting/56be78e9-749e-4e41-9947-a0dda56987c5/export {"uuid": "56be78e9-749e-4e41-9947-a0dda56987c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43573", "content": "Critical wp2shell WordPress flaws exploited to install webshells\n\nHackers are exploiting the \"wp2shell\" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/", "creation_timestamp": "2026-09-19T00:00:42.673174Z"} {"uuid": "56be78e9-749e-4e41-9947-a0dda56987c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43573", "content": "Critical wp2shell WordPress flaws exploited to install webshells\n\nHackers are exploiting the \"wp2shell\" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. [...]\nhttps://www.bleepingcomputer.com/news/security/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/", "creation_timestamp": "2026-09-19T00:00:42.673174Z"} https://vulnerability.circl.lu/sighting/56be78e9-749e-4e41-9947-a0dda56987c5/export Sat, 19 Sep 2026 00:00:42 +0000 https://vulnerability.circl.lu/sighting/09b029c1-f218-4d9d-aa3d-c7bb29511c48/export {"uuid": "09b029c1-f218-4d9d-aa3d-c7bb29511c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44177", "content": "CISA Warns of Exploited Gitea Vulnerability\n\nCVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.\nThe post CISA Warns of Exploited Gitea Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/", "creation_timestamp": "2026-09-19T00:00:35.252466Z"} {"uuid": "09b029c1-f218-4d9d-aa3d-c7bb29511c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44177", "content": "CISA Warns of Exploited Gitea Vulnerability\n\nCVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.\nThe post CISA Warns of Exploited Gitea Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/", "creation_timestamp": "2026-09-19T00:00:35.252466Z"} https://vulnerability.circl.lu/sighting/09b029c1-f218-4d9d-aa3d-c7bb29511c48/export Sat, 19 Sep 2026 00:00:35 +0000 https://vulnerability.circl.lu/sighting/b11f72fa-963e-4846-9e49-4a5b0c8e805b/export {"uuid": "b11f72fa-963e-4846-9e49-4a5b0c8e805b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-19T00:00:10.936735Z"} {"uuid": "b11f72fa-963e-4846-9e49-4a5b0c8e805b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-19T00:00:10.936735Z"} https://vulnerability.circl.lu/sighting/b11f72fa-963e-4846-9e49-4a5b0c8e805b/export Sat, 19 Sep 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/dd995d4e-b57c-4b71-ad05-01278f931e52/export {"uuid": "dd995d4e-b57c-4b71-ad05-01278f931e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102695", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a arvindear\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-18 16:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T00:00:10.176498Z"} {"uuid": "dd995d4e-b57c-4b71-ad05-01278f931e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102695", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a arvindear\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-18 16:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T00:00:10.176498Z"} https://vulnerability.circl.lu/sighting/dd995d4e-b57c-4b71-ad05-01278f931e52/export Sat, 19 Sep 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/816a8432-a9d3-494a-bfd0-0fb5dbcb94e1/export {"uuid": "816a8432-a9d3-494a-bfd0-0fb5dbcb94e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/102695", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a arvindear\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-18 16:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T20:00:03.863870Z"} {"uuid": "816a8432-a9d3-494a-bfd0-0fb5dbcb94e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60137", "type": "seen", "source": "https://t.me/GithubRedTeam/102695", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a wp2shell-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a arvindear\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-18 16:57:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T20:00:03.863870Z"} https://vulnerability.circl.lu/sighting/816a8432-a9d3-494a-bfd0-0fb5dbcb94e1/export Fri, 18 Sep 2026 20:00:03 +0000