https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 19:05:58 +0000 https://vulnerability.circl.lu/sighting/cc78d7be-b787-4b35-b317-1a8a273034fe/export {"uuid": "cc78d7be-b787-4b35-b317-1a8a273034fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxmmbq7jl22i", "content": "1. CVE-2026-106610 \u00b7 4 people\n\ud83d\udfe5 Critical 9.8 \u00b7 miniorange otp verification\n\nIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.", "creation_timestamp": "2026-10-11T18:15:05.404249Z"} {"uuid": "cc78d7be-b787-4b35-b317-1a8a273034fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxmmbq7jl22i", "content": "1. CVE-2026-106610 \u00b7 4 people\n\ud83d\udfe5 Critical 9.8 \u00b7 miniorange otp verification\n\nIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.", "creation_timestamp": "2026-10-11T18:15:05.404249Z"} https://vulnerability.circl.lu/sighting/cc78d7be-b787-4b35-b317-1a8a273034fe/export Sun, 11 Oct 2026 18:15:05 +0000 https://vulnerability.circl.lu/sighting/41051e50-f9b1-4515-8c7d-56ded064c5af/export {"uuid": "41051e50-f9b1-4515-8c7d-56ded064c5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxmmbq5pxc2i", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-106610 \u00b7 4 people\n2. CVE-2026-107406 \u00b7 4 people\n3. CVE-2026-78533 \u00b7 4 people\n4. CVE-2026-78535 \u00b7 4 people\n5. CVE-2026-81797 \u00b7 4 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "creation_timestamp": "2026-10-11T18:15:04.071721Z"} {"uuid": "41051e50-f9b1-4515-8c7d-56ded064c5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxmmbq5pxc2i", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-106610 \u00b7 4 people\n2. CVE-2026-107406 \u00b7 4 people\n3. CVE-2026-78533 \u00b7 4 people\n4. CVE-2026-78535 \u00b7 4 people\n5. CVE-2026-81797 \u00b7 4 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "creation_timestamp": "2026-10-11T18:15:04.071721Z"} https://vulnerability.circl.lu/sighting/41051e50-f9b1-4515-8c7d-56ded064c5af/export Sun, 11 Oct 2026 18:15:04 +0000 https://vulnerability.circl.lu/sighting/42f5b188-4261-47f3-8415-05ba0f3c2355/export {"uuid": "42f5b188-4261-47f3-8415-05ba0f3c2355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkc3tx2wh22", "content": "\ud83d\udea8 CVE-2026-106610 \u2014 CVSS 9.8 CRITICAL\n\nIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verif...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-106610\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T20:07:29.089509Z"} {"uuid": "42f5b188-4261-47f3-8415-05ba0f3c2355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkc3tx2wh22", "content": "\ud83d\udea8 CVE-2026-106610 \u2014 CVSS 9.8 CRITICAL\n\nIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verif...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-106610\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T20:07:29.089509Z"} https://vulnerability.circl.lu/sighting/42f5b188-4261-47f3-8415-05ba0f3c2355/export Sat, 10 Oct 2026 20:07:29 +0000 https://vulnerability.circl.lu/sighting/cb014cd0-da95-47ea-9bb6-8724dde0b82e/export {"uuid": "cb014cd0-da95-47ea-9bb6-8724dde0b82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mxkb5xqvej2o", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-106610: Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-106610\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-10-10T19:50:46.210857Z"} {"uuid": "cb014cd0-da95-47ea-9bb6-8724dde0b82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mxkb5xqvej2o", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-106610: Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-106610\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-10-10T19:50:46.210857Z"} https://vulnerability.circl.lu/sighting/cb014cd0-da95-47ea-9bb6-8724dde0b82e/export Sat, 10 Oct 2026 19:50:46 +0000 https://vulnerability.circl.lu/sighting/8d1c7a09-c3cc-4f8d-92df-abe0761f6923/export {"uuid": "8d1c7a09-c3cc-4f8d-92df-abe0761f6923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxka3pwk642g", "content": "\ud83d\udd34 CVE-2026-106610 - Critical (9.8)\n\nIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-106610/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:31:37.457104Z"} {"uuid": "8d1c7a09-c3cc-4f8d-92df-abe0761f6923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxka3pwk642g", "content": "\ud83d\udd34 CVE-2026-106610 - Critical (9.8)\n\nIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-106610/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:31:37.457104Z"} https://vulnerability.circl.lu/sighting/8d1c7a09-c3cc-4f8d-92df-abe0761f6923/export Sat, 10 Oct 2026 19:31:37 +0000 https://vulnerability.circl.lu/sighting/74f0b21f-2fd8-4da4-b7d5-e4d892140389/export {"uuid": "74f0b21f-2fd8-4da4-b7d5-e4d892140389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxk6vajsgp2n", "content": "CVE-2026-106610 - miniorange otp verification\nThe miniOrange OTP Verification plugin for WordPress (up to version 5.5.7) can incorrectly grant higher privileges than intended. This could allow a regular user or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#miniorange #CVE #infosec", "creation_timestamp": "2026-10-10T19:10:05.820082Z"} {"uuid": "74f0b21f-2fd8-4da4-b7d5-e4d892140389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxk6vajsgp2n", "content": "CVE-2026-106610 - miniorange otp verification\nThe miniOrange OTP Verification plugin for WordPress (up to version 5.5.7) can incorrectly grant higher privileges than intended. This could allow a regular user or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#miniorange #CVE #infosec", "creation_timestamp": "2026-10-10T19:10:05.820082Z"} https://vulnerability.circl.lu/sighting/74f0b21f-2fd8-4da4-b7d5-e4d892140389/export Sat, 10 Oct 2026 19:10:05 +0000 https://vulnerability.circl.lu/sighting/4a9fd79a-2983-46aa-9c10-983c1a9a39cc/export {"uuid": "4a9fd79a-2983-46aa-9c10-983c1a9a39cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418031336779525", "content": "CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106610https://patchstack.com/database/wordpress/plugin/miniorange-otp-verification/vulnerability/wordpress-miniorange-otp-verification-plugin-5-5-7-privilege-escalation-vulnerability?_s_id=cve#miniOrange #miniorangeotpverification#CVE_2026_106610#bot", "creation_timestamp": "2026-10-10T18:29:32.861642Z"} {"uuid": "4a9fd79a-2983-46aa-9c10-983c1a9a39cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418031336779525", "content": "CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106610https://patchstack.com/database/wordpress/plugin/miniorange-otp-verification/vulnerability/wordpress-miniorange-otp-verification-plugin-5-5-7-privilege-escalation-vulnerability?_s_id=cve#miniOrange #miniorangeotpverification#CVE_2026_106610#bot", "creation_timestamp": "2026-10-10T18:29:32.861642Z"} https://vulnerability.circl.lu/sighting/4a9fd79a-2983-46aa-9c10-983c1a9a39cc/export Sat, 10 Oct 2026 18:29:32 +0000 https://vulnerability.circl.lu/sighting/bed6d03c-af85-4e28-943f-36ec7a94073d/export {"uuid": "bed6d03c-af85-4e28-943f-36ec7a94073d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "published-proof-of-concept", "source": "Telegram/4hNeHS36zsvExvGlzuednv3uNbGR2hZwdosOZkBARt81j7I", "content": "", "creation_timestamp": "2026-10-09T03:00:05.000000Z"} {"uuid": "bed6d03c-af85-4e28-943f-36ec7a94073d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "published-proof-of-concept", "source": "Telegram/4hNeHS36zsvExvGlzuednv3uNbGR2hZwdosOZkBARt81j7I", "content": "", "creation_timestamp": "2026-10-09T03:00:05.000000Z"} https://vulnerability.circl.lu/sighting/bed6d03c-af85-4e28-943f-36ec7a94073d/export Fri, 09 Oct 2026 03:00:05 +0000 https://vulnerability.circl.lu/sighting/120cd51b-3645-432a-a913-112afa9c1501/export {"uuid": "120cd51b-3645-432a-a913-112afa9c1501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "Telegram/4hNeHS36zsvExvGlzuednv3uNbGR2hZwdosOZkBARt81j7I", "content": "", "creation_timestamp": "2026-10-09T03:00:05.000000Z"} {"uuid": "120cd51b-3645-432a-a913-112afa9c1501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "seen", "source": "Telegram/4hNeHS36zsvExvGlzuednv3uNbGR2hZwdosOZkBARt81j7I", "content": "", "creation_timestamp": "2026-10-09T03:00:05.000000Z"} https://vulnerability.circl.lu/sighting/120cd51b-3645-432a-a913-112afa9c1501/export Fri, 09 Oct 2026 03:00:05 +0000 https://vulnerability.circl.lu/sighting/6d8d659f-bfd2-4ed5-9ecc-caeba4b11021/export {"uuid": "6d8d659f-bfd2-4ed5-9ecc-caeba4b11021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104702", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-106610-miniorange-otp-ato\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KevineCharles\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 19:13:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC: miniOrange OTP Verification <=5.5.7 unauthenticated Account Takeover via OTP re-routing (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-08T20:00:07.000000Z"} {"uuid": "6d8d659f-bfd2-4ed5-9ecc-caeba4b11021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106610", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104702", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-106610-miniorange-otp-ato\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KevineCharles\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 19:13:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC: miniOrange OTP Verification <=5.5.7 unauthenticated Account Takeover via OTP re-routing (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-08T20:00:07.000000Z"} https://vulnerability.circl.lu/sighting/6d8d659f-bfd2-4ed5-9ecc-caeba4b11021/export Thu, 08 Oct 2026 20:00:07 +0000