<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 08 Jul 2026 15:22:46 +0000</lastBuildDate>
    <item>
      <title>18bec4bf-c2e8-4098-b18d-c60986542ac4</title>
      <link>https://vulnerability.circl.lu/sighting/18bec4bf-c2e8-4098-b18d-c60986542ac4/export</link>
      <description>{"uuid": "18bec4bf-c2e8-4098-b18d-c60986542ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116884244173717703", "content": "CRITICAL vulnerabilities in Adobe ColdFusion (CVE-2026-48282), Langflow (CVE-2026-55255), Joomla SP Page Builder (CVE-2026-48908), &amp;amp; Page Builder CK (CVE-2026-56290) are being actively exploited for remote code execution &amp;amp; backdoors. Patch ASAP! https://radar.offseq.com/threat/cisa-urges-immediate-patching-of-exploited-coldfus-c7b23bd787139571 #OffSeq #CyberSec #CVE", "creation_timestamp": "2026-07-08T12:00:27.550117Z"}</description>
      <content:encoded>{"uuid": "18bec4bf-c2e8-4098-b18d-c60986542ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116884244173717703", "content": "CRITICAL vulnerabilities in Adobe ColdFusion (CVE-2026-48282), Langflow (CVE-2026-55255), Joomla SP Page Builder (CVE-2026-48908), &amp;amp; Page Builder CK (CVE-2026-56290) are being actively exploited for remote code execution &amp;amp; backdoors. Patch ASAP! https://radar.offseq.com/threat/cisa-urges-immediate-patching-of-exploited-coldfus-c7b23bd787139571 #OffSeq #CyberSec #CVE", "creation_timestamp": "2026-07-08T12:00:27.550117Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/18bec4bf-c2e8-4098-b18d-c60986542ac4/export</guid>
      <pubDate>Wed, 08 Jul 2026 12:00:27 +0000</pubDate>
    </item>
    <item>
      <title>3a833dba-4290-4021-8989-4f634cf54a0b</title>
      <link>https://vulnerability.circl.lu/sighting/3a833dba-4290-4021-8989-4f634cf54a0b/export</link>
      <description>{"uuid": "3a833dba-4290-4021-8989-4f634cf54a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mq4cpumcxcfn", "content": "CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability  \nCVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability", "creation_timestamp": "2026-07-08T04:45:04.221867Z"}</description>
      <content:encoded>{"uuid": "3a833dba-4290-4021-8989-4f634cf54a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mq4cpumcxcfn", "content": "CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability\nCVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability  \nCVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability", "creation_timestamp": "2026-07-08T04:45:04.221867Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3a833dba-4290-4021-8989-4f634cf54a0b/export</guid>
      <pubDate>Wed, 08 Jul 2026 04:45:04 +0000</pubDate>
    </item>
    <item>
      <title>c15cdb0e-4f16-4d20-88f8-a5d026c38b20</title>
      <link>https://vulnerability.circl.lu/sighting/c15cdb0e-4f16-4d20-88f8-a5d026c38b20/export</link>
      <description>{"uuid": "c15cdb0e-4f16-4d20-88f8-a5d026c38b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq3cvhv6x524", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV \u2705\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary fil\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T19:15:31.497856Z"}</description>
      <content:encoded>{"uuid": "c15cdb0e-4f16-4d20-88f8-a5d026c38b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq3cvhv6x524", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV \u2705\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary fil\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T19:15:31.497856Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c15cdb0e-4f16-4d20-88f8-a5d026c38b20/export</guid>
      <pubDate>Tue, 07 Jul 2026 19:15:31 +0000</pubDate>
    </item>
    <item>
      <title>65f9e803-1509-42b1-b1b2-e40ebeb39266</title>
      <link>https://vulnerability.circl.lu/sighting/65f9e803-1509-42b1-b1b2-e40ebeb39266/export</link>
      <description>{"uuid": "65f9e803-1509-42b1-b1b2-e40ebeb39266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6935162", "content": "2026-07-07: [CVE-2026-56290] Joomlack Page Builder Improper Access Control VulnerabilityJoomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.\ncisakev", "creation_timestamp": "2026-07-07T18:26:39.409283Z"}</description>
      <content:encoded>{"uuid": "65f9e803-1509-42b1-b1b2-e40ebeb39266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6935162", "content": "2026-07-07: [CVE-2026-56290] Joomlack Page Builder Improper Access Control VulnerabilityJoomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.\ncisakev", "creation_timestamp": "2026-07-07T18:26:39.409283Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/65f9e803-1509-42b1-b1b2-e40ebeb39266/export</guid>
      <pubDate>Tue, 07 Jul 2026 18:26:39 +0000</pubDate>
    </item>
    <item>
      <title>4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1</title>
      <link>https://vulnerability.circl.lu/sighting/4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1/export</link>
      <description>{"uuid": "4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/506817d1-03c3-41da-b990-e33f2ad9e33d", "content": "", "creation_timestamp": "2026-07-07T18:00:31.872519Z"}</description>
      <content:encoded>{"uuid": "4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/506817d1-03c3-41da-b990-e33f2ad9e33d", "content": "", "creation_timestamp": "2026-07-07T18:00:31.872519Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4061bf0b-4cd0-4bc6-8f71-6b4cc04f07c1/export</guid>
      <pubDate>Tue, 07 Jul 2026 18:00:31 +0000</pubDate>
    </item>
    <item>
      <title>1200e718-8255-48c3-ae4a-dc98d8260f68</title>
      <link>https://vulnerability.circl.lu/sighting/1200e718-8255-48c3-ae4a-dc98d8260f68/export</link>
      <description>{"uuid": "1200e718-8255-48c3-ae4a-dc98d8260f68", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ee34d77-b707-46d5-baed-7361fcc5150c", "content": "", "creation_timestamp": "2026-07-07T18:00:24.416565Z"}</description>
      <content:encoded>{"uuid": "1200e718-8255-48c3-ae4a-dc98d8260f68", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ee34d77-b707-46d5-baed-7361fcc5150c", "content": "", "creation_timestamp": "2026-07-07T18:00:24.416565Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1200e718-8255-48c3-ae4a-dc98d8260f68/export</guid>
      <pubDate>Tue, 07 Jul 2026 18:00:24 +0000</pubDate>
    </item>
    <item>
      <title>6f483719-f557-4b71-ac41-ec29d693d195</title>
      <link>https://vulnerability.circl.lu/sighting/6f483719-f557-4b71-ac41-ec29d693d195/export</link>
      <description>{"uuid": "6f483719-f557-4b71-ac41-ec29d693d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq36drvbnv2c", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV: No\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary f\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T17:54:07.284820Z"}</description>
      <content:encoded>{"uuid": "6f483719-f557-4b71-ac41-ec29d693d195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mq36drvbnv2c", "content": "\ud83d\uded1 CVE-2026-56290\nJoomlack Page Builder\nCVSS 10.0 / EPSS 0% / KEV: No\nTL;DR: The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary f\u2026\nhttps://cvesentinel.com/report/CVE-2026-56290?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-07T17:54:07.284820Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6f483719-f557-4b71-ac41-ec29d693d195/export</guid>
      <pubDate>Tue, 07 Jul 2026 17:54:07 +0000</pubDate>
    </item>
    <item>
      <title>32c8511b-42bf-41d5-b506-f541d713e1a0</title>
      <link>https://vulnerability.circl.lu/sighting/32c8511b-42bf-41d5-b506-f541d713e1a0/export</link>
      <description>{"uuid": "32c8511b-42bf-41d5-b506-f541d713e1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879890133195498", "content": "CISA has updated the KEV catalogue.\n-  CVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-56290\n-  CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-55255\n-  CVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48908\nSeveral industrial vulnerabilities: https://www.cisa.gov/ #infosec #vulnerability #CISA", "creation_timestamp": "2026-07-07T17:33:09.803361Z"}</description>
      <content:encoded>{"uuid": "32c8511b-42bf-41d5-b506-f541d713e1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879890133195498", "content": "CISA has updated the KEV catalogue.\n-  CVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-56290\n-  CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-55255\n-  CVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48908\nSeveral industrial vulnerabilities: https://www.cisa.gov/ #infosec #vulnerability #CISA", "creation_timestamp": "2026-07-07T17:33:09.803361Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/32c8511b-42bf-41d5-b506-f541d713e1a0/export</guid>
      <pubDate>Tue, 07 Jul 2026 17:33:09 +0000</pubDate>
    </item>
    <item>
      <title>942727e8-1bcc-4b4b-b6d0-54c084b7bec3</title>
      <link>https://vulnerability.circl.lu/sighting/942727e8-1bcc-4b4b-b6d0-54c084b7bec3/export</link>
      <description>{"uuid": "942727e8-1bcc-4b4b-b6d0-54c084b7bec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq354jypwd2k", "content": "CVE-2026-56290 - page_builder_ck [known exploited]\nThe Joomla Page Builder CK extension is vulnerable to a serious security risk. An attacker can upload malicious files without logging in, which can lead to a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#joomlack #CVE #infosec", "creation_timestamp": "2026-07-07T17:32:05.670583Z"}</description>
      <content:encoded>{"uuid": "942727e8-1bcc-4b4b-b6d0-54c084b7bec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq354jypwd2k", "content": "CVE-2026-56290 - page_builder_ck [known exploited]\nThe Joomla Page Builder CK extension is vulnerable to a serious security risk. An attacker can upload malicious files without logging in, which can lead to a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#joomlack #CVE #infosec", "creation_timestamp": "2026-07-07T17:32:05.670583Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/942727e8-1bcc-4b4b-b6d0-54c084b7bec3/export</guid>
      <pubDate>Tue, 07 Jul 2026 17:32:05 +0000</pubDate>
    </item>
    <item>
      <title>ffd27df6-5b7b-45f5-b9e9-8af0d23ed644</title>
      <link>https://vulnerability.circl.lu/sighting/ffd27df6-5b7b-45f5-b9e9-8af0d23ed644/export</link>
      <description>{"uuid": "ffd27df6-5b7b-45f5-b9e9-8af0d23ed644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mq34zqoytw2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-56290", "creation_timestamp": "2026-07-07T17:30:32.363770Z"}</description>
      <content:encoded>{"uuid": "ffd27df6-5b7b-45f5-b9e9-8af0d23ed644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56290", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mq34zqoytw2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-56290", "creation_timestamp": "2026-07-07T17:30:32.363770Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ffd27df6-5b7b-45f5-b9e9-8af0d23ed644/export</guid>
      <pubDate>Tue, 07 Jul 2026 17:30:32 +0000</pubDate>
    </item>
  </channel>
</rss>
