https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 15:18:14 +0000 https://vulnerability.circl.lu/sighting/278c8f89-23dd-4d90-85e7-e825bd7837e4/export {"uuid": "278c8f89-23dd-4d90-85e7-e825bd7837e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-23T00:00:43.512467Z"} {"uuid": "278c8f89-23dd-4d90-85e7-e825bd7837e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-23T00:00:43.512467Z"} https://vulnerability.circl.lu/sighting/278c8f89-23dd-4d90-85e7-e825bd7837e4/export Sun, 23 Aug 2026 00:00:43 +0000 https://vulnerability.circl.lu/sighting/3098b876-f35f-4ba7-84ae-1a4520eb64ed/export {"uuid": "3098b876-f35f-4ba7-84ae-1a4520eb64ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-22T00:00:26.538534Z"} {"uuid": "3098b876-f35f-4ba7-84ae-1a4520eb64ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-22T00:00:26.538534Z"} https://vulnerability.circl.lu/sighting/3098b876-f35f-4ba7-84ae-1a4520eb64ed/export Sat, 22 Aug 2026 00:00:26 +0000 https://vulnerability.circl.lu/sighting/bfab85f0-9e51-4a42-bdc2-4500201d30da/export {"uuid": "bfab85f0-9e51-4a42-bdc2-4500201d30da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-21T23:00:09.327764Z"} {"uuid": "bfab85f0-9e51-4a42-bdc2-4500201d30da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://t.me/pphm_HackerNews/2015", "content": "\ud83d\udd34 Critical WordPress OAuth SSO Plugin Flaw Allows Unauthenticated Attackers to Gain Admin Access\n\nA critical authentication bypass vulnerability has been disclosed in the widely used miniOrange OAuth Single Sign-On (SSO) WordPress plugin, carrying a near-maximum CVSS score of 9.8. \n\nThis flaw, tracked as CVE-2026-57807, affects all plugin versions up to and including version 38.5.8. As of now, it remains unpatched, with no official fix available from the vendor.", "creation_timestamp": "2026-08-21T23:00:09.327764Z"} https://vulnerability.circl.lu/sighting/bfab85f0-9e51-4a42-bdc2-4500201d30da/export Fri, 21 Aug 2026 23:00:09 +0000 https://vulnerability.circl.lu/sighting/cde7f042-5b76-4fc8-813b-57a619b54c57/export {"uuid": "cde7f042-5b76-4fc8-813b-57a619b54c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57804", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsdgdlfl2n", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05e4\u05d9\u05dc\u05d5\u05e1\u05d5\u05e4\u05d9\u05d4 - CVE-2026-57804 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/03303EBD-B98B-40B9-A5ED-B610285987B9", "creation_timestamp": "2026-07-16T08:17:39.940187Z"} {"uuid": "cde7f042-5b76-4fc8-813b-57a619b54c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57804", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsdgdlfl2n", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05e4\u05d9\u05dc\u05d5\u05e1\u05d5\u05e4\u05d9\u05d4 - CVE-2026-57804 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/03303EBD-B98B-40B9-A5ED-B610285987B9", "creation_timestamp": "2026-07-16T08:17:39.940187Z"} https://vulnerability.circl.lu/sighting/cde7f042-5b76-4fc8-813b-57a619b54c57/export Thu, 16 Jul 2026 08:17:39 +0000 https://vulnerability.circl.lu/sighting/e4ef0c64-2897-4b20-8f2a-f23a6235cb14/export {"uuid": "e4ef0c64-2897-4b20-8f2a-f23a6235cb14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57803", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsdc63w32n", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1-PHP: CVE-2026-57803 - \u05de\u05d4 \u05d6\u05d4, \u05db\u05d9\u05e6\u05d3 \u05d6\u05d4 \u05e4\u05d5\u05d2\u05e2 \u05d5\u05de\u05d4 \u05dc\u05e2\u05e9\u05d5\u05ea?\n\n\n\nhttps://khesef.xyz/posts/7AF2D539-3B65-4FDA-A879-599A3A11CFC5", "creation_timestamp": "2026-07-16T08:17:35.630680Z"} {"uuid": "e4ef0c64-2897-4b20-8f2a-f23a6235cb14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57803", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsdc63w32n", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1-PHP: CVE-2026-57803 - \u05de\u05d4 \u05d6\u05d4, \u05db\u05d9\u05e6\u05d3 \u05d6\u05d4 \u05e4\u05d5\u05d2\u05e2 \u05d5\u05de\u05d4 \u05dc\u05e2\u05e9\u05d5\u05ea?\n\n\n\nhttps://khesef.xyz/posts/7AF2D539-3B65-4FDA-A879-599A3A11CFC5", "creation_timestamp": "2026-07-16T08:17:35.630680Z"} https://vulnerability.circl.lu/sighting/e4ef0c64-2897-4b20-8f2a-f23a6235cb14/export Thu, 16 Jul 2026 08:17:35 +0000 https://vulnerability.circl.lu/sighting/d1c20c29-469a-4307-876c-28dc5980fee8/export {"uuid": "d1c20c29-469a-4307-876c-28dc5980fee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57800", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqryzkfi72p", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1-PHP: CVE-2026-57800 - \u05d0\u05d9\u05da \u05d4\u05d9\u05d0 \u05de\u05e1\u05db\u05e0\u05ea \u05d0\u05ea \u05d4\u05d0\u05ea\u05e8 \u05e9\u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/EF92061D-AE13-410A-85E4-A937AD5CA642", "creation_timestamp": "2026-07-16T08:11:51.267459Z"} {"uuid": "d1c20c29-469a-4307-876c-28dc5980fee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57800", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqryzkfi72p", "content": "\u05ea\u05e7\u05dc\u05d4 \u05e7\u05e9\u05d4 \u05d1-PHP: CVE-2026-57800 - \u05d0\u05d9\u05da \u05d4\u05d9\u05d0 \u05de\u05e1\u05db\u05e0\u05ea \u05d0\u05ea \u05d4\u05d0\u05ea\u05e8 \u05e9\u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/EF92061D-AE13-410A-85E4-A937AD5CA642", "creation_timestamp": "2026-07-16T08:11:51.267459Z"} https://vulnerability.circl.lu/sighting/d1c20c29-469a-4307-876c-28dc5980fee8/export Thu, 16 Jul 2026 08:11:51 +0000 https://vulnerability.circl.lu/sighting/fbccb665-ebfa-479b-b868-583f3ae07f8b/export {"uuid": "fbccb665-ebfa-479b-b868-583f3ae07f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57803", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrsanwhf2i", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05e4\u05d9.\u05d0\u05e3.\u05d0\u05d9: CVE-2026-57803 - \u05e1\u05db\u05e0\u05d4 \u05e9\u05dc \u05d1\u05e7\u05e8\u05ea \u05e9\u05de\u05d5\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05dc\u05d0 \u05e0\u05db\u05d5\u05e0\u05d4\n\n\n\nhttps://khesef.xyz/posts/BF7D2DEC-0318-4EA1-87C9-729584496DD1", "creation_timestamp": "2026-07-16T08:08:03.439711Z"} {"uuid": "fbccb665-ebfa-479b-b868-583f3ae07f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57803", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrsanwhf2i", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05e4\u05d9.\u05d0\u05e3.\u05d0\u05d9: CVE-2026-57803 - \u05e1\u05db\u05e0\u05d4 \u05e9\u05dc \u05d1\u05e7\u05e8\u05ea \u05e9\u05de\u05d5\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05dc\u05d0 \u05e0\u05db\u05d5\u05e0\u05d4\n\n\n\nhttps://khesef.xyz/posts/BF7D2DEC-0318-4EA1-87C9-729584496DD1", "creation_timestamp": "2026-07-16T08:08:03.439711Z"} https://vulnerability.circl.lu/sighting/fbccb665-ebfa-479b-b868-583f3ae07f8b/export Thu, 16 Jul 2026 08:08:03 +0000 https://vulnerability.circl.lu/sighting/4502f02d-a447-48e2-b10f-559b1c16eff4/export {"uuid": "4502f02d-a447-48e2-b10f-559b1c16eff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57802", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrs4lork2p", "content": "\u05d4\u05ea\u05e7\u05e4\u05ea CVE-2026-57802: \u05e1\u05d9\u05db\u05d5\u05df \u05d7\u05de\u05d5\u05e8 \u05e9\u05dc \u05d1\u05e7\u05e8\u05ea \u05e9\u05d2\u05d5\u05d9 \u05e9\u05dc \u05e9\u05de\u05d5\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05d1\u05e4\u05d9\u05dc\u05d5\u05e1\u05d5\u05e4\u05d9\u05d4\n\n\n\nhttps://khesef.xyz/posts/93E663F4-9253-4C6C-ABDA-603068436A82", "creation_timestamp": "2026-07-16T08:07:59.239246Z"} {"uuid": "4502f02d-a447-48e2-b10f-559b1c16eff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57802", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrs4lork2p", "content": "\u05d4\u05ea\u05e7\u05e4\u05ea CVE-2026-57802: \u05e1\u05d9\u05db\u05d5\u05df \u05d7\u05de\u05d5\u05e8 \u05e9\u05dc \u05d1\u05e7\u05e8\u05ea \u05e9\u05d2\u05d5\u05d9 \u05e9\u05dc \u05e9\u05de\u05d5\u05ea \u05e7\u05d1\u05e6\u05d9\u05dd \u05d1\u05e4\u05d9\u05dc\u05d5\u05e1\u05d5\u05e4\u05d9\u05d4\n\n\n\nhttps://khesef.xyz/posts/93E663F4-9253-4C6C-ABDA-603068436A82", "creation_timestamp": "2026-07-16T08:07:59.239246Z"} https://vulnerability.circl.lu/sighting/4502f02d-a447-48e2-b10f-559b1c16eff4/export Thu, 16 Jul 2026 08:07:59 +0000 https://vulnerability.circl.lu/sighting/09f20922-00b1-4158-b476-7bafa649e71c/export {"uuid": "09f20922-00b1-4158-b476-7bafa649e71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqnwy4trhl2f", "content": "Daily IT Security Digest \u2014 2026-07-15\nPatch Yet\n\nA critical authentication bypass vulnerability (CVE-2026-57807) was discovered in miniOrange OAuth SSO plugins (versions \u2264 38.5.8), particularly those integrating with Microsoft Copilot and SharePoint for Drupal. The flaw can be exploited via the", "creation_timestamp": "2026-07-15T05:02:50.246964Z"} {"uuid": "09f20922-00b1-4158-b476-7bafa649e71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqnwy4trhl2f", "content": "Daily IT Security Digest \u2014 2026-07-15\nPatch Yet\n\nA critical authentication bypass vulnerability (CVE-2026-57807) was discovered in miniOrange OAuth SSO plugins (versions \u2264 38.5.8), particularly those integrating with Microsoft Copilot and SharePoint for Drupal. The flaw can be exploited via the", "creation_timestamp": "2026-07-15T05:02:50.246964Z"} https://vulnerability.circl.lu/sighting/09f20922-00b1-4158-b476-7bafa649e71c/export Wed, 15 Jul 2026 05:02:50 +0000 https://vulnerability.circl.lu/sighting/e498a2d0-d080-468b-ac06-d41a7e8e8a9e/export {"uuid": "e498a2d0-d080-468b-ac06-d41a7e8e8a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjyftrh2p", "content": "Daily IT Security Digest \u2014 2026-07-14\nor later as soon as possible to close this attack vector.\nSources: https://infosec.exchange/@offseq/116887783224020082\n\n## 6. CRITICAL \u2014 miniOrange OAuth SSO Auth Bypass (CVE-2026-57807)\nAn authentication bypass flaw in miniOrange OAuth SSO (versions \u226438.5.8)", "creation_timestamp": "2026-07-14T05:03:16.829011Z"} {"uuid": "e498a2d0-d080-468b-ac06-d41a7e8e8a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57807", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjyftrh2p", "content": "Daily IT Security Digest \u2014 2026-07-14\nor later as soon as possible to close this attack vector.\nSources: https://infosec.exchange/@offseq/116887783224020082\n\n## 6. CRITICAL \u2014 miniOrange OAuth SSO Auth Bypass (CVE-2026-57807)\nAn authentication bypass flaw in miniOrange OAuth SSO (versions \u226438.5.8)", "creation_timestamp": "2026-07-14T05:03:16.829011Z"} https://vulnerability.circl.lu/sighting/e498a2d0-d080-468b-ac06-d41a7e8e8a9e/export Tue, 14 Jul 2026 05:03:16 +0000