<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 13:59:29 +0000</lastBuildDate>
    <item>
      <title>3032cf99-82ea-4fd5-8906-a1c183ca5da0</title>
      <link>https://vulnerability.circl.lu/sighting/3032cf99-82ea-4fd5-8906-a1c183ca5da0/export</link>
      <description>{"uuid": "3032cf99-82ea-4fd5-8906-a1c183ca5da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://t.me/captainsmok3r_official/502", "content": "several security vulnerabilities have been announced for Plesk Panel in recent days. A few of them have CVSS scores at the 8.x and 9.x levels.\n\u2022 CVE-2026-65642 \u2014 Unauthorized access to databases\n\u2022 CVE-2026-65646 \u2014 Arbitrary file read via DNS management and exposure of administrator credentials\n\u2022 CVE-2026-65647 \u2014 Privilege escalation from Plesk user to root\n\u2022 CVE-2026-67394 \u2014 Privilege escalation from customer/reseller account to root", "creation_timestamp": "2026-08-29T00:00:06.977686Z"}</description>
      <content:encoded>{"uuid": "3032cf99-82ea-4fd5-8906-a1c183ca5da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://t.me/captainsmok3r_official/502", "content": "several security vulnerabilities have been announced for Plesk Panel in recent days. A few of them have CVSS scores at the 8.x and 9.x levels.\n\u2022 CVE-2026-65642 \u2014 Unauthorized access to databases\n\u2022 CVE-2026-65646 \u2014 Arbitrary file read via DNS management and exposure of administrator credentials\n\u2022 CVE-2026-65647 \u2014 Privilege escalation from Plesk user to root\n\u2022 CVE-2026-67394 \u2014 Privilege escalation from customer/reseller account to root", "creation_timestamp": "2026-08-29T00:00:06.977686Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3032cf99-82ea-4fd5-8906-a1c183ca5da0/export</guid>
      <pubDate>Sat, 29 Aug 2026 00:00:06 +0000</pubDate>
    </item>
    <item>
      <title>559fae61-8c2a-479d-aa76-c47c206a2f38</title>
      <link>https://vulnerability.circl.lu/sighting/559fae61-8c2a-479d-aa76-c47c206a2f38/export</link>
      <description>{"uuid": "559fae61-8c2a-479d-aa76-c47c206a2f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-854", "content": "", "creation_timestamp": "2026-08-27T16:16:00.859165Z"}</description>
      <content:encoded>{"uuid": "559fae61-8c2a-479d-aa76-c47c206a2f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-854", "content": "", "creation_timestamp": "2026-08-27T16:16:00.859165Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/559fae61-8c2a-479d-aa76-c47c206a2f38/export</guid>
      <pubDate>Thu, 27 Aug 2026 16:16:00 +0000</pubDate>
    </item>
    <item>
      <title>6e366357-79e5-4406-a6db-017de04ccb86</title>
      <link>https://vulnerability.circl.lu/sighting/6e366357-79e5-4406-a6db-017de04ccb86/export</link>
      <description>{"uuid": "6e366357-79e5-4406-a6db-017de04ccb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3kc5caaqeujxk", "content": "CVE-2026-65642 - Plesk Insecure Direct Object Reference Vulnerability\nCVE ID : CVE-2026-65642\n \n Published : Aug. 26, 2026, 10:16 p.m. | 19\u00a0minutes ago\n \n Description : Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote ...", "creation_timestamp": "2026-08-27T00:05:11.377100Z"}</description>
      <content:encoded>{"uuid": "6e366357-79e5-4406-a6db-017de04ccb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3kc5caaqeujxk", "content": "CVE-2026-65642 - Plesk Insecure Direct Object Reference Vulnerability\nCVE ID : CVE-2026-65642\n \n Published : Aug. 26, 2026, 10:16 p.m. | 19\u00a0minutes ago\n \n Description : Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote ...", "creation_timestamp": "2026-08-27T00:05:11.377100Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6e366357-79e5-4406-a6db-017de04ccb86/export</guid>
      <pubDate>Thu, 27 Aug 2026 00:05:11 +0000</pubDate>
    </item>
  </channel>
</rss>
