<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 12:58:02 +0000</lastBuildDate>
    <item>
      <title>eec6e37c-3479-49ad-a956-666a3286eb63</title>
      <link>https://vulnerability.circl.lu/sighting/eec6e37c-3479-49ad-a956-666a3286eb63/export</link>
      <description>{"uuid": "eec6e37c-3479-49ad-a956-666a3286eb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv36hko4jm2m", "content": "\ud83d\udfe0 CVE-2026-76009 - High (8.1)\n\nThe Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76009/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T09:02:08.391074Z"}</description>
      <content:encoded>{"uuid": "eec6e37c-3479-49ad-a956-666a3286eb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv36hko4jm2m", "content": "\ud83d\udfe0 CVE-2026-76009 - High (8.1)\n\nThe Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76009/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T09:02:08.391074Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eec6e37c-3479-49ad-a956-666a3286eb63/export</guid>
      <pubDate>Wed, 09 Sep 2026 09:02:08 +0000</pubDate>
    </item>
    <item>
      <title>bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0</title>
      <link>https://vulnerability.circl.lu/sighting/bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0/export</link>
      <description>{"uuid": "bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6frwvztmdadfn", "content": "CVE-2026-76009 - Next-Cart Store to WooCommerce Migration\nCVE ID : CVE-2026-76009\n \n Published : 9. September 2026 06:17 | 42\u00a0Minuten ago\n \n Description : The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions u...", "creation_timestamp": "2026-09-09T07:05:49.979480Z"}</description>
      <content:encoded>{"uuid": "bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6frwvztmdadfn", "content": "CVE-2026-76009 - Next-Cart Store to WooCommerce Migration\nCVE ID : CVE-2026-76009\n \n Published : 9. September 2026 06:17 | 42\u00a0Minuten ago\n \n Description : The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions u...", "creation_timestamp": "2026-09-09T07:05:49.979480Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0/export</guid>
      <pubDate>Wed, 09 Sep 2026 07:05:49 +0000</pubDate>
    </item>
    <item>
      <title>50c9f2ee-3fb0-4a6f-ab84-b457429b79e2</title>
      <link>https://vulnerability.circl.lu/sighting/50c9f2ee-3fb0-4a6f-ab84-b457429b79e2/export</link>
      <description>{"uuid": "50c9f2ee-3fb0-4a6f-ab84-b457429b79e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2ucq2csq2h", "content": "Next-Cart Store to WooCommerce Migration plugin (\u22643.9.8) hit by HIGH severity auth bypass \u2014 enables unauthenticated SQL execution &amp;amp; admin account creation. Check vendor guidance &amp;amp; monitor for patches. https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen19...", "creation_timestamp": "2026-09-09T06:00:28.471008Z"}</description>
      <content:encoded>{"uuid": "50c9f2ee-3fb0-4a6f-ab84-b457429b79e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2ucq2csq2h", "content": "Next-Cart Store to WooCommerce Migration plugin (\u22643.9.8) hit by HIGH severity auth bypass \u2014 enables unauthenticated SQL execution &amp;amp; admin account creation. Check vendor guidance &amp;amp; monitor for patches. https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen19...", "creation_timestamp": "2026-09-09T06:00:28.471008Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/50c9f2ee-3fb0-4a6f-ab84-b457429b79e2/export</guid>
      <pubDate>Wed, 09 Sep 2026 06:00:28 +0000</pubDate>
    </item>
    <item>
      <title>a528f2d2-73cf-4e07-a657-ae63ade7deeb</title>
      <link>https://vulnerability.circl.lu/sighting/a528f2d2-73cf-4e07-a657-ae63ade7deeb/export</link>
      <description>{"uuid": "a528f2d2-73cf-4e07-a657-ae63ade7deeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239554096140693", "content": "CVE-2026-76009 (HIGH): Next-Cart Store to WooCommerce Migration \u22643.9.8 exposes an auth bypass via REST API. Attackers can execute arbitrary SQL &amp;amp; delete files \u2014 full site compromise possible. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen1990-next-cart-store-to-woocommerce-e35aad4a96ee528d #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-09-09T06:00:26.725303Z"}</description>
      <content:encoded>{"uuid": "a528f2d2-73cf-4e07-a657-ae63ade7deeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239554096140693", "content": "CVE-2026-76009 (HIGH): Next-Cart Store to WooCommerce Migration \u22643.9.8 exposes an auth bypass via REST API. Attackers can execute arbitrary SQL &amp;amp; delete files \u2014 full site compromise possible. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen1990-next-cart-store-to-woocommerce-e35aad4a96ee528d #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-09-09T06:00:26.725303Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a528f2d2-73cf-4e07-a657-ae63ade7deeb/export</guid>
      <pubDate>Wed, 09 Sep 2026 06:00:26 +0000</pubDate>
    </item>
    <item>
      <title>8f24c38f-05c6-487e-a822-94b1d361178e</title>
      <link>https://vulnerability.circl.lu/sighting/8f24c38f-05c6-487e-a822-94b1d361178e/export</link>
      <description>{"uuid": "8f24c38f-05c6-487e-a822-94b1d361178e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtgk5eacfy2e", "content": "CVE-2026-76008 - cf-n1-s\nA security issue has been discovered in the Comfast CF-N1-S 2.6.0.1. This affects the way it handles certain image files. An attacker can potentially send a malicious image to the device,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#comfast #CVE #infosec", "creation_timestamp": "2026-08-19T10:40:04.265315Z"}</description>
      <content:encoded>{"uuid": "8f24c38f-05c6-487e-a822-94b1d361178e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtgk5eacfy2e", "content": "CVE-2026-76008 - cf-n1-s\nA security issue has been discovered in the Comfast CF-N1-S 2.6.0.1. This affects the way it handles certain image files. An attacker can potentially send a malicious image to the device,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#comfast #CVE #infosec", "creation_timestamp": "2026-08-19T10:40:04.265315Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8f24c38f-05c6-487e-a822-94b1d361178e/export</guid>
      <pubDate>Wed, 19 Aug 2026 10:40:04 +0000</pubDate>
    </item>
    <item>
      <title>f987c12c-4ee1-4e84-83b2-d814c3742c51</title>
      <link>https://vulnerability.circl.lu/sighting/f987c12c-4ee1-4e84-83b2-d814c3742c51/export</link>
      <description>{"uuid": "f987c12c-4ee1-4e84-83b2-d814c3742c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117120645700764366", "content": "CVE-2026-76003 (CRITICAL): Stack-based buffer overflow in UTT HiPER 1200GW (2.5.3-170306). Remote code execution possible via timestart argument; public exploit exists. No patch yet. Restrict access &amp;amp; monitor. https://radar.offseq.com/threat/cve-2026-76003-stack-based-buffer-overflow-in-utt-hiper-1200gw-f42b168f89ef1ec7 #OffSeq #CVE202676003 #infosec #vuln", "creation_timestamp": "2026-08-19T06:00:32.813450Z"}</description>
      <content:encoded>{"uuid": "f987c12c-4ee1-4e84-83b2-d814c3742c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117120645700764366", "content": "CVE-2026-76003 (CRITICAL): Stack-based buffer overflow in UTT HiPER 1200GW (2.5.3-170306). Remote code execution possible via timestart argument; public exploit exists. No patch yet. Restrict access &amp;amp; monitor. https://radar.offseq.com/threat/cve-2026-76003-stack-based-buffer-overflow-in-utt-hiper-1200gw-f42b168f89ef1ec7 #OffSeq #CVE202676003 #infosec #vuln", "creation_timestamp": "2026-08-19T06:00:32.813450Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f987c12c-4ee1-4e84-83b2-d814c3742c51/export</guid>
      <pubDate>Wed, 19 Aug 2026 06:00:32 +0000</pubDate>
    </item>
    <item>
      <title>d4969e4e-0d81-4dae-a5a9-cdaa1c2f2439</title>
      <link>https://vulnerability.circl.lu/sighting/d4969e4e-0d81-4dae-a5a9-cdaa1c2f2439/export</link>
      <description>{"uuid": "d4969e4e-0d81-4dae-a5a9-cdaa1c2f2439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtg2jh5t4z2e", "content": "UTT HiPER 1200GW v2.5.3-170306 faces a CRITICAL stack buffer overflow (CVE-2026-76003). Exploit code is public \u2014 no patch yet. Restrict access &amp;amp; monitor for attacks. https://radar.offseq.com/threat/cve-2026-76003-stack-based-buffer-overflow-in-utt-hiper-1200gw-f42b168f89ef1ec7 #OffSeq #CVE2026760...", "creation_timestamp": "2026-08-19T06:00:30.899920Z"}</description>
      <content:encoded>{"uuid": "d4969e4e-0d81-4dae-a5a9-cdaa1c2f2439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtg2jh5t4z2e", "content": "UTT HiPER 1200GW v2.5.3-170306 faces a CRITICAL stack buffer overflow (CVE-2026-76003). Exploit code is public \u2014 no patch yet. Restrict access &amp;amp; monitor for attacks. https://radar.offseq.com/threat/cve-2026-76003-stack-based-buffer-overflow-in-utt-hiper-1200gw-f42b168f89ef1ec7 #OffSeq #CVE2026760...", "creation_timestamp": "2026-08-19T06:00:30.899920Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d4969e4e-0d81-4dae-a5a9-cdaa1c2f2439/export</guid>
      <pubDate>Wed, 19 Aug 2026 06:00:30 +0000</pubDate>
    </item>
    <item>
      <title>ed4888ce-5574-4960-acbd-4843d4bac095</title>
      <link>https://vulnerability.circl.lu/sighting/ed4888ce-5574-4960-acbd-4843d4bac095/export</link>
      <description>{"uuid": "ed4888ce-5574-4960-acbd-4843d4bac095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtfxuh3xr42j", "content": "Daily IT Security Digest \u2014 2026-08-19\nTRENDnet TEW-823DRU (CVSS 9.4, RCE via `/cgi-bin/wan.cgi`) and **CVE-2026-76008** on Comfast CF-N1-S v2.6.0.1 (CVSS 10, stack-based overflow in `get_para_from_uri`). Both enable remote code execution on widely-deployed consumer/enterprise networking gear.", "creation_timestamp": "2026-08-19T05:13:00.174117Z"}</description>
      <content:encoded>{"uuid": "ed4888ce-5574-4960-acbd-4843d4bac095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtfxuh3xr42j", "content": "Daily IT Security Digest \u2014 2026-08-19\nTRENDnet TEW-823DRU (CVSS 9.4, RCE via `/cgi-bin/wan.cgi`) and **CVE-2026-76008** on Comfast CF-N1-S v2.6.0.1 (CVSS 10, stack-based overflow in `get_para_from_uri`). Both enable remote code execution on widely-deployed consumer/enterprise networking gear.", "creation_timestamp": "2026-08-19T05:13:00.174117Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ed4888ce-5574-4960-acbd-4843d4bac095/export</guid>
      <pubDate>Wed, 19 Aug 2026 05:13:00 +0000</pubDate>
    </item>
    <item>
      <title>450cc067-41df-4c61-bb14-7e526eb138c7</title>
      <link>https://vulnerability.circl.lu/sighting/450cc067-41df-4c61-bb14-7e526eb138c7/export</link>
      <description>{"uuid": "450cc067-41df-4c61-bb14-7e526eb138c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76004", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtfvig7y6o2c", "content": "CRITICAL buffer overflow (CVE-2026-76004) in UTT HiPER 1250GW v3.2.7-210907-180535. No patch \u2014 restrict remote HTTP access &amp;amp; monitor for suspicious 'pvid' traffic. Details: https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE...", "creation_timestamp": "2026-08-19T04:30:26.994529Z"}</description>
      <content:encoded>{"uuid": "450cc067-41df-4c61-bb14-7e526eb138c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76004", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtfvig7y6o2c", "content": "CRITICAL buffer overflow (CVE-2026-76004) in UTT HiPER 1250GW v3.2.7-210907-180535. No patch \u2014 restrict remote HTTP access &amp;amp; monitor for suspicious 'pvid' traffic. Details: https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE...", "creation_timestamp": "2026-08-19T04:30:26.994529Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/450cc067-41df-4c61-bb14-7e526eb138c7/export</guid>
      <pubDate>Wed, 19 Aug 2026 04:30:26 +0000</pubDate>
    </item>
    <item>
      <title>15b25e73-f4db-425c-bc29-c26e373dadf3</title>
      <link>https://vulnerability.circl.lu/sighting/15b25e73-f4db-425c-bc29-c26e373dadf3/export</link>
      <description>{"uuid": "15b25e73-f4db-425c-bc29-c26e373dadf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76004", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117120291598213539", "content": "UTT HiPER 1250GW v3.2.7-210907-180535 hit by CRITICAL stack-based buffer overflow (CVE-2026-76004) in HTTP handler. Exploitable via 'pvid' arg. No patch yet \u2014 restrict remote access &amp;amp; monitor traffic. https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE202676004 #Vuln #Infosec", "creation_timestamp": "2026-08-19T04:30:25.116433Z"}</description>
      <content:encoded>{"uuid": "15b25e73-f4db-425c-bc29-c26e373dadf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76004", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117120291598213539", "content": "UTT HiPER 1250GW v3.2.7-210907-180535 hit by CRITICAL stack-based buffer overflow (CVE-2026-76004) in HTTP handler. Exploitable via 'pvid' arg. No patch yet \u2014 restrict remote access &amp;amp; monitor traffic. https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE202676004 #Vuln #Infosec", "creation_timestamp": "2026-08-19T04:30:25.116433Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/15b25e73-f4db-425c-bc29-c26e373dadf3/export</guid>
      <pubDate>Wed, 19 Aug 2026 04:30:25 +0000</pubDate>
    </item>
  </channel>
</rss>
