<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 02 Sep 2026 11:29:04 +0000</lastBuildDate>
    <item>
      <title>eaa6c6c2-91d7-43d5-a51e-18c3dcc33286</title>
      <link>https://vulnerability.circl.lu/sighting/eaa6c6c2-91d7-43d5-a51e-18c3dcc33286/export</link>
      <description>{"uuid": "eaa6c6c2-91d7-43d5-a51e-18c3dcc33286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/M1tcQDXp0xt9SGNq1y4EHMMYm_mdZJtAONErVuHBShI8RHI", "content": "", "creation_timestamp": "2026-09-02T01:00:17.720760Z"}</description>
      <content:encoded>{"uuid": "eaa6c6c2-91d7-43d5-a51e-18c3dcc33286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/M1tcQDXp0xt9SGNq1y4EHMMYm_mdZJtAONErVuHBShI8RHI", "content": "", "creation_timestamp": "2026-09-02T01:00:17.720760Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eaa6c6c2-91d7-43d5-a51e-18c3dcc33286/export</guid>
      <pubDate>Wed, 02 Sep 2026 01:00:17 +0000</pubDate>
    </item>
    <item>
      <title>531eec25-d9a6-4106-ba4f-541ba354e74f</title>
      <link>https://vulnerability.circl.lu/sighting/531eec25-d9a6-4106-ba4f-541ba354e74f/export</link>
      <description>{"uuid": "531eec25-d9a6-4106-ba4f-541ba354e74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/0_ZePU3z1OawFEHN1iA2HBha57r29KdDO83DysbbQUG6xbo", "content": "", "creation_timestamp": "2026-09-02T01:00:17.438639Z"}</description>
      <content:encoded>{"uuid": "531eec25-d9a6-4106-ba4f-541ba354e74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/0_ZePU3z1OawFEHN1iA2HBha57r29KdDO83DysbbQUG6xbo", "content": "", "creation_timestamp": "2026-09-02T01:00:17.438639Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/531eec25-d9a6-4106-ba4f-541ba354e74f/export</guid>
      <pubDate>Wed, 02 Sep 2026 01:00:17 +0000</pubDate>
    </item>
    <item>
      <title>6297a776-7cf4-4aa6-bde3-5234cbfc5ed4</title>
      <link>https://vulnerability.circl.lu/sighting/6297a776-7cf4-4aa6-bde3-5234cbfc5ed4/export</link>
      <description>{"uuid": "6297a776-7cf4-4aa6-bde3-5234cbfc5ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-02T01:00:15.299033Z"}</description>
      <content:encoded>{"uuid": "6297a776-7cf4-4aa6-bde3-5234cbfc5ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-02T01:00:15.299033Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6297a776-7cf4-4aa6-bde3-5234cbfc5ed4/export</guid>
      <pubDate>Wed, 02 Sep 2026 01:00:15 +0000</pubDate>
    </item>
    <item>
      <title>73573059-7ba9-478a-9e69-448ee83f172b</title>
      <link>https://vulnerability.circl.lu/sighting/73573059-7ba9-478a-9e69-448ee83f172b/export</link>
      <description>{"uuid": "73573059-7ba9-478a-9e69-448ee83f172b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-31T00:00:46.706306Z"}</description>
      <content:encoded>{"uuid": "73573059-7ba9-478a-9e69-448ee83f172b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-31T00:00:46.706306Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/73573059-7ba9-478a-9e69-448ee83f172b/export</guid>
      <pubDate>Mon, 31 Aug 2026 00:00:46 +0000</pubDate>
    </item>
    <item>
      <title>15339f6e-2e23-46bb-b1a0-e4a2f4510d4e</title>
      <link>https://vulnerability.circl.lu/sighting/15339f6e-2e23-46bb-b1a0-e4a2f4510d4e/export</link>
      <description>{"uuid": "15339f6e-2e23-46bb-b1a0-e4a2f4510d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mucjn27obl2y", "content": "\ud83e\udd16 CVE-2026-76581 (CVSS 9.8): auth bypass in WPMU DEV Dashboard; critical flaws also in Avada, TranslatePress, Pods, GiveWP \u2014 WordPress site takeover or RCE possible.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T13:45:29.602207Z"}</description>
      <content:encoded>{"uuid": "15339f6e-2e23-46bb-b1a0-e4a2f4510d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mucjn27obl2y", "content": "\ud83e\udd16 CVE-2026-76581 (CVSS 9.8): auth bypass in WPMU DEV Dashboard; critical flaws also in Avada, TranslatePress, Pods, GiveWP \u2014 WordPress site takeover or RCE possible.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T13:45:29.602207Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/15339f6e-2e23-46bb-b1a0-e4a2f4510d4e/export</guid>
      <pubDate>Sun, 30 Aug 2026 13:45:29 +0000</pubDate>
    </item>
    <item>
      <title>0bd71e06-e2b0-48c1-9c13-98a8c1827d50</title>
      <link>https://vulnerability.circl.lu/sighting/0bd71e06-e2b0-48c1-9c13-98a8c1827d50/export</link>
      <description>{"uuid": "0bd71e06-e2b0-48c1-9c13-98a8c1827d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-30T03:00:04.578271Z"}</description>
      <content:encoded>{"uuid": "0bd71e06-e2b0-48c1-9c13-98a8c1827d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-30T03:00:04.578271Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0bd71e06-e2b0-48c1-9c13-98a8c1827d50/export</guid>
      <pubDate>Sun, 30 Aug 2026 03:00:04 +0000</pubDate>
    </item>
    <item>
      <title>bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5</title>
      <link>https://vulnerability.circl.lu/sighting/bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5/export</link>
      <description>{"uuid": "bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mubaoczury2g", "content": "\ud83e\udd16 Five critical WordPress plugin/theme flaws (WPMU DEV Dashboard, Avada, TranslatePress, Pods, GiveWP) lead to auth bypass, account takeover and RCE. CVE-2026-76581, CVSS 9.8.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T01:32:28.773582Z"}</description>
      <content:encoded>{"uuid": "bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mubaoczury2g", "content": "\ud83e\udd16 Five critical WordPress plugin/theme flaws (WPMU DEV Dashboard, Avada, TranslatePress, Pods, GiveWP) lead to auth bypass, account takeover and RCE. CVE-2026-76581, CVSS 9.8.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T01:32:28.773582Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5/export</guid>
      <pubDate>Sun, 30 Aug 2026 01:32:28 +0000</pubDate>
    </item>
    <item>
      <title>1e932d80-372f-4bd1-b789-0d440990db31</title>
      <link>https://vulnerability.circl.lu/sighting/1e932d80-372f-4bd1-b789-0d440990db31/export</link>
      <description>{"uuid": "1e932d80-372f-4bd1-b789-0d440990db31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "content": "Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n  CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in", "creation_timestamp": "2026-08-30T01:00:33.275003Z"}</description>
      <content:encoded>{"uuid": "1e932d80-372f-4bd1-b789-0d440990db31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "content": "Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n  CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in", "creation_timestamp": "2026-08-30T01:00:33.275003Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1e932d80-372f-4bd1-b789-0d440990db31/export</guid>
      <pubDate>Sun, 30 Aug 2026 01:00:33 +0000</pubDate>
    </item>
    <item>
      <title>1a2218ca-1f42-4a32-a409-ea0a79dbff93</title>
      <link>https://vulnerability.circl.lu/sighting/1a2218ca-1f42-4a32-a409-ea0a79dbff93/export</link>
      <description>{"uuid": "1a2218ca-1f42-4a32-a409-ea0a79dbff93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-30T00:00:38.227906Z"}</description>
      <content:encoded>{"uuid": "1a2218ca-1f42-4a32-a409-ea0a79dbff93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-30T00:00:38.227906Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1a2218ca-1f42-4a32-a409-ea0a79dbff93/export</guid>
      <pubDate>Sun, 30 Aug 2026 00:00:38 +0000</pubDate>
    </item>
    <item>
      <title>6bfd1759-ec78-4890-a28a-595fccae0b16</title>
      <link>https://vulnerability.circl.lu/sighting/6bfd1759-ec78-4890-a28a-595fccae0b16/export</link>
      <description>{"uuid": "6bfd1759-ec78-4890-a28a-595fccae0b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-29T21:00:04.140479Z"}</description>
      <content:encoded>{"uuid": "6bfd1759-ec78-4890-a28a-595fccae0b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-29T21:00:04.140479Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6bfd1759-ec78-4890-a28a-595fccae0b16/export</guid>
      <pubDate>Sat, 29 Aug 2026 21:00:04 +0000</pubDate>
    </item>
  </channel>
</rss>
