https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 24 Sep 2026 08:05:18 +0000 https://vulnerability.circl.lu/sighting/d194755c-81eb-44c5-b8bd-40f2e8b4b4a6/export {"uuid": "d194755c-81eb-44c5-b8bd-40f2e8b4b4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwaq4o5kqp2x", "content": "WordPress\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u516c\u958b\u76f4\u5f8c\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\n\n\u516c\u958b\u3055\u308c\u305f\u3070\u304b\u308a\u306eWordPress\u306e\u8106\u5f31\u6027\u304c\u516c\u958b\u304b\u3089\u6570\u6642\u9593\u4ee5\u5185\u306b\u60aa\u7528\u3055\u308c\u59cb\u3081\u3001\u3059\u3067\u306b\u5b9f\u969b\u306e\u4fb5\u5bb3\u306b\u307e\u3067\u767a\u5c55\u3057\u3066\u3044\u308b\u3068\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dPatchstack\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-87902\uff08CVSS\u30b9\u30b3\u30a29.2)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001WordPress\u306e\u30da\u30fc\u30b8\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u89e3\u6c7a\u51e6\u7406\u306b\u5b58\u5728\u3059\u308b\u30d1", "creation_timestamp": "2026-09-24T07:26:40.149276Z"} {"uuid": "d194755c-81eb-44c5-b8bd-40f2e8b4b4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwaq4o5kqp2x", "content": "WordPress\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u516c\u958b\u76f4\u5f8c\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\n\n\u516c\u958b\u3055\u308c\u305f\u3070\u304b\u308a\u306eWordPress\u306e\u8106\u5f31\u6027\u304c\u516c\u958b\u304b\u3089\u6570\u6642\u9593\u4ee5\u5185\u306b\u60aa\u7528\u3055\u308c\u59cb\u3081\u3001\u3059\u3067\u306b\u5b9f\u969b\u306e\u4fb5\u5bb3\u306b\u307e\u3067\u767a\u5c55\u3057\u3066\u3044\u308b\u3068\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dPatchstack\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-87902\uff08CVSS\u30b9\u30b3\u30a29.2)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001WordPress\u306e\u30da\u30fc\u30b8\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u89e3\u6c7a\u51e6\u7406\u306b\u5b58\u5728\u3059\u308b\u30d1", "creation_timestamp": "2026-09-24T07:26:40.149276Z"} https://vulnerability.circl.lu/sighting/d194755c-81eb-44c5-b8bd-40f2e8b4b4a6/export Thu, 24 Sep 2026 07:26:40 +0000 https://vulnerability.circl.lu/sighting/58cb814c-92ad-4364-a72e-1b413ce22e6d/export {"uuid": "58cb814c-92ad-4364-a72e-1b413ce22e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mwaq4f7kqz2n", "content": "CVE-2026-87902 enables unauthenticated path traversal leading to remote code execution in affected WordPress setups.\n", "creation_timestamp": "2026-09-24T07:26:30.950431Z"} {"uuid": "58cb814c-92ad-4364-a72e-1b413ce22e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mwaq4f7kqz2n", "content": "CVE-2026-87902 enables unauthenticated path traversal leading to remote code execution in affected WordPress setups.\n", "creation_timestamp": "2026-09-24T07:26:30.950431Z"} https://vulnerability.circl.lu/sighting/58cb814c-92ad-4364-a72e-1b413ce22e6d/export Thu, 24 Sep 2026 07:26:30 +0000 https://vulnerability.circl.lu/sighting/aace7490-3cd0-4689-8a8b-6e8b79d47baa/export {"uuid": "aace7490-3cd0-4689-8a8b-6e8b79d47baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwaq4afbjg2c", "content": "CVE-2026-87902 enables unauthenticated path traversal leading to remote code execution in affected WordPress setups.\n", "creation_timestamp": "2026-09-24T07:26:25.888072Z"} {"uuid": "aace7490-3cd0-4689-8a8b-6e8b79d47baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwaq4afbjg2c", "content": "CVE-2026-87902 enables unauthenticated path traversal leading to remote code execution in affected WordPress setups.\n", "creation_timestamp": "2026-09-24T07:26:25.888072Z"} https://vulnerability.circl.lu/sighting/aace7490-3cd0-4689-8a8b-6e8b79d47baa/export Thu, 24 Sep 2026 07:26:25 +0000 https://vulnerability.circl.lu/sighting/35253ad2-7502-4ff0-96e4-10a040751039/export {"uuid": "35253ad2-7502-4ff0-96e4-10a040751039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwanmp5ywy2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-86296: 25 interactions\nCVE-2026-7273: 20 interactions\nCVE-2026-58704: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-94127: 10 interactions\nCVE-2026-69836: 7 interactions\nCVE-2026-87902: 7 interactions\n", "creation_timestamp": "2026-09-24T06:41:57.630290Z"} {"uuid": "35253ad2-7502-4ff0-96e4-10a040751039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwanmp5ywy2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-86296: 25 interactions\nCVE-2026-7273: 20 interactions\nCVE-2026-58704: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-94127: 10 interactions\nCVE-2026-69836: 7 interactions\nCVE-2026-87902: 7 interactions\n", "creation_timestamp": "2026-09-24T06:41:57.630290Z"} https://vulnerability.circl.lu/sighting/35253ad2-7502-4ff0-96e4-10a040751039/export Thu, 24 Sep 2026 06:41:57 +0000 https://vulnerability.circl.lu/sighting/e698a0ee-13c2-4842-bd3d-2c04fd9c0654/export {"uuid": "e698a0ee-13c2-4842-bd3d-2c04fd9c0654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://t.me/thehackernews/10148", "content": "\u26a1 Attackers are exploiting WordPress CVE-2026-87902 within hours of disclosure.\n\nThe attacks use pearcmd.php to write attacker-controlled PHP files to disk, but only when specific theme and server conditions are met.\n\n\ud83d\udd17 How the exploit works \u2192 https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html", "creation_timestamp": "2026-09-24T05:57:05.000000Z"} {"uuid": "e698a0ee-13c2-4842-bd3d-2c04fd9c0654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "exploited", "source": "https://t.me/thehackernews/10148", "content": "\u26a1 Attackers are exploiting WordPress CVE-2026-87902 within hours of disclosure.\n\nThe attacks use pearcmd.php to write attacker-controlled PHP files to disk, but only when specific theme and server conditions are met.\n\n\ud83d\udd17 How the exploit works \u2192 https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html", "creation_timestamp": "2026-09-24T05:57:05.000000Z"} https://vulnerability.circl.lu/sighting/e698a0ee-13c2-4842-bd3d-2c04fd9c0654/export Thu, 24 Sep 2026 05:57:05 +0000 https://vulnerability.circl.lu/sighting/363353d0-f8a3-4aa5-8861-39a2bfd83585/export {"uuid": "363353d0-f8a3-4aa5-8861-39a2bfd83585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mwak77jepq2n", "content": "Hackers Exploit Critical WordPress Flaw for Code\u00a0Execution\n\nHackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can allow attackers to write malicious files and execute shell commands.", "creation_timestamp": "2026-09-24T05:40:43.828114Z"} {"uuid": "363353d0-f8a3-4aa5-8861-39a2bfd83585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mwak77jepq2n", "content": "Hackers Exploit Critical WordPress Flaw for Code\u00a0Execution\n\nHackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can allow attackers to write malicious files and execute shell commands.", "creation_timestamp": "2026-09-24T05:40:43.828114Z"} https://vulnerability.circl.lu/sighting/363353d0-f8a3-4aa5-8861-39a2bfd83585/export Thu, 24 Sep 2026 05:40:43 +0000 https://vulnerability.circl.lu/sighting/01dfa8a4-8177-4693-8c49-ff8fca5a1111/export {"uuid": "01dfa8a4-8177-4693-8c49-ff8fca5a1111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwajwg4rqc2r", "content": "\ud83e\udd16 CVE-2026-87902: critical WordPress flaw actively exploited. Attackers write files to disk that execute shell commands on access \u2014 patch and audit webroots for webshells.\n\nhttps://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "creation_timestamp": "2026-09-24T05:35:47.870134Z"} {"uuid": "01dfa8a4-8177-4693-8c49-ff8fca5a1111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwajwg4rqc2r", "content": "\ud83e\udd16 CVE-2026-87902: critical WordPress flaw actively exploited. Attackers write files to disk that execute shell commands on access \u2014 patch and audit webroots for webshells.\n\nhttps://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/", "creation_timestamp": "2026-09-24T05:35:47.870134Z"} https://vulnerability.circl.lu/sighting/01dfa8a4-8177-4693-8c49-ff8fca5a1111/export Thu, 24 Sep 2026 05:35:47 +0000 https://vulnerability.circl.lu/sighting/77d272c2-6c5d-4c6a-be20-0802b075f19d/export {"uuid": "77d272c2-6c5d-4c6a-be20-0802b075f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/wordpress-remote-code-execution-vulnerability_20260924", "content": "", "creation_timestamp": "2026-09-24T04:45:01.756957Z"} {"uuid": "77d272c2-6c5d-4c6a-be20-0802b075f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/wordpress-remote-code-execution-vulnerability_20260924", "content": "", "creation_timestamp": "2026-09-24T04:45:01.756957Z"} https://vulnerability.circl.lu/sighting/77d272c2-6c5d-4c6a-be20-0802b075f19d/export Thu, 24 Sep 2026 04:45:01 +0000 https://vulnerability.circl.lu/sighting/e90b2bdd-f484-417b-b03a-28cb8c79523a/export {"uuid": "e90b2bdd-f484-417b-b03a-28cb8c79523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaeubmwm62y", "content": "\ud83d\udcf0 CVE-2026-87902 Mulai Dieksploitasi, Hacker Targetkan WordPress untuk Eksekusi Kode\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-87902-wordpress-rce/\n\n#cpanel #cve #cybersecurity #php #rce #remoteCodeExecution #vulnerability #webSecurity #wordpress #wordpressSecu", "creation_timestamp": "2026-09-24T04:05:07.431196Z"} {"uuid": "e90b2bdd-f484-417b-b03a-28cb8c79523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87902", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaeubmwm62y", "content": "\ud83d\udcf0 CVE-2026-87902 Mulai Dieksploitasi, Hacker Targetkan WordPress untuk Eksekusi Kode\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-87902-wordpress-rce/\n\n#cpanel #cve #cybersecurity #php #rce #remoteCodeExecution #vulnerability #webSecurity #wordpress #wordpressSecu", "creation_timestamp": "2026-09-24T04:05:07.431196Z"} https://vulnerability.circl.lu/sighting/e90b2bdd-f484-417b-b03a-28cb8c79523a/export Thu, 24 Sep 2026 04:05:07 +0000 https://vulnerability.circl.lu/sighting/b86921a4-e215-4a3a-9d24-d89e4f10edb1/export {"uuid": "b86921a4-e215-4a3a-9d24-d89e4f10edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwacqkpmmk2d", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\n\nWordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated loc\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T03:27:15.079925Z"} {"uuid": "b86921a4-e215-4a3a-9d24-d89e4f10edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwacqkpmmk2d", "content": "CVE-2026-87902: how close is your WordPress to remote code execution?\n\nWordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated loc\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T03:27:15.079925Z"} https://vulnerability.circl.lu/sighting/b86921a4-e215-4a3a-9d24-d89e4f10edb1/export Thu, 24 Sep 2026 03:27:15 +0000