<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 16:20:56 +0000</lastBuildDate>
    <item>
      <title>e7552608-5ef9-4285-a957-aab5cf3a7ce8</title>
      <link>https://vulnerability.circl.lu/sighting/e7552608-5ef9-4285-a957-aab5cf3a7ce8/export</link>
      <description>{"uuid": "e7552608-5ef9-4285-a957-aab5cf3a7ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcwgjgtyj24", "content": "CVE-2026-42417 - armember premium\nThe ARMember Premium add\u2011on for WordPress can be accessed by anyone on the internet without logging in, allowing them to send specially crafted requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#armemberpremium #reputeinfosystems #CVE #infosec", "creation_timestamp": "2026-10-07T21:50:04.309591Z"}</description>
      <content:encoded>{"uuid": "e7552608-5ef9-4285-a957-aab5cf3a7ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcwgjgtyj24", "content": "CVE-2026-42417 - armember premium\nThe ARMember Premium add\u2011on for WordPress can be accessed by anyone on the internet without logging in, allowing them to send specially crafted requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#armemberpremium #reputeinfosystems #CVE #infosec", "creation_timestamp": "2026-10-07T21:50:04.309591Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e7552608-5ef9-4285-a957-aab5cf3a7ce8/export</guid>
      <pubDate>Wed, 07 Oct 2026 21:50:04 +0000</pubDate>
    </item>
    <item>
      <title>ffa7e3c9-4aae-4802-b6ed-ce4bc335b170</title>
      <link>https://vulnerability.circl.lu/sighting/ffa7e3c9-4aae-4802-b6ed-ce4bc335b170/export</link>
      <description>{"uuid": "ffa7e3c9-4aae-4802-b6ed-ce4bc335b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tvfzxs2l", "content": "\ud83d\udea8 CVE-2026-42417 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in ARMember Premium &amp;lt;= 7.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42417\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:10:03.575295Z"}</description>
      <content:encoded>{"uuid": "ffa7e3c9-4aae-4802-b6ed-ce4bc335b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tvfzxs2l", "content": "\ud83d\udea8 CVE-2026-42417 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in ARMember Premium &amp;lt;= 7.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42417\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:10:03.575295Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ffa7e3c9-4aae-4802-b6ed-ce4bc335b170/export</guid>
      <pubDate>Tue, 06 Oct 2026 10:10:03 +0000</pubDate>
    </item>
    <item>
      <title>3491f6ca-a2ed-4d44-93a1-794feff6e0bf</title>
      <link>https://vulnerability.circl.lu/sighting/3491f6ca-a2ed-4d44-93a1-794feff6e0bf/export</link>
      <description>{"uuid": "3491f6ca-a2ed-4d44-93a1-794feff6e0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx72xgtcgb2j", "content": "CRITICAL SQL Injection in ARMember Premium &amp;lt;= 7.8 (CVE-2026-42417) allows unauthenticated exploitation. No fix yet \u2014 audit your sites and restrict access. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21e...", "creation_timestamp": "2026-10-06T09:00:28.304797Z"}</description>
      <content:encoded>{"uuid": "3491f6ca-a2ed-4d44-93a1-794feff6e0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx72xgtcgb2j", "content": "CRITICAL SQL Injection in ARMember Premium &amp;lt;= 7.8 (CVE-2026-42417) allows unauthenticated exploitation. No fix yet \u2014 audit your sites and restrict access. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21e...", "creation_timestamp": "2026-10-06T09:00:28.304797Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3491f6ca-a2ed-4d44-93a1-794feff6e0bf/export</guid>
      <pubDate>Tue, 06 Oct 2026 09:00:28 +0000</pubDate>
    </item>
    <item>
      <title>9a3d9795-3e40-4be7-b3e1-b115fd3a865a</title>
      <link>https://vulnerability.circl.lu/sighting/9a3d9795-3e40-4be7-b3e1-b115fd3a865a/export</link>
      <description>{"uuid": "9a3d9795-3e40-4be7-b3e1-b115fd3a865a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393144240761553", "content": "CVE-2026-42417 (CRITICAL): ARMember Premium &amp;lt;= 7.8 is vulnerable to unauthenticated SQL Injection (CWE-89). No mitigation yet \u2014 review deployments &amp;amp; monitor databases closely. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21ef978d1d38 #OffSeq #Vulnerability #SQLInjection #WordPress", "creation_timestamp": "2026-10-06T09:00:26.167471Z"}</description>
      <content:encoded>{"uuid": "9a3d9795-3e40-4be7-b3e1-b115fd3a865a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393144240761553", "content": "CVE-2026-42417 (CRITICAL): ARMember Premium &amp;lt;= 7.8 is vulnerable to unauthenticated SQL Injection (CWE-89). No mitigation yet \u2014 review deployments &amp;amp; monitor databases closely. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21ef978d1d38 #OffSeq #Vulnerability #SQLInjection #WordPress", "creation_timestamp": "2026-10-06T09:00:26.167471Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a3d9795-3e40-4be7-b3e1-b115fd3a865a/export</guid>
      <pubDate>Tue, 06 Oct 2026 09:00:26 +0000</pubDate>
    </item>
  </channel>
</rss>
