https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 16 Sep 2026 03:55:24 +0000 https://vulnerability.circl.lu/sighting/0c124240-95c3-4677-b64d-4d1df84c25dc/export {"uuid": "0c124240-95c3-4677-b64d-4d1df84c25dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117230941126467449", "content": "CVE-2026-52771: YesWiki SQL injection via attacker-controlled page tags in ApiController::deletePage(). CVSS 8.3. Low-privilege users can exploit arbitrary tags to inject SQL. Unpatched\u2014no fix available. Update or disable API if exposed. https://www.valtersit.com/cve/CVE-2026-527", "creation_timestamp": "2026-09-07T17:30:03.907750Z"} {"uuid": "0c124240-95c3-4677-b64d-4d1df84c25dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117230941126467449", "content": "CVE-2026-52771: YesWiki SQL injection via attacker-controlled page tags in ApiController::deletePage(). CVSS 8.3. Low-privilege users can exploit arbitrary tags to inject SQL. Unpatched\u2014no fix available. Update or disable API if exposed. https://www.valtersit.com/cve/CVE-2026-527", "creation_timestamp": "2026-09-07T17:30:03.907750Z"} https://vulnerability.circl.lu/sighting/0c124240-95c3-4677-b64d-4d1df84c25dc/export Mon, 07 Sep 2026 17:30:03 +0000 https://vulnerability.circl.lu/sighting/8db42a39-4df0-4413-8738-4aa4a8f66fe1/export {"uuid": "8db42a39-4df0-4413-8738-4aa4a8f66fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muwzvx4f632p", "content": "CVE-2026-52771: YesWiki SQL injection via attacker-controlled page tags in ApiController::deletePage(). CVSS 8.3. Low-privilege users can exploit arbitrary tags to inject SQL. Unpatched\u2014no fix available. Update or disable API if exposed. https://www.valtersit.com/cve/CVE-2026-527", "creation_timestamp": "2026-09-07T17:30:03.060623Z"} {"uuid": "8db42a39-4df0-4413-8738-4aa4a8f66fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muwzvx4f632p", "content": "CVE-2026-52771: YesWiki SQL injection via attacker-controlled page tags in ApiController::deletePage(). CVSS 8.3. Low-privilege users can exploit arbitrary tags to inject SQL. Unpatched\u2014no fix available. Update or disable API if exposed. https://www.valtersit.com/cve/CVE-2026-527", "creation_timestamp": "2026-09-07T17:30:03.060623Z"} https://vulnerability.circl.lu/sighting/8db42a39-4df0-4413-8738-4aa4a8f66fe1/export Mon, 07 Sep 2026 17:30:03 +0000 https://vulnerability.circl.lu/sighting/5ab7d1ee-cb96-4fd9-abd5-67ac9ed23b10/export {"uuid": "5ab7d1ee-cb96-4fd9-abd5-67ac9ed23b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqsldu7st22", "content": "\ud83d\udfe0 CVE-2026-52771 - High (8.3)\n\nYesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiControlle...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52771/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:53.920245Z"} {"uuid": "5ab7d1ee-cb96-4fd9-abd5-67ac9ed23b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqsldu7st22", "content": "\ud83d\udfe0 CVE-2026-52771 - High (8.3)\n\nYesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiControlle...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52771/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:53.920245Z"} https://vulnerability.circl.lu/sighting/5ab7d1ee-cb96-4fd9-abd5-67ac9ed23b10/export Sat, 05 Sep 2026 06:02:53 +0000 https://vulnerability.circl.lu/sighting/5d5349b1-9990-4f18-bde3-21a0dcc37154/export {"uuid": "5d5349b1-9990-4f18-bde3-21a0dcc37154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52771", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-8f2v-2qhj-gfwg", "content": "", "creation_timestamp": "2026-07-09T22:35:16.945085Z"} {"uuid": "5d5349b1-9990-4f18-bde3-21a0dcc37154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52771", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-8f2v-2qhj-gfwg", "content": "", "creation_timestamp": "2026-07-09T22:35:16.945085Z"} https://vulnerability.circl.lu/sighting/5d5349b1-9990-4f18-bde3-21a0dcc37154/export Thu, 09 Jul 2026 22:35:16 +0000