https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 05 Aug 2026 05:26:13 +0000 https://vulnerability.circl.lu/sighting/768d58c2-3506-4d82-a9f8-fe585c379083/export {"uuid": "768d58c2-3506-4d82-a9f8-fe585c379083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mscevw6uqu2o", "content": "MaxSite CMS 105.2 has a CRITICAL RCE vulnerability (CVSS 9.3). Attackers can inject PHP code post-install via install endpoint. Restrict endpoint access & monitor for suspicious POSTs ASAP. https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-max...", "creation_timestamp": "2026-08-05T01:30:35.788037Z"} {"uuid": "768d58c2-3506-4d82-a9f8-fe585c379083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mscevw6uqu2o", "content": "MaxSite CMS 105.2 has a CRITICAL RCE vulnerability (CVSS 9.3). Attackers can inject PHP code post-install via install endpoint. Restrict endpoint access & monitor for suspicious POSTs ASAP. https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-max...", "creation_timestamp": "2026-08-05T01:30:35.788037Z"} https://vulnerability.circl.lu/sighting/768d58c2-3506-4d82-a9f8-fe585c379083/export Wed, 05 Aug 2026 01:30:35 +0000 https://vulnerability.circl.lu/sighting/0040b53c-4463-4a15-9faa-51829c27975c/export {"uuid": "0040b53c-4463-4a15-9faa-51829c27975c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117040312010612030", "content": "CVE-2026-70553: CRITICAL RCE in MaxSite CMS 105.2 (CVSS 9.3). Attackers can inject PHP via POST to the install endpoint, gaining persistent code exec as www-data. Restrict endpoint & monitor traffic until patched. Details: https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-maxsite-maxsite-cms-5161bdfb2e6804e9 #OffSeq #CVE #websecurity #RCE", "creation_timestamp": "2026-08-05T01:30:33.470662Z"} {"uuid": "0040b53c-4463-4a15-9faa-51829c27975c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117040312010612030", "content": "CVE-2026-70553: CRITICAL RCE in MaxSite CMS 105.2 (CVSS 9.3). Attackers can inject PHP via POST to the install endpoint, gaining persistent code exec as www-data. Restrict endpoint & monitor traffic until patched. Details: https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-maxsite-maxsite-cms-5161bdfb2e6804e9 #OffSeq #CVE #websecurity #RCE", "creation_timestamp": "2026-08-05T01:30:33.470662Z"} https://vulnerability.circl.lu/sighting/0040b53c-4463-4a15-9faa-51829c27975c/export Wed, 05 Aug 2026 01:30:33 +0000 https://vulnerability.circl.lu/sighting/0dd99267-d08f-47f9-94b3-d48c2f06cbca/export {"uuid": "0dd99267-d08f-47f9-94b3-d48c2f06cbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvszpbyv2t", "content": "\ud83d\udd34 CVE-2026-70553 - Critical (9.8)\n\nMaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70553/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T21:00:32.637761Z"} {"uuid": "0dd99267-d08f-47f9-94b3-d48c2f06cbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvszpbyv2t", "content": "\ud83d\udd34 CVE-2026-70553 - Critical (9.8)\n\nMaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70553/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T21:00:32.637761Z"} https://vulnerability.circl.lu/sighting/0dd99267-d08f-47f9-94b3-d48c2f06cbca/export Tue, 04 Aug 2026 21:00:32 +0000 https://vulnerability.circl.lu/sighting/9b3cec41-93e0-4b1e-b306-eff374abfd25/export {"uuid": "9b3cec41-93e0-4b1e-b306-eff374abfd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbt7x7g372u", "content": "CVE-2026-70553 - maxsite cms\nMaxSite CMS allows attackers to inject malicious code into the application's configuration file, potentially leading to unauthorized access and data theft. This vulnerability\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxsitecms #maxsite #CVE #infosec", "creation_timestamp": "2026-08-04T20:14:04.354569Z"} {"uuid": "9b3cec41-93e0-4b1e-b306-eff374abfd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbt7x7g372u", "content": "CVE-2026-70553 - maxsite cms\nMaxSite CMS allows attackers to inject malicious code into the application's configuration file, potentially leading to unauthorized access and data theft. This vulnerability\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxsitecms #maxsite #CVE #infosec", "creation_timestamp": "2026-08-04T20:14:04.354569Z"} https://vulnerability.circl.lu/sighting/9b3cec41-93e0-4b1e-b306-eff374abfd25/export Tue, 04 Aug 2026 20:14:04 +0000