{"metadata": {"vulnerability": "CVE-2026-85097", "count": 50, "kinds": {"milestone": 4, "sighting": 31, "kev": 5, "other": 10}}, "data": [{"timestamp": "2026-09-03T01:41:17.605Z", "date_only": false, "value": "2026-09-03T01:41:17.605Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85097", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-03T02:05:26Z", "date_only": false, "value": "2026-09-03T02:05:26.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-85097", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-85097", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-08T06:42:09.676Z", "date_only": false, "value": "2026-10-08T06:42:09.676Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85097", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-08T06:42:09.676Z", "date_only": false, "value": "2026-10-08T06:42:09.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-85097", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T07:16:31Z", "date_only": false, "value": "2026-10-08T07:16:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JFVP-GC8P-45GP", "record": "GHSA-JFVP-GC8P-45GP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-08T07:16:31.710Z", "date_only": false, "value": "2026-10-08T07:16:31.710", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85097", "record": "FKIE_CVE-2026-85097", "field": "published"}, {"timestamp": "2026-10-08T08:07:20.184Z", "date_only": false, "value": "2026-10-08T08:07:20.184292Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxdywc3mu42n", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "2197ef99-ebc9-4f7b-9ca4-38d1b1648bea", "content": "\ud83d\udea8 CVE-2026-85097 \u2014 CVSS 9.8 CRITICAL\n\nThe Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85097\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxdywc3mu42n"}, {"timestamp": "2026-10-08T08:20:04.654Z", "date_only": false, "value": "2026-10-08T08:20:04.654188Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdzn2yyxo2n", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "1c8fd314-5a61-4344-8f0e-71ed9a9c3247", "content": "CVE-2026-85097\nThe Bricksforge plugin for WordPress, up through version 3.1.8.9, does not properly check files that users can upload. This lets an unauthenticated visitor place a specially crafted file on your site and run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdzn2yyxo2n"}, {"timestamp": "2026-10-08T09:31:54Z", "date_only": false, "value": "2026-10-08T09:31:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JFVP-GC8P-45GP", "record": "GHSA-JFVP-GC8P-45GP", "field": "published"}, {"timestamp": "2026-10-08T09:31:54Z", "date_only": false, "value": "2026-10-08T09:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JFVP-GC8P-45GP", "record": "GHSA-JFVP-GC8P-45GP", "field": "modified"}, {"timestamp": "2026-10-08T14:24:30.449Z", "date_only": false, "value": "2026-10-08T14:24:30.449178Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85097", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-08T14:24:30.449Z", "date_only": false, "value": "2026-10-08T14:24:30.449178Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85097", "record": "FKIE_CVE-2026-85097", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-08T14:24:41.018Z", "date_only": false, "value": "2026-10-08T14:24:41.018Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85097", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-08T14:24:41.018Z", "date_only": false, "value": "2026-10-08T14:24:41.018Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85097", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T17:24:11.230Z", "date_only": false, "value": "2026-10-08T17:24:11.230", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85097", "record": "FKIE_CVE-2026-85097", "field": "lastModified"}, {"timestamp": "2026-10-09T02:32:30.480Z", "date_only": false, "value": "2026-10-09T02:32:30.480507Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mxfwohv4jz2x", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "dbae3d55-6358-47c0-936e-37a1cbf4615e", "content": "Bricksforge: falla cr\u00edtica explotada (CVE-2026-85097)\n\nActualiz\u00e1 ya: la Bricksforge vulnerabilidad CVE-2026-85097 se explota y ejecuta PHP sin login. Revis\u00e1 tu sitio y pas\u00e1 a la 3.1.8.10 antes de que lo toquen\n\n#bricksforge #cve202685097 #wordpress #rce #pluginvulnerable", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mxfwohv4jz2x"}, {"timestamp": "2026-10-12T09:42:09Z", "date_only": false, "value": "2026-10-12T09:42:09+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-85097", "field": "timestamps.asserted_at", "uuid": "db94a2e5-f7a7-404f-a284-db35f10f33e1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T09:42:09Z", "date_only": false, "value": "2026-10-12T09:42:09+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-85097", "field": "timestamps.first_seen_at", "uuid": "db94a2e5-f7a7-404f-a284-db35f10f33e1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T09:42:09Z", "date_only": false, "value": "2026-10-12T09:42:09+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-85097", "field": "status.status_updated_at", "uuid": "db94a2e5-f7a7-404f-a284-db35f10f33e1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T09:42:09.886Z", "date_only": false, "value": "2026-10-12T09:42:09.886Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-85097", "field": "evidence.0.details.added_date", "uuid": "db94a2e5-f7a7-404f-a284-db35f10f33e1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T09:56:04.191Z", "date_only": false, "value": "2026-10-12T09:56:04.191526Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxoauefoiu2r", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "5942edb2-f17c-48a5-ae29-58cfe5b11cfb", "content": "CVE-2026-85097 enables unauthenticated remote code execution in vulnerable Bricksforge WordPress sites via crafted file upload and metadata handling.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxoauefoiu2r"}, {"timestamp": "2026-10-12T09:58:12.977Z", "date_only": false, "value": "2026-10-12T09:58:12.977405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxoayabqci2q", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "a3a554be-4be7-4df5-9a8e-321e6ab9c475", "content": "CVE-2026-85097 enables unauthenticated remote code execution in vulnerable Bricksforge WordPress sites via crafted file upload and metadata handling.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxoayabqci2q"}, {"timestamp": "2026-10-12T10:01:39.931Z", "date_only": false, "value": "2026-10-12T10:01:39.931981Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mxob6fci3v2o", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "46f0caf6-dc49-43a8-b8cb-5eda046b744e", "content": "Bricksforge \u306e CVSS 10.0 \u8106\u5f31\u6027\u304c\u60aa\u7528\u4e2d\u3001\u672a\u8a8d\u8a3c RCE \u304c\u53ef\u80fd\n\nWordPress \u30d7\u30e9\u30b0\u30a4\u30f3 Bricksforge \u306e CVE-2026-85097 \u306f\u73fe\u5728\u3001\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3002\u8a8d\u8a3c\u306a\u3057\u3067 PHP \u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u3001\u30b5\u30a4\u30c8\u5168\u4f53\u304c\u4fb5\u5bb3\u3055\u308c\u308b\u5371\u967a\u6027\u304c\u3042\u308b\u3002\u7dca\u6025\u30d1\u30c3\u30c1\u306e\u9069\u7528\u304c\u5fc5\u9808\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "url": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mxob6fci3v2o"}, {"timestamp": "2026-10-12T13:23:10.375Z", "date_only": false, "value": "2026-10-12T13:23:10.375915Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxomgq5lqj2i", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "8db6ca71-a736-4308-9cd9-a47ee6f57f21", "content": "Bricksforge WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u3055\u308c\u308b\n\nWordPress\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dPatchstack\u306b\u3088\u308b\u3068\u3001WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cBricksforge\u300d\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-85097\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001CVSS\u30b9\u30b3\u30a2\u306f9.8\u3067\u3059\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3001\u60aa\u610f", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxomgq5lqj2i"}, {"timestamp": "2026-10-12T13:27:17.130Z", "date_only": false, "value": "2026-10-12T13:27:17.130583Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxomo3gnt62g", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "0fdf46f6-32c8-42c2-b9ce-5b119525990c", "content": "Unauthenticated attackers exploit CVE-2026-85097 in Bricksforge to upload arbitrary files, execute code, and fully compromise vulnerable WordPress sites.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxomo3gnt62g"}, {"timestamp": "2026-10-12T13:30:26.138Z", "date_only": false, "value": "2026-10-12T13:30:26.138187Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117428179790798662", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "32f8c869-d35d-49c7-ae78-3f99195f4c0d", "content": "CVE-2026-85097 | Bricksforge WordPress plugin <=3.1.8.9 faces a HIGH severity vuln exploited in the wild. Attackers can upload arbitrary files for RCE. Update to 3.1.8.10 immediately. https://radar.offseq.com/threat/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild-294d102eaf91b415 #OffSeq #WordPress #Vuln #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117428179790798662"}, {"timestamp": "2026-10-12T13:30:28.566Z", "date_only": false, "value": "2026-10-12T13:30:28.566928Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxomtr5jrx2e", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "a9eda2db-4d63-4f31-bc40-1ba6bdf9dffe", "content": "Bricksforge plugin <=3.1.8.9 hit by HIGH severity vuln (CVE-2026-85097) with active exploits. Unauthenticated RCE possible. Update to 3.1.8.10 ASAP. https://radar.offseq.com/threat/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild-294d102eaf91b415 #OffSeq #WordPress #CyberAlert", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxomtr5jrx2e"}, {"timestamp": "2026-10-12T13:35:41.994Z", "date_only": false, "value": "2026-10-12T13:35:41.994685Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxon54sszv2y", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "1457a8c6-aed4-40ff-a7c8-8c669bfca059", "content": "Unauthenticated attackers exploit CVE-2026-85097 in Bricksforge to upload arbitrary files, execute code, and fully compromise vulnerable WordPress sites.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxon54sszv2y"}, {"timestamp": "2026-10-12T13:45:54.415Z", "date_only": false, "value": "2026-10-12T13:45:54.415967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxonpet3uc2b", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "14353977-70c5-489b-bf27-9b1e4f07064c", "content": "\ud83e\udd16 CVE-2026-85097 (CVSS 10.0): unauthenticated RCE in the Bricksforge WordPress plugin via arbitrary PHP upload. Actively exploited in the wild per Patchstack. Patch now.\nhttps://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxonpet3uc2b"}, {"timestamp": "2026-10-12T14:00:35.571Z", "date_only": false, "value": "2026-10-12T14:00:35.571922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxoojn7bn32i", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "e307ffdd-446a-47d3-ae56-2cd954937240", "content": "CVSS 10.0, zero auth, actively exploited: CVE-2026-85097 in the Bricksforge plugin for WordPress. A fake image hides PHP code, the plugin trusts the filename, and the server runs it. Patch to 3.1.8.10. Breakdown: https://www.linkedin.com/feed/update/urn:li:share:7515411083231141888/ #cybersecurity\u2026", "url": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxoojn7bn32i"}, {"timestamp": "2026-10-12T14:01:32.973Z", "date_only": false, "value": "2026-10-12T14:01:32.973597Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxoole67rd2i", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "354c4f88-251e-4ae1-910d-cee198560ed1", "content": "CVSS 10.0, zero auth, actively exploited: CVE-2026-85097 in the Bricksforge plugin for WordPress. A fake image hides PHP, the plugin trusts the filename and the server runs it. Patch to 3.1.8.10. Breakdown: https://www.linkedin.com/feed/update/urn:li:share:7515411083231141888/ #cybersecurity #infos\u2026", "url": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxoole67rd2i"}, {"timestamp": "2026-10-12T14:01:42.960Z", "date_only": false, "value": "2026-10-12T14:01:42.960894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxoolniito2j", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "1d816040-17b2-4adc-ba44-6ef7bfd4db20", "content": "CVSS 10.0, zero auth, actively exploited: CVE-2026-85097 in Bricksforge for WordPress. A fake image hides PHP, the plugin trusts the filename and the server runs it. Patch to 3.1.8.10. Breakdown: https://www.linkedin.com/feed/update/urn:li:share:7515411083231141888/ #cybersecurity #infosec", "url": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxoolniito2j"}, {"timestamp": "2026-10-12T17:11:51.135Z", "date_only": false, "value": "2026-10-12T17:11:51.135251Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117429050104063455", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "8d082301-53da-4607-9bbd-11eebcf65650", "content": "Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE\nA maximum-severity flaw in the Bricksforge plugin for WordPress is under active exploitation, The Hacker News reports. CVE-2026-85097 (CVSS 10.0) lets unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites; versions up to 3.1.8.9 are affected and a patch is available in version 3.1.8.10. https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html", "url": "https://infosec.exchange/users/edwardk/statuses/117429050104063455"}, {"timestamp": "2026-10-12T17:36:26.828Z", "date_only": false, "value": "2026-10-12T17:36:26.828864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxp2llq2xq2d", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "fad640d0-1eac-4468-ba0c-6760e633f07e", "content": "Attackers are exploiting CVE-2026-85097, a critical unauthenticated file-upload and code-execution flaw in the Bricksforge WordPress plugin. Versions 3.1.8.9 and earlier are affected; version 3.1.8.10 patches the issue.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxp2llq2xq2d"}, {"timestamp": "2026-10-12T18:15:47.468Z", "date_only": false, "value": "2026-10-12T18:15:47.468805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxp4rx4vps2h", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "625d733d-9079-4fe4-a2a9-484bc8f0d88d", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-102255 \u00b7 10 people\n2. CVE-2026-85097 \u00b7 8 people\n3. CVE-2026-97229 \u00b7 7 people\n4. CVE-2026-78357 \u00b7 5 people\n5. CVE-2026-93582 \u00b7 5 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxp4rx4vps2h"}, {"timestamp": "2026-10-12T18:15:48.388Z", "date_only": false, "value": "2026-10-12T18:15:48.388244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxp4rxab5c2h", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "9f198eac-83ca-4851-a7d3-1bb675d6e3cc", "content": "2. CVE-2026-85097 \u00b7 8 people\n\ud83d\udfe5 Critical 9.8 \u00b7 Bricksforge\n\nBricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxp4rxab5c2h"}, {"timestamp": "2026-10-13T03:31:16.901Z", "date_only": false, "value": "2026-10-13T03:31:16.901601Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxq3tanw352n", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "3257ef0d-6f59-429f-814e-d7f98cd6185a", "content": "Kritieke kwetsbaarheid in Bricksforge WordPress-plugin maakt code-uitvoering mog\n\nEen ernstige beveiligingsfout, aangeduid als CVE-2026-85097, is ontdekt in de Bricksforge WordPress-plugin. Deze kwetsbaarheid, met een maximale CVSS-score van 10.0, treft versies tot en met 3.1.8.9 en maakt wi...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxq3tanw352n"}, {"timestamp": "2026-10-13T04:52:55.108Z", "date_only": false, "value": "2026-10-13T04:52:55.108519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mxqafakpgf2f", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "36e8fad2-5ad4-44e5-b51b-fa4727eeb1a3", "content": "Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE (CVE-2026-85097) #patchmanagement", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mxqafakpgf2f"}, {"timestamp": "2026-10-13T07:10:21.559Z", "date_only": false, "value": "2026-10-13T07:10:21.559805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxqi2yi5722l", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "60628a32-03de-42b7-8153-a1cfbcab7190", "content": "Bricksforge (WordPress) CVE-2026-85097, CVSS 10.0: upload non autenticato \u2192 RCE, sfruttata dal 7/10. Fix 3.1.8.10. Cerca PHP in uploads/bricksforge/tmp/. #infosec patchstack.com/articles/cri...", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxqi2yi5722l"}, {"timestamp": "2026-10-13T10:00:01Z", "date_only": false, "value": "2026-10-13T10:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-85097", "field": "timestamps.recorded_at", "uuid": "db94a2e5-f7a7-404f-a284-db35f10f33e1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-13T10:00:52.809Z", "date_only": false, "value": "2026-10-13T10:00:52.809200Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db94a2e5-f7a7-404f-a284-db35f10f33e1", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "4152f5e4-493b-469c-8949-d332ccbe0839", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db94a2e5-f7a7-404f-a284-db35f10f33e1"}, {"timestamp": "2026-10-13T11:27:08.875Z", "date_only": false, "value": "2026-10-13T11:27:08.875795Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxqwg6geiv2u", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "7bbd356e-f860-40b9-9f6c-24754e94ffcb", "content": "Bricksforge WordPress plugin CVE-2026-85097, CVSS 9.8 unauthenticated file upload to RCE, is being mass-exploited since 7 Oct. Update to 3.1.8.10 now or block uploads at your WAF. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxqwg6geiv2u"}, {"timestamp": "2026-10-13T11:34:56.997Z", "date_only": false, "value": "2026-10-13T11:34:56.997166Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mxqwu4g3ml2w", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "aa87db29-0a38-4630-9221-aeabff601fee", "content": "Critical security flaw CVE-2026-85097 in Bricksforge WordPress plugin is actively exploited. flaw allows unauthenticated attackers to upload and execute harmful PHP code, risking RCE. Stay updated!", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mxqwu4g3ml2w"}, {"timestamp": "2026-10-13T14:13:32.795Z", "date_only": false, "value": "2026-10-13T14:13:32.795444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxr7ppro2o23", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "9f87aa1e-7ff1-49f3-bf9d-3774c7bc5904", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 3\n\u2022 Extension Bricksforge pour WordPress (CVE-2026-85097), CVSS 9.8 (Hacktualit\u00e9s)\n\u2022 Biblioth\u00e8que Exposed de JetBrains (CVE-2026-108474), CVSS 9.8 (Cyberveille Esant\u00e9)\n\u2022 WatchGuard Firebox (Fireware 12.12.3) (CVE-2026-86131), CVSS 9.2 (Radio CSIRT)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxr7ppro2o23"}, {"timestamp": "2026-10-13T16:26:04.160Z", "date_only": false, "value": "2026-10-13T16:26:04.160754Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxrh4npanq22", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "74f31fcb-5164-4377-abfb-c926a65b6fb6", "content": "Bricksforge\u300cCVE-2026-85097\u300d\uff1a\u6df1\u523b\u306aRCE\u8106\u5f31\u6027\u3078\u306e\u5bfe\u51e6\n\nPatchstack\u306e\u76e3\u8996\u30b7\u30b9\u30c6\u30e0\u306f\u3001WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cBricksforge\u300d\u3092\u72d9\u3063\u305f\u60aa\u7528\u306e\u8a66\u307f\u3092\u300110\u67087\u65e521\u664247\u5206\uff08UTC\uff09\u304b\u3089\u691c\u77e5\u3057\u3066\u3044\u307e\u3057\u305f\u3002\u3053\u308c\u306fCVE\u30ec\u30b3\u30fc\u30c9\u304c\u516c\u958b\u3055\u308c\u308b\u7d049\u6642\u9593\u534a\u524d\u306b\u3042\u305f\u308a\u307e\u3059\u3002\u300cCVE-2026-85097\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxrh4npanq22"}, {"timestamp": "2026-10-13T18:15:54.015Z", "date_only": false, "value": "2026-10-13T18:15:54.015496Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2u5qc2h", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "05c3bf75-38f7-4b2e-bca4-a716933af033", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-97229 \u00b7 29 people\n2. CVE-2026-104935 \u00b7 15 people \ud83d\udd25\n3. CVE-2026-105445 \u00b7 7 people\n4. CVE-2026-102255 \u00b7 6 people\n5. CVE-2026-85097 \u00b7 6 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2u5qc2h"}, {"timestamp": "2026-10-13T18:15:56.200Z", "date_only": false, "value": "2026-10-13T18:15:56.200924Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb33i4c2h", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "426a6729-dfe4-44b7-a345-f753d7370b6e", "content": "5. CVE-2026-85097 \u00b7 6 people\n\ud83d\udfe5 Critical 9.8 \u00b7 Bricksforge\n\nBricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb33i4c2h"}, {"timestamp": "2026-10-14T04:06:07.914Z", "date_only": false, "value": "2026-10-14T04:06:07.914680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxsoagruss2d", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "ecaba536-0c80-4eb1-9777-72f426ac7cf1", "content": "WordPress\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u300cBricksforge\u300d\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u4e0d\u8981\u3067\u30b5\u30a4\u30c8\u4e57\u3063\u53d6\u308a\u306e\u6050\u308c-CVE-2026-85097 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxsoagruss2d"}, {"timestamp": "2026-10-14T06:04:32.381Z", "date_only": false, "value": "2026-10-14T06:04:32.381741Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxsuu7gis72x", "record": "CVE-2026-85097", "field": "creation_timestamp", "uuid": "2cb77b67-d841-4cfd-a19d-2107933737d6", "content": "A critical Bricksforge WordPress plugin vulnerability (CVE-2026-85097) is being actively exploited to upload PHP files. Update to version 3.1.8.10 immediately.\n\n#WordPress #CyberSecurity #Bricksforge #Vulnerability #Malware", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxsuu7gis72x"}]}