{"vulnerability": "CVE-2026-1021", "sightings": [{"uuid": "55dc4c89-c681-44c1-9efa-f2d6fad8c427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1021", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10638-0e44b-2.html", "content": "", "creation_timestamp": "2026-01-16T02:15:00.000000Z"}, {"uuid": "bd0f340b-0f15-4007-a3f5-dd0f671786dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1021", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcje7z3ebw2u", "content": "", "creation_timestamp": "2026-01-16T05:23:52.060130Z"}, {"uuid": "3c0febe1-45ca-47ad-8549-224bf5424f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1021", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcki3gc4yn2e", "content": "", "creation_timestamp": "2026-01-16T16:05:33.215147Z"}, {"uuid": "8b1b1c56-b9f9-4044-9fa4-fe776c6e87fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn74n7aq532j", "content": "CVE-2026-10211 - AstrBotDevs AstrBot fs.py _normalize_rw_path authorization\nCVE ID : CVE-2026-10211\n \n Published : June 1, 2026, 1:15 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the funct...", "creation_timestamp": "2026-06-01T03:18:35.337145Z"}, {"uuid": "7876c29a-105d-47d4-97aa-0b17ab258d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn76kylaag2b", "content": "CVE-2026-10210 - AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection\nCVE ID : CVE-2026-10210\n \n Published : June 1, 2026, 1 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerab...", "creation_timestamp": "2026-06-01T03:53:08.744097Z"}, {"uuid": "bea6dc28-6efa-49e3-9d1b-673261669d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7imhnxyv2j", "content": "CVE-2026-10219 - nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection\nCVE ID : CVE-2026-10219\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : A vulnerability was found in nextlevelbuilder GoClaw up to 3.11...", "creation_timestamp": "2026-06-01T06:52:55.377341Z"}, {"uuid": "2eb4ea1f-49a7-4ce5-8446-0f188b8eb911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7ipn6stu2z", "content": "CVE-2026-10218 - nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization\nCVE ID : CVE-2026-10218\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : A vulnerability has been found in nextlevelbuilder GoClaw up to 3.11.3. This affe...", "creation_timestamp": "2026-06-01T06:54:41.933464Z"}, {"uuid": "e461cfe5-d6f0-46a2-ba43-067854d196d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10214", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mn7o2lz7u52v", "content": "zhayujie chatgpt-on-wechat 2.0.8\u4ee5\u524d\u3067OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u5b9f\u884c\u53ef\u80fd\u30022.0.9\u3067\u4fee\u6b63\u3002\nCVE-2026-10214 CVSS 7.3 | HIGH", "creation_timestamp": "2026-06-01T08:30:18.600099Z"}, {"uuid": "0a310039-f8f2-44b0-906d-6ab99184b1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ews3ccgmubde6", "content": "CVE-2026-102106 - Kiteworks Email Protection Gateway improper authentication\nCVE ID : CVE-2026-102106\n \n Published : Sept. 30, 2026, 8:24 p.m. | 35\u00a0minutes ago\n \n Description : Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administr...", "creation_timestamp": "2026-09-30T21:46:54.442196Z"}, {"uuid": "1f8e0380-10bb-4da3-88ec-282b51dbcad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6r7lfflbvlrxo", "content": "CVE-2026-102105 - Kiteworks Email Protection Gateway server-side request forgery\nCVE ID : CVE-2026-102105\n \n Published : Sept. 30, 2026, 8:25 p.m. | 35\u00a0minutes ago\n \n Description : Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request For...", "creation_timestamp": "2026-09-30T21:52:54.639400Z"}, {"uuid": "c7a85463-1e0a-44e4-87f7-742640d7446a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102102", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwre7d5j342y", "content": "\ud83d\udea8 CVE-2026-102102 \u2014 CVSS 9.1 CRITICAL\n\nKiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102102\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:08:39.389591Z"}, {"uuid": "14b39b4d-c2ef-49e4-a011-09646cbea881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102103", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwre7ku23u2f", "content": "\ud83d\udea8 CVE-2026-102103 \u2014 CVSS 9.1 CRITICAL\n\nKiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102103\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:08:47.414915Z"}, {"uuid": "3e5b5d59-7591-446f-85de-60c1f0eeff52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102104", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwre7t3qdx2o", "content": "\ud83d\udea8 CVE-2026-102104 \u2014 CVSS 9.1 CRITICAL\n\nKiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102104\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:08:56.070692Z"}, {"uuid": "543f6e7d-4b98-49c8-9252-cfc8d23152c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102105", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwrea36xrt2u", "content": "\ud83d\udea8 CVE-2026-102105 \u2014 CVSS 9.1 CRITICAL\n\nKiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102105\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:09:04.618773Z"}, {"uuid": "c94fd69d-3540-42ef-81cc-e3ccbd67f12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102106", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwreadppps2n", "content": "\ud83d\udea8 CVE-2026-102106 \u2014 CVSS 9.1 CRITICAL\n\nImproper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative s...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102106\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:09:13.580435Z"}, {"uuid": "6610b0a0-6689-43da-9ed8-5afb9ac390c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102115", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwreallobd2i", "content": "\ud83d\udea8 CVE-2026-102115 \u2014 CVSS 9.8 CRITICAL\n\nKiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthen...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102115\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:09:21.729495Z"}, {"uuid": "21002e05-20b1-4330-9291-6631f8617e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102147", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwreatjcgk2n", "content": "\ud83d\udea8 CVE-2026-102147 \u2014 CVSS 9.3 CRITICAL\n\nA stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to s...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102147\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:09:30.059762Z"}, {"uuid": "4448e6da-d48c-4809-8638-9ae96e8451ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102149", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwreb3fwhl2i", "content": "\ud83d\udea8 CVE-2026-102149 \u2014 CVSS 9.4 CRITICAL\n\nKiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assig...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102149\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:09:38.352874Z"}, {"uuid": "d6c24649-1fcf-49f4-8c76-3490e5886409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102115", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwrrqrlrbl2l", "content": "Kiteworks vulnerabilities fixed in 9.5.1 include CVE-2026-102115, a 9.8 password reset flaw that enables admin account takeover. Patch now.\n\n#Kiteworks #KiteworksVulnerabilities #CVE2026102115 #CVE2026102149 #CVE2026102147 #EmailSecurity #SSRF #PatchNow", "creation_timestamp": "2026-10-01T02:11:04.347138Z"}, {"uuid": "385bee3b-1f66-4f07-b75b-1a30891ccdf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102105", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117363770896067135", "content": "CVE-2026-102105: Kiteworks Email Protection Gateway <9.5.0 has a CRITICAL SSRF (CVSS 9.1) letting remote attackers access internal resources. No confirmed patch \u2014 review vendor guidance & restrict network access. https://radar.offseq.com/threat/cve-2026-102105-cwe-918-server-side-request-forgery-ssrf-in-kiteworks-email-protection-gateway-24b84c616744b5a3 #OffSeq #SSRF #Infosec #Vuln", "creation_timestamp": "2026-10-01T04:30:24.404261Z"}, {"uuid": "c5bdb9de-ac9a-4332-ae16-7f642c8f6080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102105", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwrzjyeowa2q", "content": "CRITICAL SSRF (CVSS 9.1) in Kiteworks Email Protection Gateway <9.5.0 enables unauthorized internal network access. No patch confirmed \u2014 restrict gateway access & check advisories. https://radar.offseq.com/threat/cve-2026-102105-cwe-918-server-side-request-forgery-ssrf-in-kiteworks-email-protecti...", "creation_timestamp": "2026-10-01T04:30:26.265936Z"}, {"uuid": "9ac851ee-465f-4286-87d7-ad64ee86c535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102105", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mws3cwfn4h2z", "content": "Daily IT Security Digest \u2014 2026-10-01\nhttps://stemshop.top/cve/CVE-2026-14157\n\n## 4. Kiteworks Email Protection Gateway SSRF \u2014 CVSS 9.1\nCVE-2026-102105 is a critical server-side request forgery vulnerability in Kiteworks Email Protection Gateway versions below 9.5.0, enabling remote attackers to", "creation_timestamp": "2026-10-01T05:02:16.454193Z"}, {"uuid": "bba3978a-9465-41ae-a3c2-d7f386d36d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102106", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117364478756381420", "content": "CVE-2026-102106 (CRITICAL, CVSS 9.1): Kiteworks Email Protection Gateway (<9.5.0) suffers improper admin authentication \u2014 attackers can bypass password checks & gain full admin access. Restrict admin service access & monitor for patches. https://radar.offseq.com/threat/cve-2026-102106-cwe-287-improper-authentication-in-kiteworks-email-protection-gateway-f705d7916e63696f #OffSeq #CVE #Infosec", "creation_timestamp": "2026-10-01T07:30:25.625798Z"}, {"uuid": "f35e4bda-1b1e-4a3d-9bcf-875d82dffa5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102106", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwsdlv5ekz2j", "content": "Kiteworks Email Protection Gateway (v<9.5.0) is impacted by a CRITICAL improper authentication flaw (CVE-2026-102106). Admins: restrict admin service access & watch for vendor updates. Full details: https://radar.offseq.com/threat/cve-2026-102106-cwe-287-improper-authentication-in-kiteworks-email...", "creation_timestamp": "2026-10-01T07:30:28.475011Z"}, {"uuid": "4d209557-470e-4549-91da-d0ccdc00a2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102149", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117364832632969385", "content": "Kiteworks Email Protection Gateway <9.5.1 has a CRITICAL vuln (CVE-2026-102149, CVSS 9.4): attackers can assign certificates to other user accounts, risking encrypted email exposure & unauthorized access. Await patch, consider disabling cert login. https://radar.offseq.com/threat/cve-2026-102149-cwe-306-missing-authentication-for-critical-function-in-kiteworks-email-protection-4008bd0cefe1b69f #OffSeq #CVE2026102149 #infosec", "creation_timestamp": "2026-10-01T09:00:25.190837Z"}, {"uuid": "52a4c549-e1ce-4cdc-a558-49ed8d75a1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102147", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117365186729870247", "content": "CVE-2026-102147: Stored XSS in Kiteworks Core (<9.5.1) rated CRITICAL (CVSS 9.3). Unauth attacker can hijack admin sessions via injected JS \u2014 admin takeover risk. No patch yet; restrict access & monitor logs. https://radar.offseq.com/threat/cve-2026-102147-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-de1db64f96a0fee0 #OffSeq #CVE2026102147 #AppSec \u26a1\ufe0f", "creation_timestamp": "2026-10-01T10:30:28.322434Z"}, {"uuid": "08c35667-41cb-47ac-8d22-e2a69ca9d908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102147", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwsnntgcmh2e", "content": "Stored XSS (CVE-2026-102147) in Kiteworks Core (all <9.5.1) is CRITICAL. Unauth attacker can hijack admin sessions. No patch yet \u2014 restrict access & monitor admin logins. https://radar.offseq.com/threat/cve-2026-102147-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-...", "creation_timestamp": "2026-10-01T10:30:31.575175Z"}, {"uuid": "bc748a9e-3df0-4296-8a0b-2d28c5f730d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102159", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxah3pahqv2z", "content": "\ud83d\udea8 CVE-2026-102159 \u2014 CVSS 9.3 CRITICAL\n\nAn access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102159\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T22:10:15.085208Z"}, {"uuid": "d251e20d-e274-444f-b46b-4b2aafedb166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102162", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxah3xqtyz2n", "content": "\ud83d\udea8 CVE-2026-102162 \u2014 CVSS 9.4 CRITICAL\n\nOn affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102162\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T22:10:24.065487Z"}, {"uuid": "c354a0e0-aaf3-4424-8467-e567df023cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102159", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxatdmz3jg2r", "content": "Critical Arista CloudVision CUE vulnerability CVE-2026-102159 (CVSS 9.8) and five more flaws hit CV-CUE. Update to WiFi 2026.2.1 now.\n\n#Arista #CloudVision #CVCUE #CVE2026102159 #CVE2026102161 #WiFiSecurity #NetworkSecurity #Vulnerability", "creation_timestamp": "2026-10-07T01:49:26.981879Z"}, {"uuid": "640fb9ef-1706-401b-8011-ac5bdf72fa8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102159", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbx57umb32n", "content": "CVE-2026-102159 - cloudvision cue\nThe backend component of Arista CloudVision CUE can be reached over the network without any login, allowing outsiders to use features meant only for internal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cloudvisioncue #aristanetworks #CVE #infosec", "creation_timestamp": "2026-10-07T12:30:09.211070Z"}, {"uuid": "69d7cbec-7975-4bb1-b6f0-60d80fbe1d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102162", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbxp3idn62q", "content": "CVE-2026-102162 - wi-fi access points\nArista Wi\u2011Fi access points that use a captive portal or have an application firewall on any Wi\u2011Fi network can be sent a specially crafted packet that makes the device stop\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aristanetworks #CVE #infosec", "creation_timestamp": "2026-10-07T12:40:05.429602Z"}, {"uuid": "30d34ae0-6d4f-4be4-8181-9dcfd5285777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102167", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbxp4zkvv2z", "content": "CVE-2026-102167 - wi-fi access points\nArista Wi\u2011Fi access points have a flaw in their wired network connection that lets anyone on the same local network cause the device to stop working or potentially run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aristanetworks #CVE #infosec", "creation_timestamp": "2026-10-07T12:40:06.770171Z"}, {"uuid": "695518da-3dc4-4530-aec1-63c2d298e395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102173", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxbzwvgrmd2j", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3Kirki\u306bStored XSS\u8106\u5f31\u6027\u3002\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\uff086.3.1\u307e\u3067\uff09\u3067\u3001\u767b\u9332\u30e1\u30bf\u30c7\u30fc\u30bf\u306b\u30b9\u30af\u30ea\u30d7\u30c8\u304c\u6df7\u5165\u53ef\u80fd\u3002\u30e6\u30fc\u30b6\u30fc\u767b\u9332\u6709\u52b9\u5316\u3068\u7279\u5b9a\u306e\u30da\u30fc\u30b8\u8868\u793a\u3067\u3001\u975e\u8a8d\u8a3c\u653b\u6483\u8005\u306b\u3088\u308b\u2026\nCVE-2026-102173 CVSS 7.2 | HIGH", "creation_timestamp": "2026-10-07T13:20:14.683259Z"}, {"uuid": "8d1618ec-8a64-4dbb-9a1a-b3abf1263b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102115", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxdes655u72u", "content": "\ud83d\udccc CVE-2026-102115 - Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address... https://www.cyberhub.blog/cves/CVE-2026-102115", "creation_timestamp": "2026-10-08T02:07:07.219823Z"}]}