{"vulnerability": "CVE-2026-102427", "sightings": [{"uuid": "d19d1715-1965-4bc1-afce-4445a40616ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqwr7zkh32y", "content": "\ud83d\udea8 CVE-2026-102427 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - s...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102427\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T18:08:09.608362Z"}, {"uuid": "db5b4ad0-d3b8-4773-8b24-d387d52bbb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwrd62aw5z2p", "content": "CVE-2026-102427: OS CCK for Joomla let anyone upload and run PHP with no login. CVSS 10.0. Fixed in 8.3.16, but OrdaSoft's updater still offers 8.3.14, so install it by hand.\nmysites.guru/blog/ordasof...", "creation_timestamp": "2026-09-30T21:50:03.772869Z"}, {"uuid": "a7bf5d9d-6efa-44dd-9e77-f65b2474847d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwta7id3ko23", "content": "CVE-2026-102427: OS CCK for Joomla let anyone upload and run PHP with no login. CVSS 10.0. Fixed in 8.3.16, but OrdaSoft's updater still offers 8.3.14, so install it by hand.\nmysites.guru/blog/ordasof...", "creation_timestamp": "2026-10-01T16:02:30.152020Z"}, {"uuid": "ab749fd4-0798-4d38-8cdd-6be7a7bf966f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwubymxeky2m", "content": "\ud83d\udccc CVE-2026-102427 - Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the com... https://www.cyberhub.blog/cves/CVE-2026-102427", "creation_timestamp": "2026-10-02T02:07:06.760666Z"}, {"uuid": "cb574e6a-9222-4082-90df-90c3c8c6ccad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "Telegram/FJhHNxuddf7TpLw0kSRARdOIBivVItQHKCcKtq2qfHsVogM", "content": "", "creation_timestamp": "2026-10-01T03:00:06.000000Z"}, {"uuid": "cdca3f10-f678-4296-b207-7de96e22ffb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "Telegram/p8fCe73qPhNi0gtkgFiWePACon_RGM1KmaCzYKDKoMfuYzQ", "content": "", "creation_timestamp": "2026-09-30T23:00:22.000000Z"}, {"uuid": "69fbe353-6022-4462-8dd7-c012ab36f0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "published-proof-of-concept", "source": "Telegram/p8fCe73qPhNi0gtkgFiWePACon_RGM1KmaCzYKDKoMfuYzQ", "content": "", "creation_timestamp": "2026-09-30T23:00:22.000000Z"}]}