{"vulnerability": "CVE-2026-1184", "sightings": [{"uuid": "5eb5683d-51aa-4828-875f-9265ba10614b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1184", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "6e26c517-db05-427d-b66a-405190069035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11846", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3ll2uhvd2u", "content": "\ud83d\udfe0 CVE-2026-11846 - High (8.1)\n\nThe\u00a0\niVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary Fi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11846/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T11:00:22.720515Z"}, {"uuid": "174fb4ab-6524-4052-a462-3d231663bcdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11849", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3ovy7pxt2w", "content": "\ud83d\udd34 CVE-2026-11849 - Critical (9.8)\n\nThe\u00a0\niRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11849/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T12:00:10.655713Z"}, {"uuid": "b621cda4-6961-415f-b386-3dfd2750df7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11846", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo3sweifbi2b", "content": "CVE-2026-11846 - IEI Integration Corp\uff5ciVEC-IEI Virtualization Edge Computer - Arbitrary File Deletion\nCVE ID : CVE-2026-11846\n \n Published : June 12, 2026, 10:16 a.m. | 2\u00a0hours, 50\u00a0minutes ago\n \n Description : The\u00a0\niVEC-IEI Virtualization Edge Computer developed by IEI Integra...", "creation_timestamp": "2026-06-12T13:11:57.848392Z"}, {"uuid": "358d5457-f540-4116-a9fc-98d856887140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo3t7cvbrf25", "content": "CVE-2026-11849 - IEI Integration Corp\uff5ciRM-IEI Remote Management - Hard-coded Credentials\nCVE ID : CVE-2026-11849\n \n Published : June 12, 2026, 11:16 a.m. | 1\u00a0hour, 50\u00a0minutes ago\n \n Description : The\u00a0\niRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded ...", "creation_timestamp": "2026-06-12T13:16:58.014919Z"}, {"uuid": "2b978a22-b593-42e5-b743-353c299d3413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11849", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvm325le2b", "content": "\ud83d\udea8  ALERT: CVE-2026-11849\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe\u00a0\niRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vulnerability, allowing unauthenticated remote attackers to exploit hard-coded credentials to gain administrative privileges on the database.\n\n\ud83c\udfaf WHO'S AFF", "creation_timestamp": "2026-06-14T23:15:51.832722Z"}, {"uuid": "9b32721a-95b3-49e6-92d0-597ded43ffc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11849", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3modpdc4lkr2i", "content": "\ud83d\udea8 CRITICAL: CVE-2026-11849\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe\u00a0\niRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vulnerability, allowing unauthenticated remote attackers to exploit hard-coded credentials to gain administrative privileges on the database.\n\n\ud83c\udfaf WHO'S A", "creation_timestamp": "2026-06-15T16:28:54.477507Z"}, {"uuid": "cab7a514-5d85-48cf-bc2d-89f4933f90a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11846", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html", "content": "", "creation_timestamp": "2026-06-12T00:57:00.000000Z"}, {"uuid": "9667dd2e-2005-4221-8901-1963978f279e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11844", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html", "content": "", "creation_timestamp": "2026-06-12T00:57:00.000000Z"}, {"uuid": "1ebd3804-c741-45b0-8337-7c830c2209b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11845", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html", "content": "", "creation_timestamp": "2026-06-12T00:57:00.000000Z"}, {"uuid": "11d4f45b-4d85-4fbd-ab68-05d5a35fc040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11847", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html", "content": "", "creation_timestamp": "2026-06-12T00:57:00.000000Z"}, {"uuid": "8e57e238-65f6-4b33-a285-a4fbb6c0dfbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11848", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10972-32032-2.html", "content": "", "creation_timestamp": "2026-06-12T01:11:00.000000Z"}, {"uuid": "d62e690c-8461-4d03-b413-3bc7f209424d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11849", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10972-32032-2.html", "content": "", "creation_timestamp": "2026-06-12T01:11:00.000000Z"}, {"uuid": "22e669e5-612d-40dd-afa0-6dcd5d7f9836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4h2qajt5n4k6r", "content": "CVE-2026-11840 - SQL Injection\nCVE ID : CVE-2026-11840\n \n Published : Aug. 13, 2026, 8:16 a.m. | 18\u00a0minutes ago\n \n Description : Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL in...", "creation_timestamp": "2026-08-13T08:56:33.425492Z"}, {"uuid": "32bfa21d-369e-48dd-8d45-abd27e4e113d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11840", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msxg6mr26g2v", "content": "\u5bfe\u8c61\u88fd\u54c1\u540d\u3001\u30d0\u30fc\u30b8\u30e7\u30f3\u3001\u8106\u5f31\u6027\u306e\u5185\u5bb9\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u5bfe\u8c61\u3001\u653b\u6483\u8005\u304c\u53ef\u80fd\u306b\u306a\u308b\u884c\u70ba\u3001\u3053\u308c\u3089\u5168\u3066\u304c\u8a18\u4e8b\u5185\u5bb9\u306b\u542b\u307e\u308c\u308b\u5834\u5408\u3001\u305d\u308c\u3089\u3092\u65e5\u672c\u8a9e95\u6587\u5b57\u4ee5\u5185\u3067\u8981\u7d04\u3057\u307e\u3059\u3002  \u3082\u3057\u3001\u3053\u308c\u3089\u306e\u89b3\u70b9\u306e\u3046\u3061\u4e00\u3064\u3067\u3082\u6b20\u3051\u3066\u2026\nCVE-2026-11840 CVSS 8.8 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-11840", "creation_timestamp": "2026-08-13T10:19:15.394423Z"}, {"uuid": "5420a3b1-2c39-4120-ad50-c1262f3b490d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11840", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msy5fvgvex2m", "content": "CVE-2026-11840 - Authenticated SQLi in Zohocorp ManageEngine Password Manager Pro &amp; PAM360. CVSS 8.8. Unpatched. Update immediately. #CVE #Zoho #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-11840/", "creation_timestamp": "2026-08-13T17:14:56.025870Z"}, {"uuid": "66482f13-e637-4ab7-9398-cd9c745661ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11840", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117089323928949996", "content": "CVE-2026-11840 - Authenticated SQLi in Zohocorp ManageEngine Password Manager Pro &amp; PAM360. CVSS 8.8. Unpatched. Update immediately. #CVE #Zoho #infosec\nhttps://www.valtersit.com/cve/CVE-2026-11840/", "creation_timestamp": "2026-08-13T17:15:11.430540Z"}, {"uuid": "48bfea8e-e8ad-4335-bd28-af408d8034ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11841", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfcaovmt2a", "content": "CVE-2026-11841 - CVE-2026-11841\nCVE ID : CVE-2026-11841\n \n Published : July 28, 2026, 10:16 a.m. | 23\u00a0minutes ago\n \n Description : An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to impr...", "creation_timestamp": "2026-07-28T12:16:53.649330Z"}, {"uuid": "eb76107f-9759-4d6b-bd39-94a60304c401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11841", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrppujw4pe2z", "content": "CVE-2026-11841 - inspectorp61x\nAn attacker can access and modify sensitive files on Google AppEngine without a password. This allows them to change application settings and passwords, and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#inspectorp61x #sickag #CVE #infosec", "creation_timestamp": "2026-07-28T15:26:04.848660Z"}]}