{"vulnerability": "CVE-2026-16272", "sightings": [{"uuid": "2f0bf10f-b527-4611-91aa-ca83109e1f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16272", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv36ekenpx2x", "content": "PayTR Virtual Pos iFrame API (v9x) WHMCS Module v9.0.0 faces a CRITICAL vuln (CVE-2026-16272, CVSS 9.1) impacting confidentiality & integrity. No patch yet \u2014 restrict access & watch for updates. https://radar.offseq.com/threat/cve-2026-16272-cwe-348-use-of-less-trusted-source-in-paytr-payment-and...", "creation_timestamp": "2026-09-09T09:00:28.168109Z"}, {"uuid": "4f19d0a7-7482-43f3-997d-06a7c51ec5e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16272", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117240261799525810", "content": "CVE-2026-16272 (CVSS 9.1, CRITICAL) in PayTR Virtual Pos iFrame API (v9x) WHMCS Module v9.0.0: Use of less trusted source can compromise confidentiality and integrity. No patch yet \u2014 restrict access and monitor vendor updates. https://radar.offseq.com/threat/cve-2026-16272-cwe-348-use-of-less-trusted-source-in-paytr-payment-and-electronic-money-institution-04a905be1a132f6a #OffSeq #CVE2026_16272 #infosec", "creation_timestamp": "2026-09-09T09:00:32.072295Z"}, {"uuid": "35a5292f-31d2-4579-80a8-3cbaac34acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16272", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3c46q45h2f", "content": "\ud83d\udea8 CVE-2026-16272 \u2014 CVSS 9.1 CRITICAL\n\nUse of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-16272\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T10:07:20.748038Z"}, {"uuid": "53cc0955-b16e-4bd4-a6ca-f72241f8e68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16272", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4lmbiovl2w", "content": "CVE-2026-16272 - paytr virtual pos iframe api (v9x) whmcs module\nThe PayTR Virtual POS iFrame plug\u2011in for the WHMCS billing system, versions 9.0.0 through 9.0.2, can be tricked into accepting forged identifiers. An attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-09T22:30:04.104153Z"}]}