{"vulnerability": "CVE-2026-1633", "sightings": [{"uuid": "aba7fb7c-00e3-43d8-971b-bfdc95a608e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1633", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3me2quodo4wo2", "content": "", "creation_timestamp": "2026-02-04T20:50:45.145376Z"}, {"uuid": "22bae218-c608-4fee-b301-9497c521b185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1633", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdym4gpcah2v", "content": "", "creation_timestamp": "2026-02-04T00:20:10.769471Z"}, {"uuid": "af98d295-0727-438b-aeeb-ef8c24bb63fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1633", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-04", "content": "", "creation_timestamp": "2026-02-03T11:00:00.000000Z"}, {"uuid": "9478b726-6ce8-46fb-a9b7-591ab991edf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16339", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5pemnuz3idiia", "content": "CVE-2026-16339 - Rejected reason: This CVE ID has been rejected or\nCVE ID : CVE-2026-16339\n \n Published : July 29, 2026, 11:16 p.m. | 28\u00a0minutes ago\n \n Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\n \n Severity: 0.0 | ...", "creation_timestamp": "2026-07-30T00:51:18.065042Z"}, {"uuid": "b6805596-ebf7-437b-bc7f-9e3d59ca0654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr45zfra2n2z", "content": "CVE-2026-16337\nA low-privileged user can gain admin access to dotCMS and potentially execute arbitrary shell commands. This affects dotCMS versions 21.02 through 26.06.22-03 on all platforms. To fix, update to a patched\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T20:46:05.980097Z"}, {"uuid": "5d3687fa-eea0-4314-b676-8d50054e2c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4rhfqiwn2i", "content": "CVE-2026-16331 - D-Link DNS-320 save_ajax.php unrestricted upload\nCVE ID : CVE-2026-16331\n \n Published : July 21, 2026, 1:16 a.m. | 28\u00a0minutes ago\n \n Description : A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file ...", "creation_timestamp": "2026-07-21T02:33:56.590125Z"}, {"uuid": "97d73482-25b3-40a1-a5ab-164089073f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4sl7xhkx2x", "content": "CVE-2026-16330 - D-Link DNS-320 uploadify.php unrestricted upload\nCVE ID : CVE-2026-16330\n \n Published : July 21, 2026, 1:16 a.m. | 28\u00a0minutes ago\n \n Description : A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /...", "creation_timestamp": "2026-07-21T02:53:58.518430Z"}, {"uuid": "acbde0b5-f667-42cc-9e9a-63b6dc81706a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr55egb3my2i", "content": "CVE-2026-16336 - trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect\nCVE ID : CVE-2026-16336\n \n Published : July 21, 2026, 4:16 a.m. | 1\u00a0hour, 28\u00a0minutes ago\n \n Description : A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/t...", "creation_timestamp": "2026-07-21T06:07:01.504865Z"}, {"uuid": "869da923-fbf8-4aab-9b5b-f77af09c274c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16332", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr553hh77q2j", "content": "CVE-2026-16332 - D-Link DNS-320 multi_uploadify.php unrestricted upload\nCVE ID : CVE-2026-16332\n \n Published : July 21, 2026, 3:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file...", "creation_timestamp": "2026-07-21T06:02:00.562155Z"}, {"uuid": "f8f38946-c827-419c-b98c-26319a234ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16334", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr56id5pik2i", "content": "CVE-2026-16334 - itsourcecode Hospital Management System prescriptionorder.php sql injection\nCVE ID : CVE-2026-16334\n \n Published : July 21, 2026, 3:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : A vulnerability was identified in itsourcecode Hospital Management System 1.0...", "creation_timestamp": "2026-07-21T06:27:06.385208Z"}, {"uuid": "a8839e77-df6d-43dd-afcb-c181a242d8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-16336", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-16336", "content": "", "creation_timestamp": "2026-07-21T08:15:03.708630Z"}, {"uuid": "480d32c2-4d65-4b41-92e4-6d8d4ce32f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16338", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv7mrtrurl2y", "content": "Patch CVE-2026-16338 immediately. Learn how this 9.9 CVSS flaw allows arbitrary file write attacks in IBM DataStage and how to secure your data today.\n\n#CVE202616338 #IBMDataStage #CyberSecurity #InfoSec #ArbitraryFileWrite #CloudSecurity #VulnerabilityPatch", "creation_timestamp": "2026-09-11T03:29:04.598863Z"}, {"uuid": "97fcd7dd-5624-412a-ba63-503c44f48c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16338", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pffm7d2t", "content": "CVE-2026-16338 - datastage on cloud pak for data\nIBM DataStage running on Cloud Pak for Data version 5.4.0.0 does not properly check file paths, allowing someone who has logged in to write files anywhere on the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-09-14T21:50:05.695798Z"}, {"uuid": "d6838d7c-f5a0-44dd-bf31-99bd36f08ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16338", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4ppy4vy2y", "content": "\ud83d\udea8 CVE-2026-16338 \u2014 CVSS 9.9 CRITICAL\n\nIBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to pe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-16338\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:10.666464Z"}, {"uuid": "17557078-9281-4d91-98b6-e66c79d3dc4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16335", "type": "seen", "source": "https://gist.github.com/ichintu/bb350504840f7717d8931db615795f78", "content": "Today\u2019s threat intelligence highlights three key vulnerabilities:\n\n\u2022 **CVE-2026-12944 (Critical, 9.6):** IBM Langflow OSS 1.0.0\u20131.10.0 contains a scanner defect that falsely validates components with `socket`/`urllib` imports, enabling root code execution, AWS credential theft via IMDSv1 SSRF, and lateral movement.  \n\u2022 **3BB Compromise:** Thai broadband provider 3BB was breached via a MeshCentral backdoor (CVE-2024-21762), granting attackers persistent root access to target and exfiltrate subscriber credentials.  \n\u2022 **CVE-2026-16335 (High, 8.1):** IBM DataStage on Cloud Pak for Data 5.4.0.0 suffers from a path traversal flaw allowing authenticated attackers to read, write, or delete arbitrary files.", "creation_timestamp": "2026-09-15T00:04:06.297001Z"}]}