{"vulnerability": "CVE-2026-40855", "sightings": [{"uuid": "4fcb4a89-e074-42a6-9c6e-ba1507f456f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvn5vrq7pl2j", "content": "CVE-2026-40855 - t-mobile 5g box idu\nThe T-Mobile 5G Box IDU router\u2019s ping feature can be tricked into running any command the attacker supplies. An attacker who can log in could gain full control of the device. Upgrade\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wnc #CVE #infosec", "creation_timestamp": "2026-09-16T12:40:07.209508Z"}, {"uuid": "c1ed5af4-05cf-4fc4-a924-68aa44dea1c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:45:07.730112Z"}, {"uuid": "626dc0c9-2bcc-4810-b800-d62fc082078b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40855", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvncslrkgs2t", "content": "\ud83d\udea8 CVE-2026-40855 \u2014 CVSS 9.3 CRITICAL\n\nWNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping f...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-40855\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T14:07:48.158437Z"}]}