{"vulnerability": "CVE-2026-40857", "sightings": [{"uuid": "6c0b2b5c-f699-4bc8-8cb3-04162950a9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40857", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-40854", "content": "", "creation_timestamp": "2026-09-16T12:15:08.417114Z"}, {"uuid": "154d58df-387c-4a6c-af3e-3c82de6f59b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i76akdyx2nbvn", "content": "CVE-2026-40857 - CSRF token bypass in T-Mobile 5G Box IDU routers\nCVE ID : CVE-2026-40857\n \n Published : Sept. 16, 2026, 11:21 a.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal....", "creation_timestamp": "2026-09-16T13:08:05.656002Z"}]}