{"vulnerability": "CVE-2026-8610", "sightings": [{"uuid": "9722c745-a87b-491a-8398-0e4dd78cefb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8610", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmbvxx73b22a", "content": "CVE-2026-8610 ts-webfonts-for-conoha (CVSS Score 4.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-20T12:32:20.536226Z"}, {"uuid": "55b25b7c-d933-4c7f-bbf5-6718dc26531e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86100", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvfczfl2qt2x", "content": "CVE-2026-86100: Camaleon CMS SSRF via media upload redirect bypass. Versions 2.7.5-2.9.1 expose internal services to authenticated attackers. CVSS 6.4. Unpatched\u2014act now. Details: https://www.valtersit.com/cve/CVE-2026-86100/ #CVE #infosec", "creation_timestamp": "2026-09-13T09:50:18.475131Z"}, {"uuid": "eb2180db-a15e-4722-93ea-8b4db0a64cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86100", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117263107159202125", "content": "CVE-2026-86100: Camaleon CMS SSRF via media upload redirect bypass. Versions 2.7.5-2.9.1 expose internal services to authenticated attackers. CVSS 6.4. Unpatched\u2014act now. Details: https://www.valtersit.com/cve/CVE-2026-86100/ #CVE #infosec", "creation_timestamp": "2026-09-13T09:50:19.633822Z"}, {"uuid": "d76d0882-0c1a-4d85-a4ef-ded95c25b853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86108", "type": "seen", "source": "https://gist.github.com/ichintu/267a83b424137af67bec5f39bcd35594", "content": "This daily threat intelligence digest highlights four critical security updates from September 2026:\n\n\u2022 **Arista EOS (CVE-2026-73447):** Critical (9.4) OS command injection in gNSI Certz/Bootz services allows authenticated users to escalate privileges and fully compromise devices.\n\u2022 **WSO2 API Manager (CVE-2026-5430):** Critical (9.8) JWT signature verification flaw enables forged admin tokens for account takeover; actively exploited in the wild.\n\u2022 **Oracle September 2026 CSPU:** Major patch release addressing 673 vulnerabilities, including several rated CVSS 10.0.\n\u2022 **VeloCloud Edge (CVE-2026-86108):** High (8.0) input validation weakness in management workflows can be abused for elevated OS command execution.\n\n**Recommendation:** Organizations should prioritize immediate patching and threat monitoring for these critical flaws to prevent privilege escalation, account compromise, and active exploitation.", "creation_timestamp": "2026-09-16T08:02:29.882244Z"}, {"uuid": "549e1717-ddcb-41f2-a640-394432fb392f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86106", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmyuslcf224", "content": "CVE-2026-86106 - velocloud edge\nAnyone on the same network as the private HA link between Edge devices can trigger privileged actions without proving their identity. This can give them the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velocloudedge #aristanetworks #CVE #infosec", "creation_timestamp": "2026-09-16T11:10:05.351783Z"}, {"uuid": "9d9c334f-6944-4869-b3e4-3c802a613fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/43buss76asevk", "content": "CVE-2026-86106 - Security Advisory 0179\nCVE ID : CVE-2026-86106\n \n Published : Sept. 16, 2026, 10:12 a.m. | 32\u00a0minutes ago\n \n Description : An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification....", "creation_timestamp": "2026-09-16T11:11:52.504300Z"}, {"uuid": "5627346f-27ce-4736-b8db-7dfed78b42ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86102", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlut6yz372u", "content": "CVE-2026-86102 - watchguard ap\nThe internal management interface of WatchGuard AP can be tricked into running any operating\u2011system command if an attacker can reach the device on the network. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#watchguardap #watchguard #CVE #infosec", "creation_timestamp": "2026-09-28T17:50:07.552602Z"}, {"uuid": "75826030-3c9c-4a55-8d00-2e0e0f2d4bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86102", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvvaokkn2r", "content": "\ud83d\udea8 CVE-2026-86102 \u2014 CVSS 9.3 CRITICAL\n\nAn OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with net...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86102\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:09:10.161744Z"}, {"uuid": "f5b7ab24-f096-453c-b9dd-682a5bd24d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86102", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117350185114320818", "content": "Watch Guard APs with two sev:CRIT and one sev:HIGH CVE.\nhttps://psirt.watchguard.com/CVE-2026-101891\nhttps://psirt.watchguard.com/CVE-2026-86102\nhttps://psirt.watchguard.com/CVE-2026-87969/", "creation_timestamp": "2026-09-28T18:55:22.996870Z"}, {"uuid": "25aac17b-a6d0-4140-99b9-e9f57fb30513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86102", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-972", "content": "", "creation_timestamp": "2026-09-29T05:52:20.000000Z"}, {"uuid": "9827a86c-f33d-4af4-8163-1cf3c5297dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86104", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"}, {"uuid": "8f76b868-ee88-4525-9cdb-948235159e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86101", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"}]}