{"vulnerability": "CVE-2026-8613", "sightings": [{"uuid": "91496959-b778-45df-be2b-6ef703588126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwm46rmfh2v", "content": "CVE-2026-8613 - aThemes Addons for Elementor\nCVE ID : CVE-2026-8613\n \n Published : June 10, 2026, 8:16 a.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title_tag' Widget Sett...", "creation_timestamp": "2026-06-10T11:26:38.144601Z"}, {"uuid": "b3e31fea-a29c-4989-9124-b7b360d25dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8613", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mny7x5cvs52w", "content": "CVE-2026-8613: XSS en aThemes Addons for Elementor\n\nCVE-2026-8613 WordPress afecta aThemes Addons for Elementor hasta v1.1.8. \u00bfTu sitio tiene contributors? Revis\u00e1 esto antes de que alguien lo explote.\n\n#cve20268613 #athemesaddonselementor #xsswordpress #pluginselementor #vulnerabilidadeswordpress", "creation_timestamp": "2026-06-11T02:54:23.866289Z"}, {"uuid": "39ecbda6-8090-46d8-85e3-d18049a43f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86137", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwnrrzeuzi2m", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-86137 impacts libxml2 in 5 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/690\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-29T12:01:06.488415Z"}, {"uuid": "56867906-5ae9-4a03-884f-49d4be524463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86138", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwnrs3liow2l", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-86138 impacts libxml2 in 5 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/691\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-29T12:01:08.680955Z"}, {"uuid": "3751a40d-ed3b-4d12-9f18-dcc2b814c45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117357400806892577", "content": "CVE-2026-86131: CRITICAL code injection in WatchGuard Fireware OS BOVPN Over TLS. Attackers controlling a VPN server can execute root commands on Firebox devices. Avoid untrusted VPNs until patched. https://radar.offseq.com/threat/a-code-injection-vulnerability-in-watchguard-fireware-oss-bovpn-over-tls-client-configuration-handling-678dbd9b2069781f #OffSeq #WatchGuard #FirewareOS #Vuln", "creation_timestamp": "2026-09-30T01:30:24.498651Z"}, {"uuid": "406036ed-b0d6-4ee2-88c1-408ab621d36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwp6z7eeza24", "content": "WatchGuard Fireware OS hit by CRITICAL code injection (CVE-2026-86131). Attackers with VPN server control can gain root on Firebox devices. Avoid connecting to untrusted VPNs until a fix. \ud83d\udd12 https://radar.offseq.com/threat/a-code-injection-vulnerability-in-watchguard-fireware-oss-bovpn-over-tls-cl...", "creation_timestamp": "2026-09-30T01:30:26.938109Z"}, {"uuid": "04f1bafe-6b99-44ed-bd8c-1e91cd940dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwpb55zbls2u", "content": "\ud83d\udea8 CVE-2026-86131 \u2014 CVSS 9.2 CRITICAL\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling all...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86131\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T02:08:26.555488Z"}, {"uuid": "be68d736-c899-43a8-88e1-b1c4356cda4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwpcuzobtf2c", "content": "WatchGuard patched 14 Fireware OS vulnerabilities, including CVSS 9.2 RCE flaw CVE-2026-86131 in BOVPN Over TLS. Update Firebox appliances now.\n\n#WatchGuard #FirewareOS #Firebox #CVE202686131 #FirewallSecurity #VPN #NetworkSecurity #PatchNow", "creation_timestamp": "2026-09-30T02:39:41.386570Z"}, {"uuid": "477207f8-55a9-4b23-a417-7fafed9a1b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117358019514104109", "content": "Another one from Watch Guard.\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.\nhttps://psirt.watchguard.com/CVE-2026-86131", "creation_timestamp": "2026-09-30T04:07:46.279402Z"}, {"uuid": "001c77f8-c43d-4422-9fc0-4ce53cd339a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jj3hpvbn3k6wp", "content": "CVE-2026-86134 - Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service\nCVE ID : CVE-2026-86134\n \n Published : Sept. 30, 2026, 4:18 a.m. | 41\u00a0minutes ago\n \n Description : A NULL pointer dereference vulnerability in the WatchGuard Fireware OS au...", "creation_timestamp": "2026-09-30T05:36:48.752783Z"}, {"uuid": "ba9b1876-95a2-4a35-b841-0cdf5bbe11e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"}, {"uuid": "0986cadd-ed11-4818-8605-3f1f77ed0d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86133", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"}, {"uuid": "c853965f-1957-45b1-a099-ba942873f627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86136", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"}, {"uuid": "07ec1e77-ab5c-4ce0-933d-c03c88867af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86132", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"}, {"uuid": "6c028a9d-ce72-4fa1-87a8-ce6cc299f69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86134", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"}, {"uuid": "1380c930-2410-41cc-883e-dce9d40c01e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwqgwaapj52i", "content": "WatchGuard released Fireware OS patches fixing 15 vulnerabilities, including a critical CVE-2026-86131 RCE that can grant root command execution via BOVPN over TLS.\n", "creation_timestamp": "2026-09-30T13:24:37.177258Z"}, {"uuid": "469b6d9d-0c6f-4605-b8eb-ff49b7dffdbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117360232414282274", "content": "CRITICAL RCE (CVE-2026-86131) in WatchGuard Fireware OS enables root code execution via BOVPN over TLS. Multiple high-severity flaws also patched. No known in-the-wild attacks, but update ASAP. https://radar.offseq.com/threat/watchguard-patches-critical-fireware-os-code-injection-vulnerability-36035f2a6c97cfc4 #OffSeq #Vuln #WatchGuard #PatchTuesday #InfoSec", "creation_timestamp": "2026-09-30T13:30:31.526308Z"}, {"uuid": "85470799-0e98-41eb-ad19-1a01aafa3142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwqhaupfpv2j", "content": "Fireware OS CRITICAL code injection (CVE-2026-86131): remote attackers can gain root via BOVPN over TLS. Patch affected WatchGuard systems & APs immediately. Details: https://radar.offseq.com/threat/watchguard-patches-critical-fireware-os-code-injection-vulnerability-36035f2a6c97cfc4 #OffSeq #Vul...", "creation_timestamp": "2026-09-30T13:30:33.862006Z"}, {"uuid": "24be13b6-e0f2-4005-9e86-d5b376a19dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86131", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwquntqwvm2v", "content": "WatchGuard fixed 15 Fireware OS flaws, including CVE-2026-86131, a critical code injection bug that could let a remote attacker run commands as root on Firebox appliances. #WatchGuard #FirewareOS #Firebox", "creation_timestamp": "2026-09-30T17:30:27.679185Z"}]}