{"vulnerability": "CVE-2026-87796", "sightings": [{"uuid": "742b5d90-4f08-46cd-8133-bbed0efc9fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoxhkad7t25", "content": "CVE-2026-87796 - multi uploader for gravity forms\nThe Multi Uploader for Gravity Forms plugin for WordPress lets unauthenticated users place any type of file on your server because it does not properly check file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sh1zen #CVE #infosec", "creation_timestamp": "2026-09-17T05:50:05.917786Z"}, {"uuid": "14c38728-b3f9-4588-a283-7445c1926bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117284852533602073", "content": "CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms \u22641.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet \u2014 disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE", "creation_timestamp": "2026-09-17T06:00:25.757516Z"}, {"uuid": "b4575726-dfe3-466b-a960-75e8f3984b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvoy22zlsx2f", "content": "CRITICAL: CVE-2026-87796 in sh1zen Multi Uploader for Gravity Forms (\u22641.1.9) allows unauthenticated arbitrary file upload \u2014 potential RCE. Disable or restrict uploads until fix confirmed. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1...", "creation_timestamp": "2026-09-17T06:00:27.805915Z"}, {"uuid": "5c695eb8-2794-404a-8ace-38d1677d412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoyfxypnb24", "content": "\ud83d\udea8 CVE-2026-87796 \u2014 CVSS 9.8 CRITICAL\n\nThe Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87796\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T06:07:06.751746Z"}, {"uuid": "f97a993e-e59a-43e5-b66f-9f89fe5df015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/f4JrGHtkqt0dCR-QPLTbBys3Bbe_i0cnrbfRr-g9_w7f14I", "content": "", "creation_timestamp": "2026-09-18T04:00:06.124885Z"}, {"uuid": "d8dbad6f-8eb1-4750-b7cc-40e649f19464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://t.me/GithubRedTeam/102624", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 23:39:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9; Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T04:00:15.817792Z"}, {"uuid": "90c3e0b6-26bb-4782-b802-72f3d73527d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-18T12:00:08.112215Z"}, {"uuid": "b279ec3a-7bb6-46f2-a508-0e10f46869e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-19T00:00:26.411028Z"}, {"uuid": "6857daa3-0782-468e-ba46-79d8f17c5a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102624", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 23:39:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9; Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T00:00:10.320401Z"}, {"uuid": "acd3bea0-6263-47b6-bd0e-46494685417c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/f4JrGHtkqt0dCR-QPLTbBys3Bbe_i0cnrbfRr-g9_w7f14I", "content": "", "creation_timestamp": "2026-09-19T00:00:50.425068Z"}]}