{"vulnerability": "CVE-2026-9297", "sightings": [{"uuid": "9391868a-ecea-4bb9-b822-468d90f3c59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92970", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtw5uvoud2f", "content": "CVE-2026-92970 - hubzero-cms\nWhen users upload project files in HUBzero CMS version 2.2.32 or earlier, they can trick the system into saving those files outside the intended folder. This lets a signed\u2011in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hubzerocms #hubzero #CVE #infosec", "creation_timestamp": "2026-09-19T05:10:06.585305Z"}, {"uuid": "61004947-9a97-4bc6-872a-0145d0642c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-92973", "type": "seen", "source": "https://blog.arusekk.pl/posts/srht-account-takeover/", "content": "", "creation_timestamp": "2026-09-24T20:43:49.158256Z"}, {"uuid": "69f64990-f86d-46f5-a975-e714225b4ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92973", "type": "seen", "source": "https://bsky.app/profile/effidev.bsky.social/post/3mwe4kjbkl42p", "content": "\ube4c\ub4dc \ub85c\uadf8 \ud654\uba74 \ud558\ub098 \uc5f4\uc5b4\ubd24\ub2e4\uace0 \uacc4\uc815\uc744 \ud1b5\uc9f8\ub85c \ube8f\uae38 \uc218 \uc788\ub2e4\uba74? \uc18c\uc2a4\ud5db(SourceHut)\uc5d0\uc11c \uc2e4\uc81c\ub85c \uc774\ub7f0 \ucde8\uc57d\uc810\uc774 \ub098\uc654\uc5b4. CVE-2026-92973.\n\n\ud83d\udd17 \uc6d0\uae00 \ubcf4\uae30", "creation_timestamp": "2026-09-25T15:47:17.941567Z"}]}