{"vulnerability": "CVE-2026-9330", "sightings": [{"uuid": "fae0389d-eafc-42d7-b616-de49e335b85a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9330", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mnajyao5gy26", "content": "IBM WebSphere Application Server is affected by remote code execution (CVE-2026-9311, CVE-2026-9330) https://tinyurl.com/282ddzef", "creation_timestamp": "2026-06-01T16:50:04.308211Z"}, {"uuid": "f79935a8-9190-42f5-aaa1-1516f2ac2ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnatq63y672c", "content": "CVE-2026-9330 - IBM WebSphere Application Server is affected by remote code execution\nCVE ID : CVE-2026-9330\n \n Published : June 1, 2026, 6:01 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of ...", "creation_timestamp": "2026-06-01T19:44:30.676089Z"}, {"uuid": "3fb82115-6de5-4bf6-9e6c-6d28dc51b0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9330", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mnihxdlssb22", "content": "PH71453:IBM WEBSPHERE APPLICATION SERVER IS AFFECTED BY REMOTE CODE EXECUTION (CVE-2026-9311, CVE-2026-9330) https://tinyurl.com/256q24dr", "creation_timestamp": "2026-06-04T20:35:04.584651Z"}, {"uuid": "71c618ff-1a0f-4b7e-960e-7814b5ad7b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9330", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnix5sergh2e", "content": "\ud83d\udccc CVE-2026-9330 - IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Si... https://www.cyberhub.blog/cves/CVE-2026-9330", "creation_timestamp": "2026-06-05T01:07:07.202404Z"}, {"uuid": "2778f0c3-1558-4e92-85fa-280c70ab5074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9330", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27", "content": "\ud83d\udd17 CVE : CVE-2025-62718, CVE-2026-26996, CVE-2026-27903, CVE-2026-27904, CVE-2026-40971, CVE-2026-40974, CVE-2026-8620, CVE-2026-8633, CVE-2026-8644, CVE-2026-9311, CVE-2026-9319, CVE-2026-9330", "creation_timestamp": "2026-06-12T12:55:07.599876Z"}, {"uuid": "96307bb3-3f52-4d57-bc78-899afa7228c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7fva2b4kxrw6p", "content": "CVE-2026-93309 - O-RAN-SC SMO OAM VES Collector allocation of resources\nCVE ID : CVE-2026-93309\n \n Published : Sept. 17, 2026, 11:30 p.m. | 21\u00a0minutes ago\n \n Description : A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown fun...", "creation_timestamp": "2026-09-18T01:12:27.855322Z"}, {"uuid": "560cbcd7-ecd7-4afe-89e7-9c62e8b9c05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93306", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117332594600119578", "content": "We have just added an important vulnerability affecting IBM Server Firmware (CVE-2026-93306) https://vuldb.com/vuln/410315", "creation_timestamp": "2026-09-25T16:21:51.663690Z"}, {"uuid": "f9489ff9-9dbf-4636-99f9-2626efcde5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93306", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mweo73tduo26", "content": "IBM server firmware flaw CVE-2026-93306 (CVSS 7.1) lets an unauthenticated attacker on the management network crash the ASMI web server.\n\nhttps://thecircuitry.to/article/ibm-power-server-firmware-flaw-cve-2026-93306-can-crash-the-asmi-web-int-muhdxxxc", "creation_timestamp": "2026-09-25T21:02:53.237409Z"}, {"uuid": "0ae87be4-7003-4e9c-852c-e04375d696a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93306", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mwepgu63aj26", "content": "Breaking: IBM flaw CVE-2026-93306 crashes ASMI\n\u2022 Nintendo wins $4.5M Reddit judgment\n\u2022 IBM patches Guardium 12.2 flaws\n\u2022 CISA adds SharePoint flaw to KEV\nWatch the two-minute verified briefing.", "creation_timestamp": "2026-09-25T21:25:07.457801Z"}, {"uuid": "ca25f013-74e7-4b3c-8400-7d4f42448cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4q4746ucfgq7e", "content": "CVE-2026-93302 - Trusted peer certificate match ignores public key, allowing forged CA clones\nCVE ID : CVE-2026-93302\n \n Published : Sept. 27, 2026, 9:07 a.m. | 39\u00a0minutes ago\n \n Description : MatchTrustedPeer ignores the public key used, leading to forged CA clones passing ve...", "creation_timestamp": "2026-09-27T10:22:08.373323Z"}, {"uuid": "ef1fb4a2-9925-44ad-8516-d08e0d594b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://gist.github.com/ichintu/295c47a4fdd1542fe1dda3872969c6bd", "content": "This daily threat intelligence update covers emerging AI security practices and critical software vulnerabilities:\n\n\u2022 **AI Guardrails:** Teams are developing adaptable, general-purpose proxy-layer frameworks to detect LLM threats like prompt injection and jailbreaks. Implementation faces a trade-off between evaluation metrics and documented capabilities, particularly regarding jailbreak detection and language support.\n\n\u2022 **wolfSSL (3 HIGH/8.3 CVEs):** Multiple flaws undermine TLS/DTLS certificate verification and authentication. Issues include ignoring public keys in trusted peer validation (CVE-2026-93302), accepting unsolicited RawPublicKey certificates (CVE-2026-89136), and incorrectly validating OCSP stapling issuers (CVE-2026-89102), all enabling authentication bypasses and certificate forgery.\n\n\u2022 **hMailServer (CRITICAL/9.8):** An Eval Injection vulnerability (CVE-2026-100741) allows unauthenticated remote code execution via JScript event scripting when exploited through specific SMTP/POP3/IMAP login sequences.\n\n\u2022 **Citrix NetScaler:** Two unpatched zero-day RCE flaws are actively exploited in the wild, prompting some administrators to preemptively take affected appliances offline.", "creation_timestamp": "2026-09-27T12:00:40.000000Z"}, {"uuid": "ba9cf8c4-7a78-49d0-a618-61bf65d11d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwmwptovsc2e", "content": "wolfSSL 5.9.4 patches 10 wolfSSL vulnerabilities, including TLS authentication bypass flaws CVE-2026-93302 and CVE-2026-89136. Upgrade now.\n\n#wolfSSL #wolfSSLVulnerabilities #TLS #AuthenticationBypass #EmbeddedSecurity #Cryptography #IoTSecurity #PatchNow", "creation_timestamp": "2026-09-29T03:56:42.986674Z"}]}