{"vulnerability": "CVE-2026-94490", "sightings": [{"uuid": "735b2508-b91c-43a0-bbc5-fbc1c4a40fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cr4cyxhkroenk", "content": "CVE-2026-94490 - OctoPrint Command API system.py executeSystemCommand os command injection\nCVE ID : CVE-2026-94490\n \n Published : Sept. 22, 2026, 12:16 a.m. | 25\u00a0minutes ago\n \n Description : A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the ...", "creation_timestamp": "2026-09-22T01:32:44.583909Z"}, {"uuid": "aee471e1-21fb-467f-a062-0a05364d6208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94490", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117363690863548085", "content": "CVE-2026-94490: OS command injection in OctoPrint 1.0.0 Command API allows remote attackers to run commands. CVSS 4.7. Exploit is public and vendor has not responded. No patch available. Restrict API access now. https://www.valtersit.com/cve/CVE-2026-94490/ #CVE #infosec #OctoPrint", "creation_timestamp": "2026-10-01T04:10:03.429745Z"}, {"uuid": "cbea1954-d6ba-44dc-b56e-ca3807dbb062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94490", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwrzje24lp27", "content": "CVE-2026-94490: OS command injection in OctoPrint 1.0.0 Command API allows remote attackers to run commands. CVSS 4.7. Exploit is public and vendor has not responded. No patch available. Restrict API access now. https://www.valtersit.com/cve/CVE-2026-94490/ #CVE #infosec #OctoPrint", "creation_timestamp": "2026-10-01T04:30:04.626097Z"}]}