{"vulnerability": "CVE-2026-9716", "sightings": [{"uuid": "767b8594-2442-46c8-bfae-7ffe3ff37795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9716", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-12", "content": "", "creation_timestamp": "2026-06-10T01:56:40.000000Z"}, {"uuid": "e1a552cd-feec-4afb-90ef-9744e08b3f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9716", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-07", "content": "", "creation_timestamp": "2026-06-25T17:15:24.316826Z"}, {"uuid": "3e758b3c-e255-4494-838a-3c5c339ec69c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9716", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqaxhz7kta2k", "content": "\ud83d\udccc CVE-2026-9716 - CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device\u2019s HMI and configuration fun... https://www.cyberhub.blog/cves/CVE-2026-9716", "creation_timestamp": "2026-07-10T01:07:06.730870Z"}, {"uuid": "a501c19f-adb8-4db0-b4cc-bbad6c49a955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97160", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7fsl3t25", "content": "\ud83d\udea8 CVE-2026-97160 \u2014 CVSS 9.4 CRITICAL\n\nJoomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97160\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:22.417851Z"}, {"uuid": "92c5898f-250f-488d-81ac-7a1102ffdbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7nnf2p2r", "content": "\ud83d\udea8 CVE-2026-97161 \u2014 CVSS 9.2 CRITICAL\n\nJoomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97161\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:30.653247Z"}, {"uuid": "401c9655-3aed-41ca-a3b2-f66b36c96531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo7vkhiw2y", "content": "\ud83d\udea8 CVE-2026-97163 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0,...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97163\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:08:39.247953Z"}, {"uuid": "5989218c-524e-493c-ac3c-ce727b9fa150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3asz3cg5gqaer", "content": "CVE-2026-97163 - Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97163\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr - Una...", "creation_timestamp": "2026-09-26T16:37:06.894117Z"}, {"uuid": "278efc99-6df4-45ad-93c6-8dc45b7ff20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97162", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h7zyilf3nrvog", "content": "CVE-2026-97162 - Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97162\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr - Various SQL in...", "creation_timestamp": "2026-09-26T16:43:06.764501Z"}, {"uuid": "0928943f-ce16-484a-a714-a35a8649acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gk33f3nb27y54", "content": "CVE-2026-97161 - Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVE ID : CVE-2026-97161\n \n Published : Sept. 26, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Joomla Extension - lomart.fr -...", "creation_timestamp": "2026-09-26T16:49:06.492595Z"}, {"uuid": "dcb43201-5939-482c-a6c4-ac9ef5dcc490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103469", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97161\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:50:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97161 PoC: Joomla UP (lomart.fr) unauthenticated path traversal / arbitrary file read via ajax-view (\u22646.0.29). Fingerprints plugin, probes configuration.php. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97161\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:09.000000Z"}, {"uuid": "4c939bc6-3cd6-4027-83ba-55b050a83c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103468", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97163\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 20:55:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC: Joomla UP (lomart.fr) unauthenticated GitHub mini-install / remote action deployment (\u22646.0.29). Detects plugin version, probes com_ajax install triggers. Fix: UP 6.1.0 / 5.2.1. https://pocbit.org/pocs/cve-2026-97163\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T21:00:08.000000Z"}, {"uuid": "b7cc6290-84a7-4754-befe-8f176833e07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy2kuu32u", "content": "CVE-2026-97161 - up plugin for joomla\nThe UP plugin versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29 can be tricked into reading or writing files outside its intended folder. This could let an attacker view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:05.091660Z"}, {"uuid": "55923d39-a7e8-461a-b362-d2ba6110805e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhcy4qbkl2u", "content": "CVE-2026-97163 - up plugin for joomla\nThe UP plugin for Joomla from lomart.fr (versions 5.0.0 through 5.2.0 and 6.0.0 through 6.0.29) lets anyone on the internet add and run their own code on the server without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lomartfr #CVE #infosec", "creation_timestamp": "2026-09-26T22:20:06.574270Z"}, {"uuid": "af44f510-00be-4445-8f31-4ce086bc4374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://t.me/GithubRedTeam/103476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"}, {"uuid": "2e739fd4-e34d-4992-86a2-963d8d4b961e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-97163-payload\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qeize\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:51:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-97163 PoC payload (UP plugin Joomla remote code installation)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"}, {"uuid": "1f564b9c-91b5-4bf4-ac77-e0b2c5d15178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97160", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2muxnl2f", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97160: Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 9.4\nhttps://beta.vulnsea.com/cve/CVE-2026-97160\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:36.640872Z"}, {"uuid": "1359c928-b6ca-49b9-9a65-7ea6b5bc6187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2olp6w2l", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97161: Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 9.2\nhttps://beta.vulnsea.com/cve/CVE-2026-97161\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:38.284761Z"}, {"uuid": "f12e8867-bc4e-4f6a-a5f9-460dd828c1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwis2qaia72k", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-97163: Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-97163\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T12:22:40.181317Z"}, {"uuid": "ff4584b0-4fba-4341-b1b4-cc248b45d70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97160", "type": "seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"}, {"uuid": "06e71901-e6d0-4f2d-b5b3-31eab8b8a3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"}, {"uuid": "db6a89f8-2981-4655-afd1-a0257c9796e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"}, {"uuid": "de24d992-3aac-448f-96f7-8d2080c43410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97160", "type": "seen", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"}, {"uuid": "8c183fb4-0f68-4c88-8fc6-734a4515607b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "seen", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"}, {"uuid": "01c0a371-a43d-49c6-bbfb-911089c87ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "seen", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"}, {"uuid": "75cd0c4e-7245-4d5d-b0c5-ffcde0fc3499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "published-proof-of-concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"}, {"uuid": "e81d8cb6-53c9-4438-b566-cb0702e383fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"}, {"uuid": "a421618f-7d72-4750-a40c-b760c52a8ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97163", "type": "published-proof-of-concept", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"}, {"uuid": "35a0cd9f-df14-4ca2-8f97-fde469064770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97160", "type": "published-proof-of-concept", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"}, {"uuid": "560e57a6-1a0a-485a-b5d9-d5dafee292bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97161", "type": "published-proof-of-concept", "source": "Telegram/6NJyFyy0r_f5F4WTJm8zt4VwpUeESZo6YZKfCcbaWwPe7tE", "content": "", "creation_timestamp": "2026-09-26T23:00:16.000000Z"}, {"uuid": "7692bb12-1e92-45b8-bda8-99c534e9c126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97160", "type": "published-proof-of-concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"}]}