{"vulnerability": "cve-2026-10038", "sightings": [{"uuid": "49d1ff8d-a522-43e5-85cc-1053bd90ce5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10038", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlg3tfxl72o", "content": "CVE-2026-10038 - Charitable\nCVE ID : CVE-2026-10038\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : The Charitable \u2013 Donation Plugin for WordPress \u2013 Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insecure Direct ...", "creation_timestamp": "2026-06-06T00:39:46.792998Z"}, {"uuid": "c812c416-c34c-4cd2-93d8-ab8f3fdb3bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwersu2dai2q", "content": "\ud83d\udea8 CVE-2026-100389 \u2014 CVSS 9.2 CRITICAL\n\nGestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP connector's ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100389\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-25T22:07:36.643172Z"}, {"uuid": "23c65c3e-aa72-4e78-bd7e-8ee85e423524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4y4725iyrjslk", "content": "CVE-2026-100389 - GestSup before 3.2.61 Remote Code Execution via IMAP Attachment\nCVE ID : CVE-2026-100389\n \n Published : Sept. 25, 2026, 9:17 p.m. | 30\u00a0minutes ago\n \n Description : GestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP ...", "creation_timestamp": "2026-09-25T22:25:02.390072Z"}, {"uuid": "d6f689c6-dfc2-4ccc-a55d-b79be8738e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100387", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7r6kfmvt2qlap", "content": "CVE-2026-100387 - pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization\nCVE ID : CVE-2026-100387\n \n Published : Sept. 25, 2026, 9:17 p.m. | 30\u00a0minutes ago\n \n Description : pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimen...", "creation_timestamp": "2026-09-25T22:27:02.527381Z"}, {"uuid": "30f06ba1-d6ea-4932-9890-d2e83adfdfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100382", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117334398532334299", "content": "CVE-2026-100382 (CRITICAL, CVSS 10): Wikimedia Mediawiki ExternalData Extension (<3.7) suffers OS Command Injection. Remote, unauthenticated code execution is possible. Restrict access & monitor systems. Details: https://radar.offseq.com/threat/cve-2026-100382-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-75689d73ee2acd97 #OffSeq #CVE2026100382 #infosec #Mediawiki", "creation_timestamp": "2026-09-26T00:00:37.958876Z"}, {"uuid": "0ba067de-79b1-4d5f-9721-64e7a1dadb80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100382", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwey4y6xt62q", "content": "CVE-2026-100382: CRITICAL OS Command Injection in Mediawiki ExternalData Extension (<3.7). Remote attackers can run arbitrary commands. Restrict access & monitor for signs of compromise. https://radar.offseq.com/threat/cve-2026-100382-cwe-78-improper-neutralization-of-special-elements-used-in-an-...", "creation_timestamp": "2026-09-26T00:00:39.841304Z"}, {"uuid": "6820a426-b2a8-476c-b394-c4541ce49901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100387", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwey7yp7352c", "content": "\ud83d\udfe0 CVE-2026-100387 - High (8.1)\n\npgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100387/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T00:02:21.487964Z"}, {"uuid": "dde59198-f0f2-419a-8ca0-0619759168e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mweyaa25sv2g", "content": "\ud83d\udfe0 CVE-2026-100389 - High (8.1)\n\nGestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP co...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100389/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T00:02:29.137268Z"}, {"uuid": "47fb435d-e03d-4352-b57c-d606553f40e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100382", "type": "seen", "source": "https://gist.github.com/ichintu/6ea92f5d3523919a824d2395951afa6c", "content": "This daily cyber threat intelligence digest highlights three critical software vulnerabilities, a major legal sentencing, and one non-security community post. Key takeaways:\n\n\u2022 **MediaWiki (CVE-2026-100382):** Critical (CVSS 10.0) unauthenticated RCE via OS command injection in the ExternalData extension (v<3.7).  \n\u2022 **WordPress (AV26-952):** Critical path traversal in page-template resolution enabling conditional RCE in versions <7.1.2. The flaw is actively exploited in the wild and has been added to CISA\u2019s KEV database; immediate patching is required.  \n\u2022 **CliInvoke.Specializations (CVE-2026-100368):** High (CVSS 8.4) command injection in PowerShell/Cmd wrappers caused by improper handling of untrusted arguments containing double quotes. Patched versions and mitigation workarounds are available.  \n\u2022 **Legal/Incident:** A U.S. Army soldier received a 70-month prison sentence and ~$300K in restitution for hacking AT&T and Verizon to steal mobile metadata, impacting over 100 million customers.  \n\u2022 **Non-Technical:** The digest also includes a community event recommendation for a family squid dissection in Tennessee.  \n\n**Overall:** Organizations should prioritize patching MediaWiki, WordPress, and CliInvoke components, while the sentencing underscores ongoing insider threats targeting critical telecom infrastructure.", "creation_timestamp": "2026-09-26T00:00:32.000000Z"}, {"uuid": "a286ba8e-6a19-4c7c-8e60-06122fee3ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100382", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mweyjccx4n2q", "content": "\ud83d\udea8 CVE-2026-100382 \u2014 CVSS 10 CRITICAL\n\nImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100382\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T00:07:32.256525Z"}, {"uuid": "72d0d078-c8dd-4197-9542-e72605358212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100382", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117336521016931097", "content": "Mediawiki ExternalData Extension <3.7 has a CRITICAL OS Command Injection vuln (CVE-2026-100382). Unauthenticated attackers could run arbitrary OS commands. No exploits yet. Restrict access, monitor activity. https://radar.offseq.com/threat/improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-vulnerability-b27f1e4f9d070501 #OffSeq #CVE2026100382 #Mediawiki #Security", "creation_timestamp": "2026-09-26T09:00:24.231763Z"}, {"uuid": "0243b457-5d8b-4704-a6cc-b84f3033ccb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117336874943730236", "content": "GestSup <3.2.61 is vulnerable to CRITICAL RCE (CVE-2026-100389) via IMAP connector. Attackers can send PHP attachments to monitored mailboxes, leading to system compromise. Upgrade to 3.2.61+ ASAP. https://radar.offseq.com/threat/gestsup-versions-before-3261-contain-a-remote-code-execution-vulnerability-in-the-basic-imap-125b3f214ef54f5e #OffSeq #Infosec #RCE #GestSup", "creation_timestamp": "2026-09-26T10:30:24.770889Z"}, {"uuid": "a45c5a5a-b15a-4b84-9398-33bf9594e2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100389", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgmmucudh2q", "content": "CVE-2026-100389 - gestsup\nVersions of GestSup older than 3.2.61 let anyone send a specially crafted email with a PHP file attached. The system saves that file in a publicly reachable folder and runs it, giving the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gestsup #CVE #infosec", "creation_timestamp": "2026-09-26T15:40:06.371345Z"}, {"uuid": "bb638bde-8e40-4165-9681-65dfb86b074b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100382", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgnqkqw3k26", "content": "CVE-2026-100382 - mediawiki - externaldata extension\nThe ExternalData add\u2011on for Mediawiki can be tricked into executing system commands without any authentication. This means an attacker could run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wikimediafoundation #CVE #infosec", "creation_timestamp": "2026-09-26T16:00:04.700078Z"}, {"uuid": "02a18407-ca6f-4be7-9379-a721cdbff42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100382", "type": "seen", "source": "Telegram/xW8z4oUOq-Ane7EXj1wNqp6zyl2_0CSzOhfXQFSSmteKMQE", "content": "", "creation_timestamp": "2026-09-27T19:00:15.000000Z"}, {"uuid": "830fe099-2562-4cd0-975f-e27dbf2e54ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100382", "type": "published-proof-of-concept", "source": "Telegram/xW8z4oUOq-Ane7EXj1wNqp6zyl2_0CSzOhfXQFSSmteKMQE", "content": "", "creation_timestamp": "2026-09-27T19:00:15.000000Z"}]}