{"vulnerability": "cve-2026-1008", "sightings": [{"uuid": "00e6d39c-ff64-41b1-8ce5-b657ae9cec1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1008", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcivohqjj52p", "content": "", "creation_timestamp": "2026-01-16T01:03:31.435200Z"}, {"uuid": "471f8814-dd03-4940-8e1f-3d91fbbb332f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10087", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-16", "content": "", "creation_timestamp": "2026-06-11T01:08:31.000000Z"}, {"uuid": "f465ff79-55c9-4e99-8025-cccdeeba40ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10087", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y", "content": "\ud83d\udd17 CVE : CVE-2026-10087, CVE-2026-10733, CVE-2026-1500, CVE-2026-3553, CVE-2026-6269, CVE-2026-6277, CVE-2026-6552, CVE-2026-6976, CVE-2026-7250, CVE-2026-8589, CVE-2026-9204, CVE-2026-9694", "creation_timestamp": "2026-06-11T12:45:12.746479Z"}, {"uuid": "381119f8-68f8-4cb3-8e94-7f50fdac598b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10087", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnze6d4tg52m", "content": "CVE-2026-10087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab\nCVE ID : CVE-2026-10087\n \n Published : June 11, 2026, 12:16 p.m. | 47\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab EE affecting all versions...", "creation_timestamp": "2026-06-11T13:42:39.205712Z"}, {"uuid": "15840f92-7e32-4a1f-bb8e-9ef6adf09d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10087", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "697a815e-f920-4fa0-af7e-bafaec7290a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10087", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mocfuuljzl2e", "content": "\ud83d\udccc CVE-2026-10087 - GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under c... https://www.cyberhub.blog/cves/CVE-2026-10087", "creation_timestamp": "2026-06-15T04:07:07.160826Z"}, {"uuid": "40d2f049-335a-462d-b099-abe67ca22c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10086", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260625", "content": "", "creation_timestamp": "2026-06-25T05:45:25.044832Z"}, {"uuid": "b079b395-89ef-4be8-b9b9-6afed3b3c8ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10086", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp3t4vjfxq2q", "content": "CVE-2026-10086 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab\nCVE ID : CVE-2026-10086\n \n Published : June 25, 2026, 5:03 a.m. | 40\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab EE affecting all versions ...", "creation_timestamp": "2026-06-25T06:40:48.605779Z"}, {"uuid": "ed6540ec-6989-496a-b426-7ccf4a326c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10086", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mp4eyhphwq2c", "content": "\ud83d\udd17 CVE : CVE-2026-0934, CVE-2026-10086, CVE-2026-10712, CVE-2026-11379, CVE-2026-12053, CVE-2026-12635, CVE-2026-1606, CVE-2026-2238, CVE-2026-3176, CVE-2026-5309, CVE-2026-5796, CVE-2026-5952, CVE-2026-8330", "creation_timestamp": "2026-06-25T12:00:27.047923Z"}, {"uuid": "f66ef6d2-8b41-4217-84f8-747ec4b76579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10083", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116832221707811519", "content": "Stored XSS (CVE-2026-10083, HIGH) found in APCu Manager <4.5.0 for WordPress. Persistent object caching lets attackers inject JS via crafted cache keys, compromising admin sessions. Disable object caching or update plugin. https://radar.offseq.com/threat/cve-2026-10083-cwe-79-cross-site-scripting-xss-in--afabaed8bda5d811 #OffSeq #XSS #WordPress #Infosec", "creation_timestamp": "2026-06-29T07:30:27.798638Z"}, {"uuid": "eede594b-b8e9-41a6-ae26-3958ea4009d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10083", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpfxrflfcf2b", "content": "HIGH severity stored XSS in APCu Manager <4.5.0 (WordPress). Persistent object caching can enable JS injection in admin sessions. Disable caching or update plugin until a fix is confirmed. https://radar.offseq.com/threat/cve-2026-10083-cwe-79-cross-site-scripting-xss-in--afabaed8bda5d811 #OffSeq ...", "creation_timestamp": "2026-06-29T07:30:29.195603Z"}, {"uuid": "ea85f997-86df-4bc5-b0f9-d283b4d269dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10083", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpfz3jjltm2a", "content": "CVE-2026-10083 - APCu Manager\nCVE ID : CVE-2026-10083\n \n Published : June 29, 2026, 6 a.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a ...", "creation_timestamp": "2026-06-29T07:54:05.160809Z"}, {"uuid": "5d3c569e-4324-4ba4-b800-1b2ac6693502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10083", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgckpanrv2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10083 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 APCu Manager \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5AD8050D-B385-4D4B-A62D-432210DA059E", "creation_timestamp": "2026-06-29T10:43:35.614714Z"}, {"uuid": "34b0f9ff-6ee1-420b-a09b-e617633759c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10083", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphebs3jgz22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10083 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 APCu Manager \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A2594716-0CF4-4863-A4EB-5F96486582AD", "creation_timestamp": "2026-06-29T20:47:03.392406Z"}, {"uuid": "d3cbdde6-9835-4ffa-96fb-28d62df875f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpnly3siuo2g", "content": "CVE-2026-10089 - Insert Pages\nCVE ID : CVE-2026-10089\n \n Published : July 2, 2026, 5:35 a.m. | 2\u00a0hours, 11\u00a0minutes ago\n \n Description : The Insert Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post custom field keys (meta key names) in all version...", "creation_timestamp": "2026-07-02T08:20:46.452317Z"}, {"uuid": "69acf3f0-8ae3-443c-9ac2-d6fe388d06c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10089", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotn375vf2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10089 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Insert Pages \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 Stored XSS \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/EE70545B-92AD-4072-A380-261D5FF3A069", "creation_timestamp": "2026-07-02T20:10:26.661765Z"}, {"uuid": "da9d5ba6-c2fe-4071-a806-8ba84a694a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10086", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqbvnm47i22o", "content": "\ud83d\udccc CVE-2026-10086 - GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under cer... https://www.cyberhub.blog/cves/CVE-2026-10086", "creation_timestamp": "2026-07-10T10:07:06.844098Z"}, {"uuid": "f27d7637-34b8-4c67-b733-f34a700c4d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10085", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfvj6uhi2x", "content": "CVE-2026-10085 - Ordinary group/direct message member can enable group_constrained and remove all channel participants\nCVE ID : CVE-2026-10085\n \n Published : July 13, 2026, 8:05 a.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : Mattermost versions 11.7.x <= 11.7.2, 11.6.x <...", "creation_timestamp": "2026-07-13T09:46:29.943875Z"}, {"uuid": "a00b6200-5281-48bc-ae80-81e2eae42cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10085", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjfz2l7bi2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10085 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/311BA05B-EF87-49B6-B1BB-BAAB59876B64", "creation_timestamp": "2026-07-13T09:48:29.041067Z"}, {"uuid": "39838dfa-18af-4b4d-b946-dc64836c4502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10085", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqjfz67yyd25", "content": "Mattermost \u5b89\u5168\u6f0f\u6d1e CVE-2026-10085 \u8be6\u89e3:\u5f71\u54cd\u7248\u672c\u53ca\u4fee\u590d\u5efa\u8bae\n\n\n\nhttps://qian.cx/posts/D449DDB9-89D6-4B67-AF1F-70968717257B", "creation_timestamp": "2026-07-13T09:48:32.625266Z"}, {"uuid": "a0117760-4648-451e-8732-1c9ca50084c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10086", "type": "seen", "source": "https://t.me/true_secator/8352", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438:\n\n1. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PTC Windchill, \u0447\u0442\u043e \u0441\u0442\u0430\u043b\u043e \u043f\u0435\u0440\u0432\u044b\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u043c \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 (PLM) \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\nCVE-2026-12569 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Windchill \u0438 FlexPLM \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 PTC. \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 PTC, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA, \u0438, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f\u00a0\u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438\u00a0\u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e PTC Windchill, CVE-2026-4681.\n\n\u0414\u043b\u044f CVE-2026-12569 PTC \u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e 17 \u0438\u044e\u043d\u044f. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b (IoC, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a JSP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u0435\u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0430\u043a\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u043f\u043e\u0432\u0435\u0449\u0430\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PTC \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0437\u043d\u0430\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u0445.\u00a0\n\n2. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 Ethernet \u043e\u0442 Lantronix. \u042d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 ICS \u043f\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044e.\n\n3. \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 GitLab CE/EE \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 13 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2026-10086, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 XSS \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 GitLab EE, \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f CVE-2026-10712 - XSS \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u0440\u0435\u0434\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Web IDE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u044f\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2026-12053 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 Duo Workflows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442.\n\n4. \u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 UniFi. \u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\nUniFi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445, \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u0435\u043b\u044f\u0445 Wi-Fi, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 (NAS) \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti. \u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u043e \u044d\u0442\u0438 \u0442\u0440\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 UniFi OS, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 KEV CISA.\n\n5. Microsoft \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Windows 10 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0433\u043e\u0434 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Windows 10 ESU \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u0430 \u0434\u043e 12 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2027 \u0433\u043e\u0434\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0418\u0442\u043e\u043d \u0417\u0432\u0435\u0430\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 Johnson&Johnson, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u0445 \u0438 \u0441\u0442\u0430\u0436\u0435\u0440\u0430\u0445.\n\n7. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a:\u00a0Aikido Security, Microsoft, SafeDep, Socket Security, Step Security, Step Security.\n\n8. Trend Micro \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Langflow AI \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n9. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b Ghost CMS \u0432 \u043c\u0430\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-26980, \u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438 ClickFix \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n10. Breached[.]hn, \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u043e\u043d\u043e\u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e BreachForums, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u00abShinyHunters, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0443\u0431\u044c\u044e\u0442 \u043d\u0430\u0441 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e\u00bb.", "creation_timestamp": "2026-07-13T13:00:06.973403Z"}, {"uuid": "f2c7f0f0-9d2f-43db-b374-31f8de55adc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10085", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzhy3iph2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10085 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/AFF2C671-8C7C-4429-89B0-0304ECFB7C6B", "creation_timestamp": "2026-07-14T01:09:30.542420Z"}, {"uuid": "3d837767-8704-4f0e-b3fa-291cdca1bd65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10085", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr2ver2g2p", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05de\u05d8\u05e8\u05d5\u05e1\u05d8: CVE-2026-10085 - \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/E5F1BD2D-4CDF-4DA6-9631-5AD4FFE22957", "creation_timestamp": "2026-07-16T07:55:00.226408Z"}, {"uuid": "59b6b7f9-8f16-4b1d-8583-2bc5675c2da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10085", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqs6vakqp2p", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2026-10085 \u05d1\u05de\u05d8\u05e8\u05de\u05d5\u05e1\u05d8: \u05de\u05d4 \u05d6\u05d4, \u05db\u05d9\u05e6\u05d3 \u05d6\u05d4 \u05de\u05e9\u05e4\u05d9\u05e2 \u05e2\u05dc\u05d9\u05da, \u05d5\u05d0\u05d9\u05da \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05de\u05e2\u05e8\u05db\u05ea\u05da\n\n\n\nhttps://khesef.xyz/posts/65D02D30-66E9-4D98-8601-D1946A08C2C4", "creation_timestamp": "2026-07-16T08:15:07.893290Z"}, {"uuid": "022e1339-d098-43f1-b34e-781f0dc94369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10081", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr2vha2w3g23", "content": "CVE-2026-10081 - Unlimited Elements for Elementor\nCVE ID : CVE-2026-10081\n \n Published : July 20, 2026, 7:16 a.m. | 28\u00a0minutes ago\n \n Description : The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched fro...", "creation_timestamp": "2026-07-20T08:40:07.205785Z"}, {"uuid": "04d70b3d-110f-4325-bdde-d04029ae4124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10086", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrjc2s6l6c2b", "content": "\u300cGitLab\u300d\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0 - \u8106\u5f31\u602713\u4ef6\u3092\u4fee\u6b63\n\nGitLab\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670824\u65e5\u3001\u8106\u5f31\u6027\u3078\u5bfe\u51e6\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u300c\u540c19.1.1\u300d\u300c\u540c19.0.3\u300d\u300c\u540c18.11.6\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n...\n\n\u300cCVE-2026-10086\u300d\u306f\u3001\u300cAnalytics Dashboard\u300d\u306b\u304a\u3051\u308bXSS\u306e\u8106\u5f31\u6027\u3002\u958b\u767a\u8005\u30ed\u30fc\u30eb\u306e\u6a29\u9650\u304c\u5fc5\u8981\u3068\u306a\u308b\u304c\u3001\u5225\u30e6\u30fc\u30b6\u30fc\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u3067\u4efb\u610f\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30b5\u30a4\u30c9\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002\n\n\u300cWeb IDE workbench\u300d\u306e\u30a2\u30bb\u30c3\u30c8\u30cf\u30f3\u30c9\u30e9\u306b\u304a\u3044\u3066\u3082\u300cXSS\u300d\u306e\u8106\u5f31\u6027\u300cCVE-2026-10712\u300d\u304c\u5224\u660e\u3002\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b...", "creation_timestamp": "2026-07-26T02:03:04.153776Z"}, {"uuid": "cf9cf683-2d5f-432e-9c81-8d2b23a31667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100864", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhr2iucl32d", "content": "\ud83d\udfe0 CVE-2026-100864 - High (8.8)\n\nheym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100864/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:32:00.537613Z"}, {"uuid": "436f3181-278a-40c4-a69e-297459d49614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100865", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhr2q24bl27", "content": "\ud83d\udfe0 CVE-2026-100865 - High (8.8)\n\nHeym before 0.0.53 contains multiple independent vulnerabilities. (1) The workflow condition eval...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100865/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:32:07.978591Z"}, {"uuid": "efddf67d-40b1-47d3-9774-dfc0dba2ba17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100856", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhr2x4t5a27", "content": "\ud83d\udfe0 CVE-2026-100856 - High (8.8)\n\nAzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password fiel...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100856/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:32:14.902314Z"}, {"uuid": "deaeee84-ea14-4402-bf09-393ae3d0c30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100857", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhr4cmg5n2n", "content": "\ud83d\udfe0 CVE-2026-100857 - High (8)\n\nAzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpStrin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100857/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:33:00.801333Z"}, {"uuid": "4a73a0fc-ff98-4186-91d5-3fa53c9f4208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhr4kb2dx2d", "content": "\ud83d\udfe0 CVE-2026-100850 - High (7.7)\n\nAzuraCast before 0.23.8 contains a server-side request forgery and local file read vulnerability ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:33:08.558434Z"}, {"uuid": "5554d842-04bf-4912-95b4-dec0cf66ad90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100851", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhr4riiog2y", "content": "\ud83d\udfe0 CVE-2026-100851 - High (7.6)\n\nAzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/{i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100851/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:33:15.977579Z"}, {"uuid": "9e411b30-992d-4b7b-967b-991571e27188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100865", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117340691454670296", "content": "A severe vulnerability was disclosed for heymrun Heym (CVE-2026-100865) https://vuldb.com/vuln/410798", "creation_timestamp": "2026-09-27T02:40:59.954444Z"}, {"uuid": "41b8a4f9-d769-41dc-b839-027767a72e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100852", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhrusicny2c", "content": "\ud83d\udfe0 CVE-2026-100852 - High (8.8)\n\nAzuraCast through 0.23.x contains a command injection vulnerability in the Liquidsoap config gene...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100852/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:46:42.862305Z"}, {"uuid": "ddcb0e7d-203a-4e38-82aa-69d255cb964c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100845", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhruzqjne27", "content": "\ud83d\udfe0 CVE-2026-100845 - High (7.8)\n\nMONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100845/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:46:50.336297Z"}, {"uuid": "562046fd-9080-413a-9b9e-0279280a4165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100846", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhrvapsci25", "content": "\ud83d\udfe0 CVE-2026-100846 - High (7.6)\n\nMONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100846/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:46:57.462576Z"}, {"uuid": "be3aca44-405f-4367-a03e-5f301ac4d069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100847", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhrwh2xj324", "content": "\ud83d\udfe0 CVE-2026-100847 - High (7.5)\n\nAzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100847/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:47:38.011819Z"}, {"uuid": "12cc644a-0046-4227-8944-23941957866e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhrwo5qdt24", "content": "\ud83d\udfe0 CVE-2026-100838 - High (8.1)\n\nContrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100838/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:47:45.671966Z"}, {"uuid": "5aa0c2ad-cc02-4fef-9b68-199e2e0bfc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100839", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhrwvt3rz2c", "content": "\ud83d\udfe0 CVE-2026-100839 - High (8.4)\n\nContrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100839/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:47:53.242633Z"}, {"uuid": "f5a55027-6509-4e4a-bab5-f01c1173495d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100840", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhsqrslk72y", "content": "\ud83d\udfe0 CVE-2026-100840 - High (7.8)\n\nMONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration en...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100840/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T03:02:23.165085Z"}, {"uuid": "0231a29c-eb8c-4927-8b29-2c2d5e971ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100841", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhsqzd7ny2y", "content": "\ud83d\udfe0 CVE-2026-100841 - High (7.8)\n\nIn MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination trac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100841/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T03:02:29.026105Z"}, {"uuid": "cda3d8a7-8d73-4407-9696-159e407fd619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhtqjwgvk2u", "content": "CVE-2026-100835 - contrast\nVersions of Contrast earlier than 1.16.0 can be tricked into accepting identity proofs that come from a different machine. This means someone who can watch the network traffic\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#contrast #edgelesssys #CVE #infosec", "creation_timestamp": "2026-09-27T03:20:06.000103Z"}, {"uuid": "0ef3933b-b06d-4ad2-b6ae-7a1222b28731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwhweuwfex2i", "content": "\ud83d\udea8 CVE-2026-100835 \u2014 CVSS 9.1 CRITICAL\n\nContrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attest...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-27T04:07:15.689882Z"}, {"uuid": "9db8a2ae-524f-48c3-aa51-5bf0cc9d6ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3kaeg32qoncnm", "content": "CVE-2026-100853 - AzuraCast before 0.23.8 On-Demand Download Endpoint Authorization Bypass\nCVE ID : CVE-2026-100853\n \n Published : Sept. 27, 2026, 2:17 a.m. | 1\u00a0hour, 28\u00a0minutes ago\n \n Description : In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to ve...", "creation_timestamp": "2026-09-27T04:17:08.646266Z"}, {"uuid": "455e8527-ba42-4330-a187-e6bd6db49391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100835", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117341121683608469", "content": "CVE-2026-100835: Contrast <1.16.0 faces CRITICAL remote attestation relay attacks. Any valid TEE attestation report is accepted, risking trust bypass. Upgrade ASAP. https://radar.offseq.com/threat/contrast-before-1160-is-susceptible-to-remote-attestation-relay-attacks-cve-2026-100835-3833ee713219f7e3 #OffSeq #CVE2026100835 #infosec #security", "creation_timestamp": "2026-09-27T04:30:24.846907Z"}, {"uuid": "f603028e-ce6e-4941-9d73-da93ee95e499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100835", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhxocy6sz2j", "content": "CRITICAL: Contrast <1.16.0 vulnerable to attestation relay attacks. Unbound TEE reports can let attackers impersonate trusted workloads. Patch now. https://radar.offseq.com/threat/contrast-before-1160-is-susceptible-to-remote-attestation-relay-attacks-cve-2026-100835-3833ee713219f7e3 #OffSeq #CVE...", "creation_timestamp": "2026-09-27T04:30:27.073345Z"}, {"uuid": "5bd038d5-426d-4734-ba9c-1f57ae29b6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117342124693395134", "content": "There is a new vulnerability with elevated criticality in TOTOLINK N150RT (CVE-2026-100896) https://vuldb.com/vuln/410846", "creation_timestamp": "2026-09-27T08:45:29.305177Z"}, {"uuid": "d55c59a8-8d7c-493f-ac29-4edaa7a5072e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100852", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwishxqn5v2f", "content": "CVE-2026-100852 - azuracast\nIn AzuraCast versions up to 0.23.x, a station user who can manage streamers can enter a username containing special characters that the system does not properly protect against. When a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azuracast #CVE #infosec", "creation_timestamp": "2026-09-27T12:30:04.252027Z"}, {"uuid": "a47aa154-e5e2-4c18-86f7-05277f71d068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100856", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwishz5u762u", "content": "CVE-2026-100856 - azuracast\nThe version of AzuraCast earlier than 0.23.6 lets anyone with the RemoteRelays permission insert special text into the relay password field that can cause the underlying\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azuracast #composer #CVE #infosec", "creation_timestamp": "2026-09-27T12:30:05.779040Z"}, {"uuid": "c2463b7e-150a-49bf-89b7-bf04726a2d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100857", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwisztza3u25", "content": "CVE-2026-100857 - azuracast\nIf you run AzuraCast version earlier than 0.23.4, a user who can manage media or their profile can add specially crafted text that causes the system to execute shell commands\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azuracast #composer #CVE #infosec", "creation_timestamp": "2026-09-27T12:40:04.613957Z"}, {"uuid": "d41c4cee-4be8-473c-be4d-882012cb2fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100864", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwiszvgvvn2u", "content": "CVE-2026-100864 - heym\nVersions of heym before 0.0.91 let anyone with a valid account craft special expressions that break out of the sandbox and run any Python command on the server. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#heym #heymrun #CVE #infosec", "creation_timestamp": "2026-09-27T12:40:05.677753Z"}, {"uuid": "d0afa375-1e1c-4a3d-a0df-9791e23ad4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwitlsbyqg25", "content": "CVE-2026-100865 - heym\nVersions of Heym earlier than 0.0.53 let a user who can edit or import workflow definitions run any Python commands on the server, and they also allow anyone who knows a webhook address\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#heym #heymrun #CVE #infosec", "creation_timestamp": "2026-09-27T12:50:06.855651Z"}, {"uuid": "bcc7598d-790c-489e-88f8-ff9d14cd381f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fsopnd6va4p2l", "content": "CVE-2026-100872 - Sylius 2.x before 2.1.16 and 2.2.9 Payment Amount Overwrite\nCVE ID : CVE-2026-100872\n \n Published : Sept. 27, 2026, 1:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Sylius versions before 2.1.16 and 2.2.9 fail to validate payment amounts during cart recalc...", "creation_timestamp": "2026-09-27T14:47:09.886081Z"}, {"uuid": "ec0fd4e9-cec3-4218-9a3e-5c91747e46e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100871", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iyucvqqipnjh6", "content": "CVE-2026-100871 - Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 JWT Audience Confusion Allows Admin API Authentication\nCVE ID : CVE-2026-100871\n \n Published : Sept. 27, 2026, 1:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Sylius versions before 1.12.25, 1.13....", "creation_timestamp": "2026-09-27T14:53:09.777274Z"}, {"uuid": "0f3b7e17-6fd5-4cbc-80f9-41df43d885f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100870", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jesnkemshe52w", "content": "CVE-2026-100870 - Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 Admin Password Reset Poisoning via Host Header\nCVE ID : CVE-2026-100870\n \n Published : Sept. 27, 2026, 1:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Sylius versions before 1.12.25, 1.13.17, 1.14...", "creation_timestamp": "2026-09-27T14:59:09.711207Z"}, {"uuid": "c6064a54-0f1e-41d1-b963-1d9c7d80e3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103520", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100835\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 10:54:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100835 PoC: Edgeless Contrast <1.16.0 remote attestation relay (aTLS / CWE-295). Manifest audit (AllowedChipIDs/AllowedPIIDs), version & coordinator probe. https://pocbit.org/pocs/cve-2026-100835\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T11:00:08.000000Z"}, {"uuid": "ef00170f-b854-4937-a8cf-db5e5cfb065a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100871", "type": "seen", "source": "https://gist.github.com/ichintu/f423d36b58b96f0e6b3b72c29160f47e", "content": "On September 27, 2026, four HIGH-severity vulnerabilities were disclosed affecting Sylius e-commerce platforms (versions prior to 1.12.25/1.13.17/1.14.20 and 2.1.16/2.2.9). The flaws include:\n\u2022 **Payment Manipulation & Unauthorized Refunds** (CVE-2026-100872, CVE-2026-100869): Missing validation and API restrictions allow attackers to alter order totals or force refunds while bypassing gateway checks, leading to financial fraud.\n\u2022 **JWT Audience Confusion** (CVE-2026-100871): Malformed tokens from the Shop API can be misinterpreted by the Admin API, enabling privilege escalation to full administrative access.\n\u2022 **Host Header Poisoning** (CVE-2026-100870): Unvalidated `Host` headers allow attackers to forge admin password-reset links, facilitating account takeover.\n\n**Impact & Recommendation:** These vulnerabilities pose significant risks of financial loss and unauthorized administrative access. Users should immediately upgrade to the patched versions and apply vendor-recommended mitigations.", "creation_timestamp": "2026-09-27T16:00:35.000000Z"}, {"uuid": "32218b64-ecf4-4ada-b3c2-04191946bfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100870", "type": "seen", "source": "https://gist.github.com/ichintu/f423d36b58b96f0e6b3b72c29160f47e", "content": "On September 27, 2026, four HIGH-severity vulnerabilities were disclosed affecting Sylius e-commerce platforms (versions prior to 1.12.25/1.13.17/1.14.20 and 2.1.16/2.2.9). The flaws include:\n\u2022 **Payment Manipulation & Unauthorized Refunds** (CVE-2026-100872, CVE-2026-100869): Missing validation and API restrictions allow attackers to alter order totals or force refunds while bypassing gateway checks, leading to financial fraud.\n\u2022 **JWT Audience Confusion** (CVE-2026-100871): Malformed tokens from the Shop API can be misinterpreted by the Admin API, enabling privilege escalation to full administrative access.\n\u2022 **Host Header Poisoning** (CVE-2026-100870): Unvalidated `Host` headers allow attackers to forge admin password-reset links, facilitating account takeover.\n\n**Impact & Recommendation:** These vulnerabilities pose significant risks of financial loss and unauthorized administrative access. Users should immediately upgrade to the patched versions and apply vendor-recommended mitigations.", "creation_timestamp": "2026-09-27T16:00:35.000000Z"}, {"uuid": "cead9fba-fc30-4376-abd1-ff95b941d546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100869", "type": "seen", "source": "https://gist.github.com/ichintu/f423d36b58b96f0e6b3b72c29160f47e", "content": "On September 27, 2026, four HIGH-severity vulnerabilities were disclosed affecting Sylius e-commerce platforms (versions prior to 1.12.25/1.13.17/1.14.20 and 2.1.16/2.2.9). The flaws include:\n\u2022 **Payment Manipulation & Unauthorized Refunds** (CVE-2026-100872, CVE-2026-100869): Missing validation and API restrictions allow attackers to alter order totals or force refunds while bypassing gateway checks, leading to financial fraud.\n\u2022 **JWT Audience Confusion** (CVE-2026-100871): Malformed tokens from the Shop API can be misinterpreted by the Admin API, enabling privilege escalation to full administrative access.\n\u2022 **Host Header Poisoning** (CVE-2026-100870): Unvalidated `Host` headers allow attackers to forge admin password-reset links, facilitating account takeover.\n\n**Impact & Recommendation:** These vulnerabilities pose significant risks of financial loss and unauthorized administrative access. Users should immediately upgrade to the patched versions and apply vendor-recommended mitigations.", "creation_timestamp": "2026-09-27T16:00:35.000000Z"}, {"uuid": "eb6a26c8-62e8-4987-80e0-2ee533d1675a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100872", "type": "seen", "source": "https://gist.github.com/ichintu/f423d36b58b96f0e6b3b72c29160f47e", "content": "On September 27, 2026, four HIGH-severity vulnerabilities were disclosed affecting Sylius e-commerce platforms (versions prior to 1.12.25/1.13.17/1.14.20 and 2.1.16/2.2.9). The flaws include:\n\u2022 **Payment Manipulation & Unauthorized Refunds** (CVE-2026-100872, CVE-2026-100869): Missing validation and API restrictions allow attackers to alter order totals or force refunds while bypassing gateway checks, leading to financial fraud.\n\u2022 **JWT Audience Confusion** (CVE-2026-100871): Malformed tokens from the Shop API can be misinterpreted by the Admin API, enabling privilege escalation to full administrative access.\n\u2022 **Host Header Poisoning** (CVE-2026-100870): Unvalidated `Host` headers allow attackers to forge admin password-reset links, facilitating account takeover.\n\n**Impact & Recommendation:** These vulnerabilities pose significant risks of financial loss and unauthorized administrative access. Users should immediately upgrade to the patched versions and apply vendor-recommended mitigations.", "creation_timestamp": "2026-09-27T16:00:35.000000Z"}, {"uuid": "8f3d8ee4-93b1-4206-8824-5c0bb788b846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100841", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mwji77g5rz2t", "content": "CVE-2026-100841: high-severity flaw in MONAI (all versions through 1.6.0).\n\n\u2022 PersistentDataset forces unsafe torch.load on cached MetaTensors\n\u2022 Local user who can write to a shared cache can run code\n\nhttps://thecircuitry.to/article/monai-160-hit-by-high-severity-rce-flaw-via-pickle-cache-muk13d8j", "creation_timestamp": "2026-09-27T18:58:52.872674Z"}, {"uuid": "d79465ed-d976-45c6-97eb-408e12d23c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100874", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwjigzm4bu26", "content": "CVE-2026-100874 is a remotely exploitable SQL injection flaw in mathurvishal's CloudClassroom-PHP-Project, a PHP web application. A public exploit has been published per VulDB. The project ships as a rolling release and no fixed version is available.", "creation_timestamp": "2026-09-27T19:03:15.013061Z"}, {"uuid": "d8793f45-a161-4541-963c-6776defb78fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117345723098081984", "content": "Seetong T8108 series (v4.6.1.4-build202604241011) hit by CRITICAL CVE-2026-100886: improper authentication in Debug Service. Exploitable remotely \u2014 public exploit code available. No patch. Restrict network access ASAP. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #CVE2026100886 #IoTSecurity #Vuln", "creation_timestamp": "2026-09-28T00:00:37.025968Z"}, {"uuid": "0e477d9b-b53e-4335-a2d3-678464e066d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwjz2sebua2b", "content": "Seetong T8108 series faces CRITICAL CVE-2026-100886: remote unauthenticated access possible due to improper authentication (v4.6.1.4). No patch \u2014 restrict device access immediately. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #...", "creation_timestamp": "2026-09-28T00:00:38.878702Z"}, {"uuid": "c8befd3b-b8b3-44c7-94f0-dfd61ce870f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjz3ypojc27", "content": "\ud83d\udd34 CVE-2026-100886 - Critical (10)\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build20260424101...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100886/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:01:20.453069Z"}, {"uuid": "261fe31c-07eb-41ae-ac71-8ba9c6a44a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://gist.github.com/ichintu/0739db6c0846cb8d7c608bff5afb2d43", "content": "This September 27, 2026 threat intelligence briefing covers four newly disclosed vulnerabilities and a community security discussion:\n\n\u2022 **Seetong T8108 Series (CVE-2026-100886):** Critical (10.0) remote debug service improper authentication flaw. Exploit is public and the vendor remains unresponsive.\n\u2022 **Nezha \u22642.2.3 (CVE-2026-101090):** Critical (9.8) OAuth2 host header injection that reflects attacker-controlled URLs, enabling account takeover. No patch currently available.\n\u2022 **Obot \u2264v0.22.1 (4 CVEs):** Four high-to-critical (8.3\u20139.8) vulnerabilities, including unauthenticated admin access via Docker quickstart misconfiguration, OAuth/authorization bypasses, and SSRF via MCP registration. Remediation involves updating to v0.23.0 or explicitly enabling authentication.\n\u2022 **Community Discussion:** A Reddit thread explores budget-friendly (~$300) strategies for building a highly private, secure digital workspace from scratch.", "creation_timestamp": "2026-09-28T00:00:34.000000Z"}, {"uuid": "bc962866-d6c5-4926-917b-e2056a4b0ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwjzgpjkv62u", "content": "\ud83d\udea8 CVE-2026-100886 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The aff...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100886\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T00:07:18.595460Z"}, {"uuid": "a2202a7b-bf5e-4673-912a-cc29006aeb26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100876", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-100876", "content": "", "creation_timestamp": "2026-09-27T11:16:48.000000Z"}, {"uuid": "14299cee-2927-4ae9-9eb8-a5363af57415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwk25kijk22u", "content": "CVE-2026-100886\nThe Seetong T8108, T8108P, T8116 and T8232 units contain a flaw in their troubleshooting (debug) service that can let an attacker skip the normal login check from anywhere on the network. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-28T00:20:04.563321Z"}, {"uuid": "71e9217d-eb2d-4143-9855-4134901304e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100870", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk2qwu7ho2k", "content": "\ud83d\udfe0 CVE-2026-100870 - High (8.8)\n\nSylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100870/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:30:56.307623Z"}, {"uuid": "b2d0e2a1-628b-4f4e-953d-cefc397d445f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100871", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk2r5zf2j27", "content": "\ud83d\udfe0 CVE-2026-100871 - High (8.8)\n\nSylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall iden...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100871/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:31:03.364145Z"}, {"uuid": "f2c6b151-0057-4f93-ad81-1be3a4f0ea8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100872", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk2rfbhsr27", "content": "\ud83d\udfe0 CVE-2026-100872 - High (7.5)\n\nSylius versions before 2.1.16 and 2.2.9 fail to validate payment amounts during cart recalculatio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100872/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:31:10.773425Z"}, {"uuid": "02ffaa12-8aca-449d-a2f4-cde7fc9ad927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100843", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk3lwu6gd27", "content": "\ud83d\udfe0 CVE-2026-100843 - High (7.8)\n\nMONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100843/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:46:02.780501Z"}, {"uuid": "136d3025-2097-4654-b2b1-9a1fe83f4234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100844", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk3m6kll425", "content": "\ud83d\udfe0 CVE-2026-100844 - High (8.4)\n\nMONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100844/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:46:09.940827Z"}, {"uuid": "3185af97-037b-411c-a85f-6decdb102bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ctyisjmolbrf7", "content": "CVE-2026-100886 - Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication\nCVE ID : CVE-2026-100886\n \n Published : Sept. 27, 2026, 11:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4...", "creation_timestamp": "2026-09-28T00:47:19.378128Z"}, {"uuid": "6424639c-cdc0-4f67-b5de-0edfb88a7781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4grsumi2c", "content": "\ud83d\udfe0 CVE-2026-100833 - High (8.2)\n\nContrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100833/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T01:01:03.053256Z"}, {"uuid": "9d35a719-48b0-45c4-bc81-f71a92dc831c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100889", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j7fb5u75uknph", "content": "CVE-2026-100889 - Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one\nCVE ID : CVE-2026-100889\n \n Published : Sept. 27, 2026, 11:45 p.m. | 44\u00a0minutes ago\n \n Description : A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affecte...", "creation_timestamp": "2026-09-28T01:37:16.909031Z"}, {"uuid": "ed767aad-b933-4939-80f5-34727123e851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkau5upbx26", "content": "CVE-2026-100896 - n150rt\nThe web admin page on TOTOLINK N150RT routers can be tricked into running system commands. An attacker who accesses the router\u2019s management interface could execute unwanted actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#n150rt #totolink #CVE #infosec", "creation_timestamp": "2026-09-28T02:20:05.543370Z"}, {"uuid": "98c61de7-3fd0-409d-bcbe-0b05827959f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkbh6shlk27", "content": "\ud83d\udd34 CVE-2026-100896 - Critical (9.9)\n\nA weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the fu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100896/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T02:30:47.217858Z"}, {"uuid": "cb4817db-a90d-4f29-b08b-9a95c9175617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117346430231490086", "content": "TOTOLINK N150RT v3.4.0-B20201030 is vulnerable (CVE-2026-100896, CVSS 9.4): CRITICAL OS command injection in Web UI. Public exploit out, no patch yet. Restrict mgmt access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq #CVE2026100896 #infosec #router", "creation_timestamp": "2026-09-28T03:00:26.896488Z"}, {"uuid": "3d68eca7-9b24-4da2-bd1c-076ff331cfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwkd4ek2bt22", "content": "TOTOLINK N150RT v3.4.0-B20201030 faces CRITICAL OS command injection (CVE-2026-100896, CVSS 9.4) \u26a0\ufe0f. Public exploit exists \u2014 restrict mgmt interface & check for updates. No patch yet. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq ...", "creation_timestamp": "2026-09-28T03:00:29.092995Z"}, {"uuid": "9ceb6566-c730-4b3e-bc04-371dc54f2fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100870", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwki4m4lua2r", "content": "CVE-2026-100870 - sylius\nSylius builds password\u2011reset links for administrators using the website address sent by the browser, without checking it. An attacker can trick the system into sending those links to a domain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sylius #CVE #infosec", "creation_timestamp": "2026-09-28T04:30:05.297117Z"}, {"uuid": "f8104a4e-630b-4fd8-99f6-4bc47fb67f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://gist.github.com/ichintu/e77ad87ce7c2605a3295aca992dad2d4", "content": "CVE-2026-100896 is a critical (CVSS 9.9) OS command injection vulnerability affecting the TOTOLINK N150RT router (firmware 3.4.0-B20201030). It targets the web management interface via the `wlanif` parameter, enabling remote command execution. A public exploit has already been released.", "creation_timestamp": "2026-09-28T04:00:27.000000Z"}, {"uuid": "985077b8-fdb0-4dc9-a8d9-bd984509a03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100871", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwki4oynm624", "content": "CVE-2026-100871 - sylius\nVersions of Sylius listed above issue login tokens that do not identify which part of the system created them. An attacker can create a regular shop account using an admin's email, get a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sylius #CVE #infosec", "creation_timestamp": "2026-09-28T04:30:07.963304Z"}, {"uuid": "123a297f-ad43-4f0d-9318-4aefccc290db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "seen", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}, {"uuid": "192396c8-9fd7-46aa-889c-4415e43e3ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "seen", "source": "Telegram/WkCWq67CgLBcm_hEcvrpJWcHwwDb7nvZdSlCBdaLX915QMo", "content": "", "creation_timestamp": "2026-09-27T15:00:39.000000Z"}, {"uuid": "2df789e6-f0dd-42f7-bf1e-bc2deb6629d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "published-proof-of-concept", "source": "Telegram/WkCWq67CgLBcm_hEcvrpJWcHwwDb7nvZdSlCBdaLX915QMo", "content": "", "creation_timestamp": "2026-09-27T15:00:39.000000Z"}, {"uuid": "fd855f58-dff7-4095-9fed-d3b02dd4f2ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "published-proof-of-concept", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}, {"uuid": "462a9e4a-26f4-4793-9f2d-4f20fb52f28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100831", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnzlsztt52m", "content": "\ud83d\udfe0 CVE-2026-100831 - High (8.8)\n\nUse-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100831/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T14:20:49.798670Z"}, {"uuid": "30fda8f5-a4f6-42ae-8d2f-b1554850d5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnzm2e5zv27", "content": "\ud83d\udfe0 CVE-2026-100832 - High (8.8)\n\nUse-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100832/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T14:20:57.072710Z"}, {"uuid": "df987f7e-d027-4318-9b45-e4fa89b6c67f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100818", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnzmbdzxs27", "content": "\ud83d\udd34 CVE-2026-100818 - Critical (9.6)\n\nSandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100818/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T14:21:04.188016Z"}, {"uuid": "855502b7-64f3-41ba-9535-a4882b74d2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/az7g3klrcwflr", "content": "CVE-2026-100832 - Use-after-free in the Graphics: Canvas2D component\nCVE ID : CVE-2026-100832\n \n Published : Sept. 29, 2026, 1:17 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153....", "creation_timestamp": "2026-09-29T15:07:25.466973Z"}, {"uuid": "4bd6fcba-2835-4a13-96c1-af1f5298759a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6mzue2wbgxumb", "content": "CVE-2026-100831 - Use-after-free in the DOM: UI Events & Focus Handling component\nCVE ID : CVE-2026-100831\n \n Published : Sept. 29, 2026, 1:17 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability...", "creation_timestamp": "2026-09-29T15:13:25.434266Z"}, {"uuid": "a09e32b4-9c9d-47d7-bcfb-85aefd010972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100800", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwo7kot6sc2l", "content": "\ud83d\udea8 CVE-2026-100800 \u2014 CVSS 9.6 CRITICAL\n\nSandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100800\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-29T16:07:32.847711Z"}, {"uuid": "67778ca1-3e2b-4d6b-af4b-a8c3e5775801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100804", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwo7kwxlsk2l", "content": "\ud83d\udea8 CVE-2026-100804 \u2014 CVSS 9.6 CRITICAL\n\nSandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100804\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-29T16:07:41.297875Z"}, {"uuid": "330aa27c-73b4-4884-839c-5c9b649d8fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100811", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwo7la3h7v2i", "content": "\ud83d\udea8 CVE-2026-100811 \u2014 CVSS 9.6 CRITICAL\n\nSandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Fir...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100811\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-29T16:07:51.063407Z"}, {"uuid": "79fa92b9-a8ae-4539-82db-cb8a84390428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100818", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwo7lin6j22q", "content": "\ud83d\udea8 CVE-2026-100818 \u2014 CVSS 9.6 CRITICAL\n\nSandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100818\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-29T16:07:59.866761Z"}, {"uuid": "66278fad-b87a-48ac-bf20-3700447e8943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100819", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwo7lqo7tg2y", "content": "\ud83d\udea8 CVE-2026-100819 \u2014 CVSS 9.6 CRITICAL\n\nSandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100819\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-29T16:08:08.391438Z"}, {"uuid": "8939d908-c7d7-4693-9411-79e16c88b21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100811", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "de366993-e3f6-4807-b651-f6409d77fe6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100803", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "5f8a623e-55e3-4c9e-808f-38dd38f3dfd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100812", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "e08b55bc-53c1-47f3-a259-fe2816860698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100800", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "182aa44c-7cf6-45df-bb18-2bc5f1ced546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100801", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "ff1e9b8a-c313-48c0-ba28-027fc673e549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100815", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "44ba6d84-0a7d-4960-92be-7958d10fd46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100819", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "d666fdfd-c05a-479f-a8f9-a342bf20a730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100824", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "7adb2226-30d1-465c-bff6-a14946368fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100806", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "2d7f57d3-be1d-4861-932f-959012adc5e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100807", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "ea8cd1c3-2ded-4198-bf71-e1e82ac38d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100808", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "8d74580b-4d83-4f4a-be5a-d9e3eb63079f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100809", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "cc608165-f3df-4d40-998b-31f9b5447ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100814", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "8b2e3c76-36a6-46e7-8167-e7af1b47808b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100816", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "96669987-ff84-4e15-a86b-ae0c8908279b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100818", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "8f15c461-eaee-4bfb-9d3c-bde23a6da832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100820", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "69339229-7289-498f-b388-4ecf0d7bbfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100821", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "d79a9521-ca72-41f3-8726-fae5bcf3fce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100822", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "4901a101-e603-445a-ad0c-3bc2d1b02faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100825", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "194d5312-6b24-4914-9899-352090bd8e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100826", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "4bb5c04b-84f5-4a84-8765-1d6bb931c4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100829", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "83a0ceb1-0dac-4817-b81d-7237f77977e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100831", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "74819078-749d-4cfd-9e6e-7a9ab02f83c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100830", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "382b4a69-5998-4373-84bf-7d921984ea03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "dc2c421c-d3cf-4e92-af1d-308c726c9633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100828", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "92f4d75f-66a9-4972-9c8e-dc8aaf4b706e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100845", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwtulhxip527", "content": "\ud83d\udccc CVE-2026-100845 - MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=Tr... https://www.cyberhub.blog/cves/CVE-2026-100845", "creation_timestamp": "2026-10-01T22:07:06.650466Z"}, {"uuid": "1a1d06c2-36eb-4b71-9a17-73809cae8773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100840", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwtwb5i5vz2n", "content": "\ud83d\udccc CVE-2026-100840 - MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary impor... https://www.cyberhub.blog/cves/CVE-2026-100840", "creation_timestamp": "2026-10-01T22:37:07.896721Z"}, {"uuid": "587f5204-5196-4cad-84ec-66c66bed0734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100801", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "86c6cffd-8b30-4ed7-9496-849b5917fa0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100803", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "55ce6ad7-a9da-4d08-86c8-3cc475140505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100807", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "ff041a71-c99e-4706-a7ee-8ec4d66954e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100809", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "30c5beb5-76c4-42b1-a641-3347472030f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100814", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "f8c614a7-c7ca-4f16-a82f-0b0364b96cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100816", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "84e62b97-cbde-4a8d-8916-5ecfbb2c9404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100800", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "a2d9bb5b-4821-4a4f-a91f-2f78a784a80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100810", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "df1a6f74-2a6a-4b49-a64b-f69f7a21e961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100817", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "16310fb4-ac1f-4317-b5ae-e57bdfd1ae72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100819", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "faf2f542-7855-49b6-ab97-a7571725ad6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100808", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "011672a5-1396-4188-9f35-7d80f2fa684e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100802", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "226ed923-70c4-4a6e-8471-21a74b6bfb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100804", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "927d2191-aaf3-4bbd-86aa-9f008bc732a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100805", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "2709ab1d-cda5-43f6-a2a6-9d57cfe80b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100806", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "44bd4242-4cbe-41e3-8d28-ad6015f2376d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100811", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "6abed153-ddf1-40eb-8224-3ec262b12853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100812", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "b72dd83e-269f-463f-be09-e66a0690336a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100813", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "5b473025-eabf-4e94-b0a8-de8127340ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100815", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "a347d5c9-209e-40f8-9f3a-f59b24dad9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100818", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "87d6256b-b4b9-4b4c-a760-46215cebfd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100820", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "670a392c-821a-4527-a9be-37d0e0323185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100821", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "a5908db9-db06-4316-a87a-1fbb227bd4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100822", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "ad9c4685-dce2-4ed0-ae2c-b3d68c92a697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100824", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "199d85bf-b4a0-4d06-8336-7214152a4a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100829", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "e762c63a-a829-48be-9e86-a362339d393e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100831", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "5e7d7560-7537-4b6f-902a-6c8d3ca89282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "658a8458-7c75-4909-9ad0-35191733b541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100825", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "75412f64-55d6-48e5-8791-d4455022ed06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100826", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "07abad6a-7d66-418d-b9f5-f4a264c6c0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100828", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "6e12cb95-e3a8-4d93-a824-09a1cff287ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100830", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "551a7f0c-6d3a-43b9-ac0c-387a7699af54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100818", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx6nw6z2rp2w", "content": "\ud83d\udccc CVE-2026-100818 - Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140... https://www.cyberhub.blog/cves/CVE-2026-100818", "creation_timestamp": "2026-10-06T05:07:09.481998Z"}, {"uuid": "2a9d798a-25be-445f-be20-5b0e2e3fcaa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100819", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx6plsuzhl26", "content": "\ud83d\udccc CVE-2026-100819 - Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunde... https://www.cyberhub.blog/cves/CVE-2026-100819", "creation_timestamp": "2026-10-06T05:37:08.203875Z"}, {"uuid": "e5368fe1-e9e5-4226-b5ce-793b3c1d33e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100811", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx6rbhn2ln26", "content": "\ud83d\udccc CVE-2026-100811 - Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbir... https://www.cyberhub.blog/cves/CVE-2026-100811", "creation_timestamp": "2026-10-06T06:07:06.825683Z"}, {"uuid": "b28055d5-76b4-4b45-a3cb-69dcafdcb333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100811", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mx6rg773er2u", "content": "\ud83d\udccc CVE-2026-100811 - Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbir... https://www.potatohub.blog/cves/CVE-2026-100811", "creation_timestamp": "2026-10-06T06:09:47.501771Z"}, {"uuid": "54ad8c8a-00bd-45d0-b9e9-a67403891145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx74yyfbyq2u", "content": "\ud83d\udccc CVE-2026-100832 - Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ... https://www.cyberhub.blog/cves/CVE-2026-100832", "creation_timestamp": "2026-10-06T09:37:07.188409Z"}, {"uuid": "1b2625dd-11c5-48e2-a581-b8a597c26088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100820", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx76omszvw27", "content": "\ud83d\udccc CVE-2026-100820 - Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird... https://www.cyberhub.blog/cves/CVE-2026-100820", "creation_timestamp": "2026-10-06T10:07:07.024207Z"}, {"uuid": "46c53baa-5ab1-43e9-b976-84d8d98157e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100813", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx7aeax5cy2x", "content": "\ud83d\udccc CVE-2026-100813 - Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. https://www.cyberhub.blog/cves/CVE-2026-100813", "creation_timestamp": "2026-10-06T10:37:06.524381Z"}, {"uuid": "0654c2cd-6328-4435-a4db-eaaaaacc4961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100814", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx7bzvrujx2r", "content": "\ud83d\udccc CVE-2026-100814 - Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird... https://www.cyberhub.blog/cves/CVE-2026-100814", "creation_timestamp": "2026-10-06T11:07:06.610923Z"}, {"uuid": "d34a4a69-89de-42c5-9284-aa37d290e7ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100815", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx7dpk5bal2b", "content": "\ud83d\udccc CVE-2026-100815 - Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, an... https://www.cyberhub.blog/cves/CVE-2026-100815", "creation_timestamp": "2026-10-06T11:37:06.296754Z"}]}