{"vulnerability": "cve-2026-1010", "sightings": [{"uuid": "7361aa82-aad7-4440-8892-3e32a7db89c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1010", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcis7pzh4e2u", "content": "", "creation_timestamp": "2026-01-16T00:01:36.659961Z"}, {"uuid": "e3ea68e7-8061-4d81-8ad2-c54f9d1cbc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10109", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrv6rsaho22t", "content": "\u300cIBM Db2\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u66ab\u5b9a\u7684\u306a\u4fee\u6b63\u3092\u63d0\u4f9b\n\nIBM\u306f\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u88fd\u54c1\u300cIBM Db2\u300d\u306b\u95a2\u3059\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u670823\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3059\u308b\u3068\u3068\u3082\u306b\u3001\u66ab\u5b9a\u7684\u306a\u5bfe\u7b56\u3092\u884c\u3063\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u306a\u304b\u3067\u3082\u300cCVE-2026-10109\u300d\u306b\u3064\u3044\u3066\u306f\u5f71\u97ff\u304c\u5927\u304d\u3044\u3002\u300cDRDA\u300d\u30cf\u30f3\u30c9\u30b7\u30a7\u30a4\u30af\u51e6\u7406\u306b\u5224\u660e\u3057\u305f\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u306f\u300c9.8\u300d\u3001\u91cd\u8981\u5ea6\u306f4\u6bb5\u968e\u4e2d\u3082\u3063\u3068...", "creation_timestamp": "2026-07-30T19:36:17.213308Z"}, {"uuid": "a53bc8f6-43c8-42a4-bdde-b81777344a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzdp6japs2h", "content": "CVE-2026-10108 - xiaomusic 0.5.7 Path Traversal via GET /music endpoint\nCVE ID : CVE-2026-10108\n \n Published : May 29, 2026, 6:16 p.m. | 55\u00a0minutes ago\n \n Description : xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path}...", "creation_timestamp": "2026-05-29T20:08:59.445774Z"}, {"uuid": "3a9269a1-c005-4f78-8814-10cef41ddaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzdsekh3l2s", "content": "CVE-2026-10105 - agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()\nCVE ID : CVE-2026-10105\n \n Published : May 29, 2026, 6:16 p.m. | 55\u00a0minutes ago\n \n Description : agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allow...", "creation_timestamp": "2026-05-29T20:10:46.486589Z"}, {"uuid": "b843f691-e987-4544-8501-22ce5db9d9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10105", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmzlfnbqri2v", "content": "agno 2.6.5\u3067ClickHouse\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u30e1\u30bf\u30c7\u30fc\u30bf\u30ad\u30fc\u30fb\u5024\u306b\u60aa\u610f\u306e\u3042\u308b\u6587\u5b57\u5217\u3092\u6df7\u5165\u3055\u305b\u3001\u5168\u884c\u524a\u9664\u3001\u7279\u5b9a\u884c\u524a\u9664\u3001\u60c5\u5831\u62bd\u51fa\u304c\u53ef\u80fd\u3002\nCVE-2026-10105 CVSS 8.3 | HIGH", "creation_timestamp": "2026-05-29T22:26:49.484953Z"}, {"uuid": "4778310b-2fab-4e96-8ae8-fa63175fe28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10107", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmzlicfzir2o", "content": "MoviePilot v2\u306e\u753b\u50cf\u30d7\u30ed\u30ad\u30b7\u306bSSRF\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u304c\u3001Cookie\u3068URL\u3067\u4efb\u610f\u306eURL\u3092\u8981\u6c42\u53ef\u80fd\u3002\u5185\u90e8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u30b5\u30fc\u30d3\u30b9\u60c5\u5831\u6f0f\u6d29\u3084\u30c7\u30fc\u30bf\u7a83\u76d7\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10107 CVSS 7.7 | HIGH", "creation_timestamp": "2026-05-29T22:28:33.308457Z"}, {"uuid": "67a71cd7-9ba2-4219-8a16-9456c9e5267d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3tqrfgri2m", "content": "\ud83d\udfe0 CVE-2026-10105 - High (8.3)\n\nagno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-30T20:01:32.729635Z"}, {"uuid": "3bf7e4e6-3d2a-4f57-8f2c-c6bf12aedfd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10107", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3tqyigao2p", "content": "\ud83d\udfe0 CVE-2026-10107 - High (7.7)\n\nMoviePilot v2 contains a server-side request forgery vulnerability in the image proxy endpoint th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10107/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-30T20:01:40.416831Z"}, {"uuid": "359c147e-2348-400f-a19a-5c03806ce71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10108", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3x35uqub2h", "content": "\ud83d\udfe0 CVE-2026-10108 - High (7.5)\n\nxiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10108/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-30T21:01:03.306922Z"}, {"uuid": "af0872b4-5695-48f0-9be4-73a9fc9d962e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnbsehigoh22", "content": "CVE-2026-10100 - Simple Custom Login Page\nCVE ID : CVE-2026-10100\n \n Published : June 2, 2026, 3:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fields (Page...", "creation_timestamp": "2026-06-02T04:52:43.829637Z"}, {"uuid": "b5881b2e-89fd-40f7-b76c-eb4f856654a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10100", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnrleigsid2n", "content": "CVE-2026-10100 simple-custom-login-page (CVSS Score 4.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-06-08T11:30:06.872400Z"}, {"uuid": "730c9c34-6185-467c-8547-d95d7754d05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10109", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpjzniyuv52w", "content": "\u5bfe\u8c61\u88fd\u54c1\u540d\u3068\u30d0\u30fc\u30b8\u30e7\u30f3\uff1a\u8a18\u8f09\u306a\u3057 \u8106\u5f31\u6027\u306e\u5185\u5bb9\uff1aPDF\u30d5\u30a1\u30a4\u30eb\u51e6\u7406\u306b\u304a\u3051\u308b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u53ef\u80fd\u6027 \u5f71\u97ff\u3092\u53d7\u3051\u308b\u5bfe\u8c61\uff1aPDF\u30d5\u30a1\u30a4\u30eb\u95b2\u89a7\u6a5f\u80fd \u653b\u6483\u8005\u304c\u53ef\u80fd\u306b\u306a\u308b\u884c\u70ba\uff1a\u30b5\u30fc\u30d3\u30b9\u904b\u7528\u59a8\u5bb3\u306e\u53ef\u80fd\u6027\u304c\u2026\nCVE-2026-10109 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-06-30T22:14:45.047445Z"}, {"uuid": "8958a224-f8ff-4e1d-88c4-7948963dadad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10109", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmyxdq5ub2v", "content": "A critical IBM Db2 RCE flaw (CVE-2026-10109) allows pre-auth code execution. IBM patched it plus two other Db2 bugs. Update 11.5 and 12.1 now.", "creation_timestamp": "2026-07-02T02:40:21.810567Z"}, {"uuid": "416cf794-c3c2-48eb-b7dc-0be43c59a140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2oayxuz2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10104 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Product Video Gallery \u0434\u043b\u044f WooCommerce: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/EC326E63-EF69-46E0-AA9B-16FB76D13172", "creation_timestamp": "2026-07-02T22:16:22.218047Z"}, {"uuid": "0c2de432-0c55-4b5e-b963-cc64428285cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10109", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpprmq5bvu2l", "content": "\ud83d\udccc CVE-2026-10109 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling. https://www.cyberhub.blog/cves/CVE-2026-10109", "creation_timestamp": "2026-07-03T05:07:07.073203Z"}, {"uuid": "eef32475-7f73-42b2-b531-c128fdd8d987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10109", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzl5imjd2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10109 \u0432 IBM Db2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DB5F2348-2DF6-4584-A1E1-635632C413E0", "creation_timestamp": "2026-07-03T07:29:23.804902Z"}, {"uuid": "ce32a200-c529-444c-b81d-4d858e2a153e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116874542096751750", "content": "\ud83d\udea8 CVE-2026-10104 PoC published\nGitHub: https://github.com/Ravi-lk/CVE-2026-10104-POC\nA PoC is available for an authenticated stored XSS issue in Product Video Gallery for WooCommerce.\nThe flaw affects older versions of the WordPress plugin and can allow JavaScript execution on public product pages after a user with product-editing access injects the payload.\nFixed in 1.5.1.9.", "creation_timestamp": "2026-07-06T18:53:05.876622Z"}, {"uuid": "359994f7-d60b-4fe4-9610-1773bf73fb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfj5xjzo2x", "content": "CVE-2026-10106 - Unauthorized users can trigger interactive post actions in private channels via action cookie channel mismatch in Mattermost\nCVE ID : CVE-2026-10106\n \n Published : July 13, 2026, 8:09 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Mattermost versions 11.7.x &l...", "creation_timestamp": "2026-07-13T09:39:35.538910Z"}, {"uuid": "bed1efbc-bd98-42c0-bfc0-71421e9da7f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10106", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjflpgeyb2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10106 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A6A8292C-F17D-4716-BAE3-B5B9A296B821", "creation_timestamp": "2026-07-13T09:41:01.247362Z"}, {"uuid": "1c17203a-0558-4119-a5fd-e3c46b54618b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10103", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfz3xeav2g", "content": "CVE-2026-10103 - Authenticated remote cluster can modify or delete posts it does not own in Mattermost Connected Workspaces shared channels\nCVE ID : CVE-2026-10103\n \n Published : July 13, 2026, 7:57 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : Mattermost versions 11.7.x <...", "creation_timestamp": "2026-07-13T09:48:30.548413Z"}, {"uuid": "564bad92-7640-4ee5-9c78-b1fab85145fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10103", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqjg3ih5wi2l", "content": "Mattermost \u5b89\u5168\u6f0f\u6d1e CVE-2026-10103 \u6df1\u5ea6\u89e3\u6790:\u5f71\u54cd\u7248\u672c\u53ca\u4fee\u590d\u5efa\u8bae\n\n\n\nhttps://qian.cx/posts/75D0D0EF-1531-48D9-9932-E5FAE0B9473C", "creation_timestamp": "2026-07-13T09:49:50.950145Z"}, {"uuid": "722a066a-73bc-4ecd-8dae-b07b46979330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10103", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjg3j37e32a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10103 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/ACA7D09F-590E-4BF7-949F-2850200947B2", "creation_timestamp": "2026-07-13T09:49:51.394869Z"}, {"uuid": "6e5e9987-813b-4f72-91d8-3dd8b63ad144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "seen", "source": "https://t.me/GithubRedTeam/92052", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-10104-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ravi-lk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 14:49:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProduct Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated Stored Cross-Site Scripting Proof of Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.351708Z"}, {"uuid": "b342d31b-3507-4f9e-8ff8-a7d4f9e27346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10103", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mql26gumtz2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10103 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/697AC213-3E2C-4643-954D-E0313EEC086A", "creation_timestamp": "2026-07-14T01:22:04.046287Z"}, {"uuid": "f4342219-2246-4365-9ecc-a7a64b224cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10103", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mql26gyc3g2f", "content": "Mattermost \u5b89\u5168\u6f0f\u6d1e CVE-2026-10103 \u6df1\u5ea6\u89e3\u6790:\u5f71\u54cd\u7248\u672c\u53ca\u4fee\u590d\u5efa\u8bae\n\n\n\nhttps://qian.cx/posts/8594CA0F-D271-4CBB-99F5-CB5620886F31", "creation_timestamp": "2026-07-14T01:22:04.519003Z"}, {"uuid": "0546a025-cfc4-4a9a-9507-ffa4aac1081a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10106", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mql2cxa4472s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10106 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9C7CF284-A3B1-4400-94B6-2ED9AD41977B", "creation_timestamp": "2026-07-14T01:24:35.591275Z"}, {"uuid": "3533ba4d-905c-4f62-ae23-d0ba7b84a60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92052", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-10104-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ravi-lk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 14:49:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProduct Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated Stored Cross-Site Scripting Proof of Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.669807Z"}, {"uuid": "2a443326-f25d-4da4-9f4a-a76777099a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10106", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr2n6qrk2y", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05de\u05d8\u05e8\u05de\u05d5\u05e1\u05d8: CVE-2026-10106 - \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/7BC2C12C-68BD-4D8E-99AE-CBA12F539695", "creation_timestamp": "2026-07-16T07:54:51.257132Z"}, {"uuid": "95a665ba-7fea-4f86-8b38-c9b2feab1cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10103", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr35lktc2i", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05de\u05d8\u05e8\u05de\u05d5\u05e1\u05d8: CVE-2026-10103 - \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/73864E48-135B-4881-B047-26E1F3D3A831", "creation_timestamp": "2026-07-16T07:55:08.594211Z"}, {"uuid": "a5a35425-d440-41a2-b8f7-6195e49529f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "seen", "source": "Telegram/7rIIDruJxEl38qBzoHyGM9oWQAxjhN2Km_TAbaElw9hJXAI", "content": "", "creation_timestamp": "2026-07-16T19:00:21.222966Z"}, {"uuid": "7b4068be-5bc6-4ffe-b1c1-938ef15d07ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "seen", "source": "Telegram/OhhX9i0X1ykgntk9NjydMWNwUPSzUxraU9z7IC-aBX2EpY0", "content": "", "creation_timestamp": "2026-07-16T19:00:21.502703Z"}, {"uuid": "abca656f-3da7-4eec-8088-d38004b8985f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "published-proof-of-concept", "source": "Telegram/7rIIDruJxEl38qBzoHyGM9oWQAxjhN2Km_TAbaElw9hJXAI", "content": "", "creation_timestamp": "2026-07-18T00:00:22.921619Z"}, {"uuid": "715c2d07-3b4d-4b8f-8756-9988d0641425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "published-proof-of-concept", "source": "Telegram/OhhX9i0X1ykgntk9NjydMWNwUPSzUxraU9z7IC-aBX2EpY0", "content": "", "creation_timestamp": "2026-07-18T00:00:22.631453Z"}, {"uuid": "3c875fd9-3375-4041-be89-a35d07949181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:04.959339Z"}, {"uuid": "e80a78d4-6afc-46ed-aee1-f7130cf8afb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10104", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:52.043688Z"}, {"uuid": "0ea3df17-ad23-445a-bc43-19c88b0c16cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101002", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117342548993996081", "content": "A new vulnerability with increased severity was disclosed for Netcore NBR200V2 (CVE-2026-101002) https://vuldb.com/vuln/410872", "creation_timestamp": "2026-09-27T10:33:24.297728Z"}, {"uuid": "dcf312c9-795c-4979-92e5-c4ae58069a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101000", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117342602950129374", "content": "We have just added an important vulnerability affecting Netcore NBR100V2 (CVE-2026-101000) https://vuldb.com/vuln/410870", "creation_timestamp": "2026-09-27T10:47:06.878156Z"}, {"uuid": "b1d6a3ce-b1f6-49a5-b27c-31b253b53e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101001", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117342656504587635", "content": "There is a new vulnerability with elevated criticality in Netcore NBR200V2 (CVE-2026-101001) https://vuldb.com/vuln/410871", "creation_timestamp": "2026-09-27T11:00:44.069922Z"}, {"uuid": "d71d41d3-682f-4b00-9885-0e5e713c3b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101037", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117343554017560768", "content": "We have just added an important vulnerability affecting FAST FAC1200R (CVE-2026-101037) https://vuldb.com/vuln/410905", "creation_timestamp": "2026-09-27T14:48:59.138182Z"}, {"uuid": "217d8ae4-3019-4311-a4db-a22a5138cfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101038", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117343607572840496", "content": "There is a new vulnerability with elevated criticality in FAST FAC1200R (CVE-2026-101038) https://vuldb.com/vuln/410906", "creation_timestamp": "2026-09-27T15:02:36.170262Z"}, {"uuid": "07fb2d77-726d-42e7-9672-6aaf4b6350d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j2z2i5euhk6ck", "content": "CVE-2026-101032 - navi through 2.24.0 OS Command Injection via Cheatsheet Variables\nCVE ID : CVE-2026-101032\n \n Published : Sept. 27, 2026, 1:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : navi through 2.24.0 fails to properly escape cheatsheet variable values when substitu...", "creation_timestamp": "2026-09-27T15:05:09.763795Z"}, {"uuid": "6e20cc9e-1296-4f27-9453-9d1e1f846117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jwfnyyuo6vm25", "content": "CVE-2026-101033 - KitchenOwl through 0.7.10 IDOR via unchecked category ID\nCVE ID : CVE-2026-101033\n \n Published : Sept. 27, 2026, 1:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household i...", "creation_timestamp": "2026-09-27T15:07:09.666534Z"}, {"uuid": "cdbc04b7-cb15-4e75-a581-efb7cf8af32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101039", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117343658682665269", "content": "A new vulnerability with increased severity was disclosed for FAST FAC1900R (CVE-2026-101039) https://vuldb.com/vuln/410907", "creation_timestamp": "2026-09-27T15:15:36.054460Z"}, {"uuid": "d339d88a-04f8-420b-b480-19ccdbaa5dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101065", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwjq3p5yc32f", "content": "CVE-2026-101065 - obot\nThe Docker quick\u2011start guide for Obot runs the service publicly on port 8080 without requiring a login, and treats every request as an administrator. Anyone who can reach that port\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#obot #obotplatform #CVE #infosec", "creation_timestamp": "2026-09-27T21:20:04.972445Z"}, {"uuid": "dc7cd286-fd9d-4c3f-8079-1d4bbd1ff445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101084", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwjq3rqld42u", "content": "CVE-2026-101084 - obot\nVersions of the obot platform before the latest update allow a logged-in user who knows a server identifier to connect to MCP servers that should be off\u2011limits. This can let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#obot #obotplatform #CVE #infosec", "creation_timestamp": "2026-09-27T21:20:07.745319Z"}, {"uuid": "5c8a6cb3-f706-4fc0-ada3-2ff1d9ac9438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwjqnmitfm2r", "content": "CVE-2026-101090 - nezha\nNezha version 2.2.3 may use the web address supplied by an attacker during the OAuth2 login process instead of the correct server address when a specific setting is left blank. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nezha #nezhahq #CVE #infosec", "creation_timestamp": "2026-09-27T21:30:06.371306Z"}, {"uuid": "219ab7e9-5ea7-4223-b86e-3b80677ec433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101065", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwjsq7y4cu2r", "content": "\ud83d\udea8 CVE-2026-101065 \u2014 CVSS 9.3 CRITICAL\n\nObot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101065\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-27T22:07:21.186059Z"}, {"uuid": "43ea5fb9-e77d-4f4d-ae8b-d2f0b4b2c209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101084", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwjsqhmdoy2u", "content": "\ud83d\udea8 CVE-2026-101084 \u2014 CVSS 9.3 CRITICAL\n\nobot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101084\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-27T22:07:29.366484Z"}, {"uuid": "0b53bfe0-b0c0-4953-8191-33d09cdb92f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101090", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwjsqpmbcu2i", "content": "\ud83d\udea8 CVE-2026-101090 \u2014 CVSS 9.3 CRITICAL\n\nNezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101090\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-27T22:07:37.389346Z"}, {"uuid": "9940df0f-d777-4822-b27e-e1ed745cbf8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101087", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fok6niznifkck", "content": "CVE-2026-101087 - Nezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv6\nCVE ID : CVE-2026-101087\n \n Published : Sept. 27, 2026, 8:49 p.m. | 20\u00a0minutes ago\n \n Description : Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notificatio...", "creation_timestamp": "2026-09-27T22:32:16.050949Z"}, {"uuid": "b35170e7-276e-4654-8dda-b02ceb069af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101086", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iy7flpgoy7526", "content": "CVE-2026-101086 - Nezha Dashboard before 2.3.5 Task Type Validation Bypass\nCVE ID : CVE-2026-101086\n \n Published : Sept. 27, 2026, 8:49 p.m. | 20\u00a0minutes ago\n \n Description : Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe t...", "creation_timestamp": "2026-09-27T22:38:15.844499Z"}, {"uuid": "ec024d49-97ba-473b-b055-966986a376db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101088", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4hmnrwz4jogk2", "content": "CVE-2026-101088 - Nezha before 2.3.1 Denial of Service via Concurrent Server Delete\nCVE ID : CVE-2026-101088\n \n Published : Sept. 27, 2026, 8:49 p.m. | 20\u00a0minutes ago\n \n Description : Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the s...", "creation_timestamp": "2026-09-27T22:44:16.195735Z"}, {"uuid": "dfcdd4dc-7c7e-45ab-aea7-da21d0b95c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101090", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjz4hduw226", "content": "\ud83d\udd34 CVE-2026-101090 - Critical (9.8)\n\nNezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101090/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:01:34.873374Z"}, {"uuid": "b82ef661-dc9b-4659-af03-7e5010993cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101090", "type": "seen", "source": "https://gist.github.com/ichintu/0739db6c0846cb8d7c608bff5afb2d43", "content": "This September 27, 2026 threat intelligence briefing covers four newly disclosed vulnerabilities and a community security discussion:\n\n\u2022 **Seetong T8108 Series (CVE-2026-100886):** Critical (10.0) remote debug service improper authentication flaw. Exploit is public and the vendor remains unresponsive.\n\u2022 **Nezha \u22642.2.3 (CVE-2026-101090):** Critical (9.8) OAuth2 host header injection that reflects attacker-controlled URLs, enabling account takeover. No patch currently available.\n\u2022 **Obot \u2264v0.22.1 (4 CVEs):** Four high-to-critical (8.3\u20139.8) vulnerabilities, including unauthenticated admin access via Docker quickstart misconfiguration, OAuth/authorization bypasses, and SSRF via MCP registration. Remediation involves updating to v0.23.0 or explicitly enabling authentication.\n\u2022 **Community Discussion:** A Reddit thread explores budget-friendly (~$300) strategies for building a highly private, secure digital workspace from scratch.", "creation_timestamp": "2026-09-28T00:00:34.000000Z"}, {"uuid": "2de39363-9ac8-42ee-83d9-f941f1358bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101065", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjzvvwsjc26", "content": "\ud83d\udd34 CVE-2026-101065 - Critical (9.8)\n\nObot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101065/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:15:50.121558Z"}, {"uuid": "844314cc-22ca-43cc-bb9f-db8ad170f131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101084", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjzw55n4t2y", "content": "\ud83d\udd34 CVE-2026-101084 - Critical (9.6)\n\nobot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101084/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:15:56.514939Z"}, {"uuid": "49839f0e-2efc-4cf2-b47f-0554ce066a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101062", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjzweeluf2g", "content": "\ud83d\udfe0 CVE-2026-101062 - High (8.8)\n\nObot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICAT...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101062/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:16:04.077901Z"}, {"uuid": "a7fafa52-346e-47db-bf5e-c032791dc877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101064", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjzxmygix2d", "content": "\ud83d\udfe0 CVE-2026-101064 - High (7.6)\n\nObot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server reg...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101064/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:16:47.346112Z"}, {"uuid": "209ab6c6-e954-4af9-8610-b27a81ea6d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101060", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjzxucukt2c", "content": "\ud83d\udfe0 CVE-2026-101060 - High (8.2)\n\npython-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpComm...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101060/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:16:54.657420Z"}, {"uuid": "8fe29b6c-7d9d-47d3-bfb8-7a006cede462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101045", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjzy3lesn2d", "content": "\ud83d\udfe0 CVE-2026-101045 - High (8)\n\nFleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask met...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101045/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:17:02.366092Z"}, {"uuid": "807ea201-2792-494d-ba80-151f35741c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101090", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117346076185376703", "content": "Nezha 2.2.3 (CVE-2026-101090): CRITICAL open redirect via Host header injection in OAuth2 flow. Account takeover possible if dashboard_host is unset. Set to trusted value; no patch yet. https://radar.offseq.com/threat/cve-2026-101090-url-redirection-to-untrusted-site-open-redirect-in-nezhahq-nezha-17f76beacc249b5e #OffSeq #OAuth2 #Vulnerability #InfoSec", "creation_timestamp": "2026-09-28T01:30:27.495385Z"}, {"uuid": "5f4785fd-9d30-4d77-a070-10fa0ec0cbe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101090", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwk63ekiv62v", "content": "Nezha 2.2.3 faces CRITICAL risk: OAuth2 open redirect (CVE-2026-101090) lets attackers hijack logins if dashboard_host is empty. Set to trusted value \u2014 no patch yet. https://radar.offseq.com/threat/cve-2026-101090-url-redirection-to-untrusted-site-open-redirect-in-nezhahq-nezha-17f76beacc249b5e #...", "creation_timestamp": "2026-09-28T01:30:27.618322Z"}, {"uuid": "9e3ff03b-caf6-4bfa-9c0a-2593348951ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101084", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117346784083424784", "content": "obot-platform obot <0.21.1 suffers a CRITICAL auth bypass (CVE-2026-101084): authenticated users with server IDs can access restricted MCP servers via /mcp-connect. Patch to 0.21.1 now! https://radar.offseq.com/threat/cve-2026-101084-authorization-bypass-through-user-controlled-key-in-obot-platform-obot-2f19c5f80b1ebeae #OffSeq #CVE2026101084 #infosec #vuln", "creation_timestamp": "2026-09-28T04:30:26.225764Z"}, {"uuid": "55a231ac-915e-46bf-b031-cd11f964e4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101084", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwki5bpbxu2q", "content": "CVE-2026-101084: CRITICAL flaw in obot-platform obot <0.21.1. Authenticated users can bypass authorization on /mcp-connect and manipulate backend systems. Upgrade to 0.21.1 ASAP. https://radar.offseq.com/threat/cve-2026-101084-authorization-bypass-through-user-controlled-key-in-obot-platform-obot...", "creation_timestamp": "2026-09-28T04:30:28.185776Z"}, {"uuid": "eed956d5-784f-431b-b0ef-2d86f59e5652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101000", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkkvykvpb25", "content": "CVE-2026-101000 - nbr100v2\nThe Netcore NBR100V2 device can be triggered over the network to perform actions without checking whether the user is authorized. This occurs because a specific settings file does\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nbr100v2 #netcore #CVE #infosec", "creation_timestamp": "2026-09-28T05:20:04.671285Z"}, {"uuid": "75c1cb1c-22e0-458e-a987-c20a0632db04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101001", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkkw3qfxl2k", "content": "CVE-2026-101001 - nbr200v2\nThe web management page on Netcore NBR200V2 can be tricked into running system commands by sending a crafted request. An attacker on the network could use this to take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nbr200v2 #netcore #CVE #infosec", "creation_timestamp": "2026-09-28T05:20:07.865599Z"}, {"uuid": "986129f7-4247-422b-bcc3-7eb6972b60bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101000", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwklkuxkbq2m", "content": "\ud83d\udd34 CVE-2026-101000 - Critical (10)\n\nA vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101000/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T05:31:47.088369Z"}, {"uuid": "4a3f373d-a4b5-49b6-826e-247779300152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkll4dg4v2c", "content": "\ud83d\udd34 CVE-2026-101001 - Critical (10)\n\nA vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function e...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101001/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T05:31:53.956811Z"}, {"uuid": "7e748205-ecee-4b53-a8c8-250bc8321ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101001", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mwkmjfasoz2x", "content": "\ud83d\udd34 CVE-2026-101001 - Critical (10)\n\nA vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function e...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-101001/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T05:48:49.434638Z"}, {"uuid": "ed87b7e7-e019-48d1-a622-4c01c65d29ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101002", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117347137942864312", "content": "CVE-2026-101002: Critical OS command injection in Netcore NBR200V2 v1.3.241127.071246 via Tools Ping Handler. Public exploit code available; no vendor patch. Isolate devices, restrict network access. https://radar.offseq.com/threat/cve-2026-101002-os-command-injection-in-netcore-nbr200v2-8a15ef317ba62749 #OffSeq #CVE2026101002 #Netcore #Vuln", "creation_timestamp": "2026-09-28T06:00:25.725216Z"}, {"uuid": "54c1ba6b-9a7b-4545-8b37-11495aeed392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101002", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwkn66zmle2t", "content": "Netcore NBR200V2 v1.3.241127.071246 hit by CRITICAL OS command injection (CVE-2026-101002). Exploit code public, no patch. Isolate affected devices & apply network-level controls. https://radar.offseq.com/threat/cve-2026-101002-os-command-injection-in-netcore-nbr200v2-8a15ef317ba62749 #OffSeq #Ne...", "creation_timestamp": "2026-09-28T06:00:27.655401Z"}, {"uuid": "a5b94fd9-2fe8-4cb3-a4f2-aa55185b75d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101000", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwknk43dv52r", "content": "\ud83d\udea8 CVE-2026-101000 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply o...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101000\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T06:07:07.286755Z"}, {"uuid": "71f31471-c4ac-481f-9e01-cbc698d9d53c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101001", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwknkejs222i", "content": "\ud83d\udea8 CVE-2026-101001 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101001\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T06:07:15.356104Z"}, {"uuid": "743aeada-ddfe-4889-aded-b89da4df395b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkqm7fu2u2y", "content": "\ud83d\udd34 CVE-2026-101002 - Critical (9.9)\n\nA security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the functi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T07:01:59.865031Z"}, {"uuid": "74e74989-7c8a-473d-9bd5-ed8cb3644b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117347491934867188", "content": "OS command injection (CVE-2026-101009) in aaPanel BaoTa <=11.8.0: CRITICAL severity. Exploit public, vendor silent. Remote attackers can execute commands via panelTask.bt_task._unzip. Review and mitigate now. https://radar.offseq.com/threat/cve-2026-101009-os-command-injection-in-aapanel-baota-2affddad69ededf3 #OffSeq #CVE2026101009 #infosec", "creation_timestamp": "2026-09-28T07:30:27.182153Z"}, {"uuid": "7481e963-0692-42b7-9bb5-ab179d3af957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101009", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwks76ehew2q", "content": "aaPanel BaoTa <=11.8.0 hit by CRITICAL OS command injection (CVE-2026-101009). Public exploit, no vendor fix. Restrict access & monitor systems. https://radar.offseq.com/threat/cve-2026-101009-os-command-injection-in-aapanel-baota-2affddad69ededf3 #OffSeq #CVE2026101009 #cybersecurity", "creation_timestamp": "2026-09-28T07:30:30.359963Z"}, {"uuid": "42cfa2bd-c1fb-4c76-86d9-a2c64d584f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fcwohzr5ppi7z", "content": "CVE-2026-101004 - notionnext-org NotionNext Authentication Guard cache.js cleanCache missing authentication\nCVE ID : CVE-2026-101004\n \n Published : Sept. 28, 2026, 5:45 a.m. | 44\u00a0minutes ago\n \n Description : A security vulnerability has been detected in notionnext-org NotionNe...", "creation_timestamp": "2026-09-28T07:32:20.009290Z"}, {"uuid": "c64e2aaf-9083-42da-abdc-888e7dadbdd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101013", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwkvnrxpei25", "content": "CVE-2026-101013: a remotely exploitable SQL injection affects mathurvishal CloudClassroom-PHP-Project. A public exploit is circulating per the CVE record. No vendor fix is available; restrict network exposure of affected instances.", "creation_timestamp": "2026-09-28T08:32:20.297263Z"}, {"uuid": "d426d007-8ac1-4ea7-a3bd-f640b3cdf5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101037", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5wu76wracbgq5", "content": "CVE-2026-101037 - FAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow\nCVE ID : CVE-2026-101037\n \n Published : 28. September 2026 10:16 | 13\u00a0Minuten ago\n \n Description : A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the ...", "creation_timestamp": "2026-09-28T10:47:20.923806Z"}, {"uuid": "22bd087a-b339-4608-94bb-23984d31b7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101038", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwl7avnefc2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-101038: FAST FAC1200R MmtAtePrase stack-based overflow\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-101038\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-28T11:24:05.452493Z"}, {"uuid": "8bbd444f-26dc-4ce4-ba30-6b02d7d8f7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101039", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwla5lbq2u2f", "content": "CVE-2026-101039 - fac1900r\nThe devdiscover Service in FAST FAC1900R version 20190827_2.0.2 contains a flaw that lets an attacker send specially crafted data and overflow a memory area, potentially crashing the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fac1900r #fast #CVE #infosec", "creation_timestamp": "2026-09-28T11:40:07.460703Z"}, {"uuid": "147c5fcf-8ca5-4375-8a3a-35e832bf4c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101039", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlbo63u572u", "content": "\ud83d\udea8 CVE-2026-101039 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101039\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T12:07:18.237083Z"}, {"uuid": "fbf0cc3e-627a-4194-8992-3a51e86a973d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101062", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlcwvnvl52f", "content": "CVE-2026-101062 - obot-platform\nIf you run Obot version 0.22.1 or earlier with authentication enabled, an attacker can register their own login page and trick a logged\u2011in user into visiting a crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#obotplatform #Golang #CVE #infosec", "creation_timestamp": "2026-09-28T12:30:04.916319Z"}, {"uuid": "2dca01e8-d96e-447b-819a-731e7ad63d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlcwxeflp24", "content": "CVE-2026-101090 - nezhahq\nNezha version 2.2.3 can insert a fake website address into the login callback URL if the optional dashboard host setting is left blank. An attacker who tricks a user into starting a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nezhahq #Golang #CVE #infosec", "creation_timestamp": "2026-09-28T12:30:06.804675Z"}, {"uuid": "85ee88b7-df85-4b93-9c82-4715c2e6cb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101039", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwlg3g75rt2n", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-101039: A vulnerability was identified in FAST FAC1900R 20190827_2.0.2\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-101039\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-28T13:26:17.454898Z"}, {"uuid": "f41ec400-6a17-4341-a3d0-7924a5805541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101039", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117348907632911145", "content": "CRITICAL: FAST FAC1900R 20190827_2.0.2 vulnerable to stack-based buffer overflow (CVE-2026-101039, CVSS 10). RCE possible via public exploit. No patch released; block access to devdiscover Service. https://radar.offseq.com/threat/cve-2026-101039-stack-based-buffer-overflow-in-fast-fac1900r-f3ece93ec0ed3ff8 #OffSeq #CVE #IoT #Infosec", "creation_timestamp": "2026-09-28T13:30:29.140238Z"}, {"uuid": "b354bb29-9c28-43d6-b235-c3c7ae719614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101039", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwlgcxhxaf2m", "content": "CRITICAL buffer overflow (CVE-2026-101039) in FAST FAC1900R 20190827_2.0.2 enables remote code execution. Exploit is public, no patch. Apply network restrictions immediately. https://radar.offseq.com/threat/cve-2026-101039-stack-based-buffer-overflow-in-fast-fac1900r-f3ece93ec0ed3ff8 #OffSeq #CVE...", "creation_timestamp": "2026-09-28T13:30:30.894396Z"}, {"uuid": "eeeac2d3-092a-4418-9dea-fd3e102d49c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101072", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwljh4ra2z2n", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-101072: Netcore NR289-GE CGI ap_ip.cgi system os command injection\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-101072\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-28T14:26:31.948664Z"}, {"uuid": "010c45e5-4161-4364-8303-cac79bb3da39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101072", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlk7ehpxr2y", "content": "CVE-2026-101072 - nr289-ge\nThe Netcore NR289-GE device (version 1.4.5102) runs a web script called ap_ip.cgi that accepts an IP address parameter. By sending a specially crafted value, an attacker can cause\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nr289ge #netcore #CVE #infosec", "creation_timestamp": "2026-09-28T14:40:04.842212Z"}, {"uuid": "1117486b-7499-4388-8d01-dc89a4ef23f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101075", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlnkqcflm2u", "content": "CVE-2026-101075 - nr289-ge\nThe NR289-GE video intercom running version 1.4.5102 can be tricked into executing operating system commands when an attacker supplies a crafted MAC address to its\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nr289ge #netcore #CVE #infosec", "creation_timestamp": "2026-09-28T15:40:07.489165Z"}, {"uuid": "2087bd9c-2195-449a-bc9d-a4b5bf4cd6c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101076", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlo4knvuc2n", "content": "CVE-2026-101076 - nr289-ge\nThe Netcore NR289\u2011GE device (firmware version 1.4.5102) lets an attacker send specially crafted data to the NTP configuration page, causing the system to run arbitrary commands.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nr289ge #netcore #CVE #infosec", "creation_timestamp": "2026-09-28T15:50:05.841947Z"}, {"uuid": "4fa6ea7f-3cf1-4f24-8055-2ac2aae3d243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101077", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlo4mruz52k", "content": "CVE-2026-101077 - nr289-ge\nThe Netcore NR289\u2011GE version 1.4.5102 lets anyone on the network send a request to the boa_temp component and skip the normal login check. This could let attackers view or change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nr289ge #netcore #CVE #infosec", "creation_timestamp": "2026-09-28T15:50:07.845400Z"}, {"uuid": "2fda97fa-0738-4f0c-98c3-5d5df874ccaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101055", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a u3000py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a turretsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 13:31:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython client for the Thinkware U3000 dashcam's local WiFi control protocol, reverse-engineered from the official Android app. PoC tooling behind CVE-2026-101053, CVE-2026-101054, and CVE-2026-101055.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T14:00:07.000000Z"}, {"uuid": "c9a2d3e6-d5f4-46da-a96f-ee20f32e2e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101053", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a u3000py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a turretsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 13:31:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython client for the Thinkware U3000 dashcam's local WiFi control protocol, reverse-engineered from the official Android app. PoC tooling behind CVE-2026-101053, CVE-2026-101054, and CVE-2026-101055.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T14:00:07.000000Z"}, {"uuid": "7d7a05d1-9a66-4691-ad1b-5cc19d0796ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101054", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a u3000py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a turretsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 13:31:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython client for the Thinkware U3000 dashcam's local WiFi control protocol, reverse-engineered from the official Android app. PoC tooling behind CVE-2026-101053, CVE-2026-101054, and CVE-2026-101055.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T14:00:07.000000Z"}, {"uuid": "1fed545a-edbe-42b2-9b30-e8997973db6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101074", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwlq625ixu2s", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-101074: A weakness has been identified in Netcore NR289-GE 1.4.5102\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-101074\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-28T16:26:43.063342Z"}, {"uuid": "bae3c41f-c039-49b7-8bb1-8af55670a246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101077", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwlq63rztk2r", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-101077: Netcore NR289-GE boa_temp process_request missing authentication\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-101077\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-28T16:26:44.607693Z"}, {"uuid": "9331db21-9e9f-4af3-b1d5-c8c6cd8cff06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101081", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117349641010207368", "content": "A severe vulnerability was disclosed for D-Link DI-8400 (CVE-2026-101081) https://vuldb.com/vuln/410953", "creation_timestamp": "2026-09-28T16:36:59.239725Z"}, {"uuid": "37d622bf-f9e2-451e-8c70-a8cffdfdbf95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101081", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlrzrcgvj26", "content": "CVE-2026-101081 - di-8400\nThe router\u2019s web\u2011based settings page contains a coding mistake that can be triggered by sending specially crafted data, causing the device to run unintended code. An attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#di8400 #dlink #CVE #infosec", "creation_timestamp": "2026-09-28T17:00:06.967224Z"}, {"uuid": "6ea68feb-bab7-4745-b84c-cda349d7c532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101081", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwltjkg5ol2r", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-101081: D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-101081\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-28T17:26:50.636870Z"}, {"uuid": "a31fd569-9011-448a-9810-a8c5a714efbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101081", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwltrodklu2k", "content": "\ud83d\udd34 CVE-2026-101081 - Critical (9.1)\n\nA security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the funct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101081/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T17:31:24.559107Z"}, {"uuid": "b4fbff5b-97c7-4d6a-8d0f-1f7bb2a8751d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101076", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvtokpus2k", "content": "\ud83d\udea8 CVE-2026-101076 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /se...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101076\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:08:17.584522Z"}, {"uuid": "d19d0114-4660-4f05-9bbc-65bab608a7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101077", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvtx45h42l", "content": "\ud83d\udea8 CVE-2026-101077 \u2014 CVSS 9.3 CRITICAL\n\nA flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the compon...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101077\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:08:26.588138Z"}, {"uuid": "d99ada95-cd31-4aa6-bdea-3ddb00379c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101072", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvrlkgrd24", "content": "\ud83d\udea8 CVE-2026-101072 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101072\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:07:07.609107Z"}, {"uuid": "146c298d-557d-47af-b756-6a91de9e2b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101075", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvtgmkon2o", "content": "\ud83d\udea8 CVE-2026-101075 \u2014 CVSS 9.3 CRITICAL\n\nA security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the functi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101075\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:08:10.457021Z"}, {"uuid": "562421e0-4154-46c9-946a-105d103bc2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101072", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwmaipwlee2o", "content": "Netcore NR289-GE 1.4.5102\u306e/ap_ip.cgi\u306bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u3002\nCVE-2026-101072 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-09-28T21:19:01.285454Z"}, {"uuid": "ac361ed7-32d6-4cb1-8ab4-64f2721dd5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101052", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mwnqlnokzg2z", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-101052\n\nA security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modul...", "creation_timestamp": "2026-09-29T11:39:39.169637Z"}, {"uuid": "7db29c06-dc7d-4752-ade8-37fcc06c4cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101043", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwr377xi2h2x", "content": "CVE-2026-101043 is trending. Hype score 3, currently #7 on cvemon.\n\npnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-101043", "creation_timestamp": "2026-09-30T19:27:32.473674Z"}]}