{"vulnerability": "cve-2026-10242", "sightings": [{"uuid": "8ea3f596-7a36-4fa6-bd41-d9a1fa01d19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102422", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i7g5m64cpgbe7", "content": "CVE-2026-102422 - shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token\nCVE ID : CVE-2026-102422\n \n Published : Sept. 29, 2026, 4:17 a.m. | 25\u00a0minutes ago\n \n Description : shell-quote's `quote()` function emits a `{ comment }` tok...", "creation_timestamp": "2026-09-29T05:07:28.949188Z"}, {"uuid": "b401b859-8284-4837-9732-b22dd8f74635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102422", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwn5z7ecj22f", "content": "\ud83d\udea8 CVE-2026-102422 \u2014 CVSS 9.2 CRITICAL\n\nshell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments ou...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102422\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-29T06:07:13.335942Z"}, {"uuid": "f0cec547-7161-4fb9-9cfc-31d0d9e19f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102422", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwn7fm34wv24", "content": "\ud83d\udfe0 CVE-2026-102422 - High (8.1)\n\nshell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-102422/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T06:32:04.451432Z"}, {"uuid": "b4b8f54a-a0fe-48d1-ac6d-50368fa42de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102425", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwogd237mr2i", "content": "\ud83d\udea8 CVE-2026-102425 \u2014 CVSS 9.5 CRITICAL\n\nJoomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102425\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-29T18:08:32.564293Z"}, {"uuid": "54396f1f-1940-4831-92ae-96ebcb3acc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102422", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwolylwz452f", "content": "CVE-2026-102422 - shell-quote\nThe shell-quote library can be tricked into running unintended commands when an attacker inserts a line break after a comment token. This lets malicious input execute commands on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#shellquote #CVE #infosec", "creation_timestamp": "2026-09-29T19:50:10.727405Z"}, {"uuid": "3693db06-bbfc-4317-9dd3-337b5d13486b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102425", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103838", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-102425\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 08:04:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-102425 PoC (PoCbit) \u2014 Joomla Balbooa Forms (com_baforms) <2.4.3.4 unauth RCE via field shortcode injection in post-submission PHP eval(). check + exploit + mass bulk. https://pocbit.org/pocs/cve-2026-102425\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T08:04:58.000000Z"}, {"uuid": "d19d1715-1965-4bc1-afce-4445a40616ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqwr7zkh32y", "content": "\ud83d\udea8 CVE-2026-102427 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - s...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102427\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T18:08:09.608362Z"}, {"uuid": "db5b4ad0-d3b8-4773-8b24-d387d52bbb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwrd62aw5z2p", "content": "CVE-2026-102427: OS CCK for Joomla let anyone upload and run PHP with no login. CVSS 10.0. Fixed in 8.3.16, but OrdaSoft's updater still offers 8.3.14, so install it by hand.\nmysites.guru/blog/ordasof...", "creation_timestamp": "2026-09-30T21:50:03.772869Z"}, {"uuid": "a7bf5d9d-6efa-44dd-9e77-f65b2474847d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mwta7id3ko23", "content": "CVE-2026-102427: OS CCK for Joomla let anyone upload and run PHP with no login. CVSS 10.0. Fixed in 8.3.16, but OrdaSoft's updater still offers 8.3.14, so install it by hand.\nmysites.guru/blog/ordasof...", "creation_timestamp": "2026-10-01T16:02:30.152020Z"}, {"uuid": "ab749fd4-0798-4d38-8cdd-6be7a7bf966f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102427", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwubymxeky2m", "content": "\ud83d\udccc CVE-2026-102427 - Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the com... https://www.cyberhub.blog/cves/CVE-2026-102427", "creation_timestamp": "2026-10-02T02:07:06.760666Z"}]}