{"vulnerability": "cve-2026-10291", "sightings": [{"uuid": "307ecdd3-22ed-42d7-a429-3b0bf552b683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102911", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117358108618797914", "content": "CVE-2026-102911: zosmaai pi-llm-wiki (v0.11.0 \u2013 0.11.7) suffers CRITICAL OS command injection in mcp/index.ts. Public exploit available \u2014 remote code execution possible. Upgrade to 0.11.8 ASAP. https://radar.offseq.com/threat/cve-2026-102911-os-command-injection-in-zosmaai-pi-llm-wiki-28aaee951c4eb21f #OffSeq #CVE2026102911 #Vuln #Infosec", "creation_timestamp": "2026-09-30T04:30:25.007619Z"}, {"uuid": "45c1d565-6f41-4824-8453-8ee69082a119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102911", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwpj33jn322v", "content": "CRITICAL OS command injection in zosmaai pi-llm-wiki (0.11.0 \u2013 0.11.7). Public exploit out \u2014 upgrade to 0.11.8 now to block remote control risk. https://radar.offseq.com/threat/cve-2026-102911-os-command-injection-in-zosmaai-pi-llm-wiki-28aaee951c4eb21f #OffSeq #CVE2026102911 #Security", "creation_timestamp": "2026-09-30T04:30:27.161264Z"}, {"uuid": "9004ae6a-6c4d-4ef5-a5cc-50a53ab14c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3syjkpeqsb3ng", "content": "CVE-2026-102913 - SourceCodester Car Driving School Management System Master.php save_enrollment sql injection\nCVE ID : CVE-2026-102913\n \n Published : Sept. 30, 2026, 4:15 a.m. | 44\u00a0minutes ago\n \n Description : A security flaw has been discovered in SourceCodester Car Driving ...", "creation_timestamp": "2026-09-30T05:16:48.533530Z"}, {"uuid": "8adc37bd-45c4-4e77-b821-3d18dfa4e1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102910", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2hwcyzt23ujdn", "content": "CVE-2026-102910 - SourceCodester Online Reviewer Management System exam-delete.php sql injection\nCVE ID : CVE-2026-102910\n \n Published : Sept. 30, 2026, 4:18 a.m. | 41\u00a0minutes ago\n \n Description : A security flaw has been discovered in SourceCodester Online Reviewer Management...", "creation_timestamp": "2026-09-30T05:22:48.766274Z"}, {"uuid": "91dac302-b4fa-48e6-9ce1-3d25f0aded98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102912", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/54ibwcpyhud3f", "content": "CVE-2026-102912 - SourceCodester Online Leave Management System page reports sql injection\nCVE ID : CVE-2026-102912\n \n Published : Sept. 30, 2026, 4:18 a.m. | 41\u00a0minutes ago\n \n Description : A vulnerability was identified in SourceCodester Online Leave Management System 1.0. T...", "creation_timestamp": "2026-09-30T05:28:49.008912Z"}, {"uuid": "26767a18-69c8-4259-a378-96611930f490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102911", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwpmhtmlik27", "content": "\ud83d\udd34 CVE-2026-102911 - Critical (9.9)\n\nA flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-102911/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-30T05:31:16.511740Z"}, {"uuid": "3dbf54ec-a4f0-47f5-97dc-dbae90bfa716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102911", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g3g37yd3m2aln", "content": "CVE-2026-102911 - zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection\nCVE ID : CVE-2026-102911\n \n Published : Sept. 30, 2026, 4:18 a.m. | 41\u00a0minutes ago\n \n Description : A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknow...", "creation_timestamp": "2026-09-30T05:34:48.791734Z"}, {"uuid": "02974513-0705-4fd9-a5d4-6cc92181f127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102911", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwqusfrbvs2x", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-102911: A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7\nCVSS 9.9 \u00b7 EPSS 1.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-102911\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-30T17:33:00.426574Z"}]}