{"vulnerability": "cve-2026-66890", "sightings": [{"uuid": "4ea00455-a3a0-4f74-8ba6-bbe2385bb352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66890", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01", "content": "", "creation_timestamp": "2026-09-15T16:15:31.250924Z"}, {"uuid": "d210a777-d8ca-424f-af03-8c6800aa986f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66890", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvlg623ip52o", "content": "~Cisa~\nCISA warns VMAX DVR/NVR flaws enable root access and surveillance compromise; update firmware.\n-\nIOCs: CVE-2026-66890, CVE-2026-66887, CVE-2026-68070\n-\n#CVE202666887 #CVE20266890 #ThreatIntel", "creation_timestamp": "2026-09-15T20:02:34.179396Z"}, {"uuid": "44b6420d-4eba-4715-8710-b4b4d70d4415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66890", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlmso4eao2z", "content": "\ud83d\udd34 CVE-2026-66890 - Critical (9.6)\n\nThe affected products use hard-coded credentials, which could allow remote access to files with r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66890/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T22:01:29.392167Z"}, {"uuid": "6fe18d56-98f6-4a82-bcbc-8ca1b677bc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66890", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmn5fsqw32b", "content": "CVE-2026-66890 - vmax a1 g4 dvr\nSeveral Digital Watchdog VMAX video recorders and network video recorders come with built\u2011in usernames and passwords. If the FTP service is left enabled, an attacker could log\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#digitalwatchdog #CVE #infosec", "creation_timestamp": "2026-09-16T07:40:08.360018Z"}]}