{"vulnerability": "cve-2026-7118", "sightings": [{"uuid": "ed3eeb2f-2ec8-4856-8aa2-5165047fd18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71187", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xcjolo72c", "content": "~Cisa~\nCritical flaws enable unauthenticated administrative access and device disruption; no patch or known exploitation.\n-\nIOCs: CVE-2026-73125, CVE-2026-71187, CVE-2026-69658\n-\n#CVE #ICS #ThreatIntel", "creation_timestamp": "2026-08-29T13:12:09.558716Z"}, {"uuid": "6ac25114-3462-4163-b0e3-ad54da95c004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7ycl2lsb23", "content": "CVE-2026-71187\nThe Ebyte hardware\u2019s login process can be copied, allowing anyone to send a valid login request and gain administrator rights. This could let attackers change settings, view data, or control the device. Apply\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T13:30:04.924823Z"}, {"uuid": "ad97fbbb-ccc0-43ac-bf8c-39014863f1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71187", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05", "content": "", "creation_timestamp": "2026-08-27T16:15:33.024451Z"}, {"uuid": "0214f48a-e0fe-4bc0-a937-635ca22a15de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71187", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4bqeqavt23", "content": "\ud83d\udea8 CVE-2026-71187 \u2014 CVSS 9.3 CRITICAL\n\nThe Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71187\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T02:08:12.723677Z"}, {"uuid": "2ed954fc-914f-4381-bcd9-52fcc81dd8b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71180", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/26rvmt4jv2dhb", "content": "CVE-2026-71180 - Dell Update Package Framework Unchecked Return Value Privilege Escalation\nCVE ID : CVE-2026-71180\n \n Published : Sept. 16, 2026, 4:12 p.m. | 35\u00a0minutes ago\n \n Description : Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return...", "creation_timestamp": "2026-09-16T17:32:32.675866Z"}, {"uuid": "9ae3f139-750e-4b5f-b51f-aa8afc6be565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71180", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwd45einmi2l", "content": "\ud83d\udccc CVE-2026-71180 - Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local acce... https://www.cyberhub.blog/cves/CVE-2026-71180", "creation_timestamp": "2026-09-25T06:07:07.663872Z"}, {"uuid": "d3f1edca-9ab1-46c3-9b7f-706cfa25609c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71189", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02", "content": "", "creation_timestamp": "2026-09-29T05:00:00.000000Z"}, {"uuid": "6a2bb7a1-e9f8-4aae-9ab9-3605314ba82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71183", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/247wc3fala4vn", "content": "CVE-2026-71183: Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords", "creation_timestamp": "2026-10-08T02:42:12.912065Z"}]}