{"vulnerability": "cve-2026-8441", "sightings": [{"uuid": "40bc7409-f05a-43c0-a829-96d80a3f0c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8441", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpp327ptzn2o", "content": "WordPress\u63d2\u4ef6WP Review Slider Pro\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e(CVE-2026-8441)\u6df1\u5ea6\u5206\u6790\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/C398D682-6653-4C4E-B713-4BAC423BFF31", "creation_timestamp": "2026-07-02T22:23:03.391275Z"}, {"uuid": "e52f5915-7f03-4c1c-8403-970947435a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8441", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp32aiaer2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8441 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Review Slider Pro: \u0443\u0433\u0440\u043e\u0437\u0430 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress\n\n\n\nhttps://kripta.biz/posts/DBDCFB76-2CA8-4E62-8F48-EA4B047D1A1D", "creation_timestamp": "2026-07-02T22:23:04.384172Z"}, {"uuid": "25113761-5939-477b-b264-8d8133344c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8441", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppmixupp42u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8441 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Review Slider Pro: \u0443\u0433\u0440\u043e\u0437\u0430 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress\n\n\n\nhttps://kripta.biz/posts/DCE6095F-B383-4A25-AF01-9F6A271712AC", "creation_timestamp": "2026-07-03T03:35:32.103232Z"}, {"uuid": "ecc960cc-2a11-4c49-bef6-76cdadb0768e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8441", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mppmj2vihu2a", "content": "WordPress\u63d2\u4ef6WP Review Slider Pro\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e(CVE-2026-8441)\u8be6\u89e3\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/8383979B-E62E-46F5-AAF1-AC384A1A3001", "creation_timestamp": "2026-07-03T03:35:35.974695Z"}, {"uuid": "11e7f9d9-d514-4e9d-9e8e-640a12943a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8441", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mprqx5yvwg2q", "content": "CVE-2026-8441. WP Review Slider Pro up to 12.7.2. SQL injection via notinstring parameter. Your entire database is readable. No patch available. Disable the plugin now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #SQLi #CyberSecurity", "creation_timestamp": "2026-07-04T00:00:58.452844Z"}, {"uuid": "dfbae483-1b1e-4e7b-be95-5b9c6f4b229f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84412", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4xmfv6cw2r", "content": "CVE-2026-84412 - adobe campaign classic\nAdobe Campaign Classic can be tricked into running any code an attacker supplies, and it works without any user clicking or opening anything. The code runs with the same rights\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-09-22T19:30:05.121872Z"}, {"uuid": "78e07e4b-40bf-4a1b-ab29-100fe8d107fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84412", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zwtau5n2j", "content": "\ud83d\udea8 CVE-2026-84412 \u2014 CVSS 10 CRITICAL\n\nAdobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84412\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:11:42.065606Z"}, {"uuid": "49542d6b-fd06-4c92-ba09-a1c576a834c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84412", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwaextlout2l", "content": "\ud83d\udccc CVE-2026-84412 - Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary ... https://www.cyberhub.blog/cves/CVE-2026-84412", "creation_timestamp": "2026-09-24T04:07:06.493024Z"}, {"uuid": "b40fce92-9dcd-49b5-b69e-b785d3972ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84412", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0393", "content": "", "creation_timestamp": "2026-09-23T23:43:17.000000Z"}, {"uuid": "f311e1db-0dba-4ec2-9b89-b64416e5ec02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84412", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0393", "content": "Adobe heeft 18 kritieke kwetsbaarheden verholpen in Adobe Campaign Classic. De kwetsbaarheden betreffen onder meer code- en OS-command-injectie, SQL-injectie, onvoldoende autorisatie, onvoldoende invoervalidatie en Server-Side Request Forgery (SSRF). Alle 18 kwetsbaarheden zijn als kritiek aangemerkt en tien kunnen zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het uitvoeren van willekeurige code, privilege-escalatie, het omzeilen van beveiligingsmaatregelen, het uitlezen van bestanden en Denial-of-Service.\n\nDe kwetsbaarheden met kenmerk CVE-2026-82004, CVE-2026-73369, CVE-2026-84412, CVE-2026-89275, CVE-2026-75723, CVE-2026-75699, CVE-2026-75703 en CVE-2026-75721 hebben een CVSS-score van 10,0 en kunnen zonder authenticatie en gebruikersinteractie op afstand worden misbruikt. Voor zeven hiervan noemt Adobe willekeurige code-uitvoering als mogelijke impact. Voor CVE-2026-75703 noemt Adobe Denial-of-Service als impact.", "creation_timestamp": "2026-09-24T04:43:17.000000Z"}, {"uuid": "7dcebd85-880d-45a0-80f0-111d0a36828c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06", "content": "", "creation_timestamp": "2026-09-29T05:00:00.000000Z"}, {"uuid": "d7f787b4-ab99-4479-85fd-1010aa1dc119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84414", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mwoi53i7bo2c", "content": "IBM i 7.6 carries CVE-2026-84414 at CVSS 7.8.\n\u2022 Affects 7.6, 7.5, 7.4, 7.3\n\u2022 Local authenticated attacker can seize file ownership\n\u2022 Path validation flaw\n\nhttps://thecircuitry.to/article/ibm-i-76-hit-by-high-severity-file-ownership-vulnerability-mun0mgsi", "creation_timestamp": "2026-09-29T18:41:00.860449Z"}, {"uuid": "8179f149-e601-4aa0-9b25-f4af893555aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84414", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwoiikq6y72g", "content": "\ud83d\udfe0 CVE-2026-84414 - High (7.8)\n\nIBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84414/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T18:47:26.052457Z"}, {"uuid": "eacb2b1d-b65d-45ca-b535-148f9c10926e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwomwjjfnj2r", "content": "~Cisa~\nUnauthenticated crafted requests enable root RCE or DoS; update to 7.23+.\n-\nIOCs: CVE-2026-84411\n-\n#CVE202684411 #RouterOS #ThreatIntel", "creation_timestamp": "2026-09-29T20:06:49.078838Z"}, {"uuid": "6035057e-7345-4d66-8482-26c2e5933df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwoytso3eb2m", "content": "Three CISA advisories hit device management planes. MikroTik RouterOS CVE-2026-84411, CVSS 9.8, pre-auth root: go to 7.24+, not 7.23. Lantronix G520 and Toptech TMS7 too. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-29T23:40:04.510302Z"}, {"uuid": "547ef98f-e289-45fb-97d4-10b07e18fcac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwq6ncsfvf26", "content": "MikroTik RouterOS\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u306e\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u306b\n\nMikroTik RouterOS\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3057\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30c7\u30d0\u30a4\u30b9\u4e0a\u3067root\u6a29\u9650\u306b\u3088\u308b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u72b6\u614b\u3092\u5f15\u304d\u8d77\u3053\u305b\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-84411\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u30017.24\u3088\u308a\u524d\u306eRouterO", "creation_timestamp": "2026-09-30T10:56:27.674167Z"}, {"uuid": "c02baf0b-9183-42a8-bd7b-0ab675bc661d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwqd3lkaqz23", "content": "MikroTik RouterOS\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u304a\u305d\u308c\n\nMikroTik RouterOS\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u306a\u3057\u306e\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u3001\u8106\u5f31\u306a\u30c7\u30d0\u30a4\u30b9\u4e0a\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u305f\u308a\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u72b6\u614b\u3092\u5f15\u304d\u8d77\u3053\u3057\u305f\u308a\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-84411\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001MikroTik RouterOS\u306e7.24\u3088\u308a\u524d\u306e\u30d0", "creation_timestamp": "2026-09-30T12:16:01.315855Z"}, {"uuid": "770fe5ee-b172-4f75-b4b1-5027fa0c78af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mwqdhnmmio23", "content": "One unauthenticated request could root a MikroTik router. CVE-2026-84411 hits RouterOS web management. https://intel.threadlinqs.com/threat/TL-2026-2805 #ThreatIntel #CVE_2026_84411 #ICSA2627206 #MikroTik", "creation_timestamp": "2026-09-30T12:22:46.140556Z"}, {"uuid": "0ee0efc1-7afe-4455-aca2-cf159438c556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mwqp4jiaap2h", "content": "CISA Warns of Critical RCE Flaw in MikroTik\u00a0RouterOS\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a pre-authentication remote code execution (RCE) vulnerability in MikroTik RouterOS. Tracked as CVE-2026-84411, the flaw allows\u2026", "creation_timestamp": "2026-09-30T15:51:17.594429Z"}, {"uuid": "791d7081-45b3-449c-8cb4-6fc2102484ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwqphrecxa2q", "content": "CISA\u3001MikroTik RouterOS\u306b\u8a8d\u8a3c\u524d\u3067\u60aa\u7528\u53ef\u80fd\u306a\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3092\u8b66\u544a\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001MikroTik RouterOS\u306b\u65b0\u305f\u306a\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u3063\u305f\u3068\u3057\u3066\u8b66\u544a\u3092\u767a\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u3092\u5f15\u304d\u8d77\u3053\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-84411\u300d\u3068\u3057\u3066\u8ffd", "creation_timestamp": "2026-09-30T15:57:36.226087Z"}, {"uuid": "887ac0d6-b56d-48fe-a539-c2f6771ec895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwqsybkllb2c", "content": "CISA flagged CVE-2026-84411 in MikroTik RouterOS: a critical pre-auth integer underflow that may let one crafted request run code as root or cause a denial of service. #MikroTik #RouterOS #CISA", "creation_timestamp": "2026-09-30T17:00:29.374094Z"}, {"uuid": "63f5f340-49cd-4f3d-a38b-b3e5a883ab78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84411", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwrfx6r25m2v", "content": "\ud83e\udd16 CVE-2026-84411: pre-auth integer underflow in MikroTik RouterOS web mgmt. One crafted request \u2192 unauth RCE as root or DoS. RouterOS <7.24, no exploitation yet. CISA advisory.\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros/", "creation_timestamp": "2026-09-30T22:39:54.292822Z"}]}