{"vulnerability": "cve-2026-8760", "sightings": [{"uuid": "52ad3215-4609-46cd-a2ab-2754588756fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8760", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116645365388258624", "content": "\ud83d\udd25 CVE-2026-8760 (CRITICAL, CVSS 9.8): india-web-developer Login with OTP \u22641.6 allows brute-force OTP bypass \u2014 no rate-limit on validation, no OTP expiry. Disable the plugin or restrict login access now. Patch pending. https://radar.offseq.com/threat/cve-2026-8760-cwe-307-improper-restriction-of-exce-49a9becd #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-05-27T07:30:26.640394Z"}, {"uuid": "977d1db8-5d67-41f1-a1ca-cf4848e33730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8760", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmsyeyfx472f", "content": "Critical alert: CVE-2026-8760 in india-web-developer Login with OTP (\u22641.6) enables OTP brute-forcing. No patch yet \u2014 disable plugin or restrict access to reduce risk. https://radar.offseq.com/threat/cve-2026-8760-cwe-307-improper-restriction-of-exce-49a9becd #OffSeq #WordPress #Security", "creation_timestamp": "2026-05-27T07:30:37.979627Z"}, {"uuid": "bf9dcdfc-7df7-466b-9589-ae6fab29b6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8760", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou6pmertg2z", "content": "\ud83d\udea8  ALERT: CVE-2026-8760\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe Login with OTP plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.6. This is due to an incomplete fix for CVE-2024-11178: the rate-limit/lockout check added to `otpl_login_action()` was placed on", "creation_timestamp": "2026-06-22T05:46:49.606567Z"}, {"uuid": "9dc96688-30fc-4203-be36-b7f5610db58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87607", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4v4bh7i42t", "content": "CVE-2026-87607 - chrome\nIf you use Google Chrome on a Mac version older than 153.0.8010.36, a specially crafted web page could cause the browser to run unwanted code on your computer, bypassing its normal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chrome #google #CVE #infosec", "creation_timestamp": "2026-09-10T01:20:04.800319Z"}, {"uuid": "0e5625f7-9c6a-46cc-98ac-85adadea6b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87609", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4yhlhus52b", "content": "CVE-2026-87609 - chrome\nOlder versions of Google Chrome on iOS may let a remote hacker send specially crafted network data that causes the browser to execute unwanted code outside its protected area. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chrome #google #CVE #infosec", "creation_timestamp": "2026-09-10T02:20:06.524318Z"}, {"uuid": "0f69b22a-20ff-4842-89d9-fd4f7cd64cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87601", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:05.151637Z"}, {"uuid": "e30f6fa4-43f5-4265-9f34-400d7c989b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87602", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:07.329052Z"}, {"uuid": "7176c420-5095-4858-a32f-d166dc799265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87603", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:09.513509Z"}, {"uuid": "6da815d0-a745-47ab-a257-29830633fb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87604", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:11.698696Z"}, {"uuid": "d9622135-961f-44fb-ae76-6bc389e7e131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87605", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:14.093555Z"}, {"uuid": "e48b8886-032f-4f1f-9e5f-cad7212163ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87606", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:16.273974Z"}, {"uuid": "0dd9c96f-1146-4595-957c-57dc4d401522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87607", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:18.443832Z"}, {"uuid": "1667f0ca-c360-4580-bddf-c29c83821feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87608", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:20.612747Z"}, {"uuid": "51490454-9de1-4fb1-bc2d-008462a12c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87609", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:22.828179Z"}, {"uuid": "a6416528-50a2-4a53-9878-71abd7c9058f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87600", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:16:44.767690Z"}, {"uuid": "ace79658-b1cd-4004-a4aa-8558331e92be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87607", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv5lu4hv4n2k", "content": "\ud83d\udccc CVE-2026-87607 - Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the... https://www.cyberhub.blog/cves/CVE-2026-87607", "creation_timestamp": "2026-09-10T08:07:07.622165Z"}, {"uuid": "eeaa4367-5387-4812-8b94-123bc28e8fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87609", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv5njqwnf32f", "content": "\ud83d\udccc CVE-2026-87609 - Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox vi... https://www.cyberhub.blog/cves/CVE-2026-87609", "creation_timestamp": "2026-09-10T08:37:07.873400Z"}, {"uuid": "94aa0dbc-25b9-486d-a444-6a66aae5b72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87609", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mv5njrvwcb2k", "content": "\ud83d\udccc CVE-2026-87609 - Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox vi... https://www.potatohub.blog/cves/CVE-2026-87609", "creation_timestamp": "2026-09-10T08:37:08.533670Z"}, {"uuid": "a8426b51-8129-47fc-9580-183b7cd078e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87604", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvf6wjjnqt24", "content": "\ud83d\udccc CVE-2026-87604 - Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially ... https://www.cyberhub.blog/cves/CVE-2026-87604", "creation_timestamp": "2026-09-13T08:37:07.455404Z"}, {"uuid": "5c3ca875-55b5-4359-9449-118c73eee5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87606", "type": "seen", "source": "https://t.me/GithubRedTeam/102430", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T22:00:05.399495Z"}, {"uuid": "07a978d0-5c68-4bf4-9ee0-ee712a46bcf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87606", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102430", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 20:05:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T00:00:10.585067Z"}, {"uuid": "61f29893-a07e-4bcb-a747-103c0cebc093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87609", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:15:01.830476Z"}, {"uuid": "69519584-f26c-4360-986a-ef6dbcb55c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87608", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:15:05.681392Z"}, {"uuid": "8e9d09b6-4110-429a-aca5-c1b147adc409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87603", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:15:55.085706Z"}, {"uuid": "ec964c25-a3c1-49ee-ab73-ac5e55377e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87606", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:16:00.969308Z"}, {"uuid": "0dfa0e8a-79fa-4c5f-858c-07c342953ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87600", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:15:49.253574Z"}, {"uuid": "4e406a8a-30ed-4d42-8a71-c0b84901d409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87601", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:15:51.173867Z"}, {"uuid": "ac86a521-7ff1-4a8f-bfa3-0beda11166db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87602", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:15:53.122862Z"}, {"uuid": "b00d9b9b-f98d-4ebf-a76e-357513f2cd5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87604", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:15:57.428155Z"}, {"uuid": "37673016-37ef-41a5-a926-abfccb7b0043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87605", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260916", "content": "", "creation_timestamp": "2026-09-16T05:15:59.374612Z"}]}