{"vulnerability": "cve-2026-8779", "sightings": [{"uuid": "8f7af8fe-7fed-4e86-ba9c-a61b71bb2267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm3wc4icy32v", "content": "CVE-2026-8779 - omec-project amf handler.go NGSetupRequest memory corruption\nCVE ID : CVE-2026-8779\n \n Published : May 18, 2026, 1:15 a.m. | 25\u00a0minutes ago\n \n Description : A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequ...", "creation_timestamp": "2026-05-18T03:21:50.081053Z"}, {"uuid": "955dad55-ecb5-48cd-a4f6-6424a9f1f037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87794", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv3ih52ovd2m", "content": "\ud83d\udfe0 CVE-2026-87794 - High (8.4)\n\nbestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip fun...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87794/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T12:00:51.876434Z"}, {"uuid": "ea5ffdd5-5287-4467-b248-8b3c71daf357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87795", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv3ihduv6p2k", "content": "\ud83d\udfe0 CVE-2026-87795 - High (8.2)\n\nzstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87795/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T12:00:58.578730Z"}, {"uuid": "62e3ac14-7cdd-45bf-981e-6f372bc05131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87791", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-", "content": "", "creation_timestamp": "2026-09-15T08:45:08.814207Z"}, {"uuid": "640d7f2b-3045-4a5d-906d-49ab468fa1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87793", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-", "content": "", "creation_timestamp": "2026-09-15T08:45:10.910402Z"}, {"uuid": "2c47a5fa-2a17-4baf-97ca-101b92131f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87792", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-", "content": "", "creation_timestamp": "2026-09-15T08:45:12.700239Z"}, {"uuid": "742b5d90-4f08-46cd-8133-bbed0efc9fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoxhkad7t25", "content": "CVE-2026-87796 - multi uploader for gravity forms\nThe Multi Uploader for Gravity Forms plugin for WordPress lets unauthenticated users place any type of file on your server because it does not properly check file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sh1zen #CVE #infosec", "creation_timestamp": "2026-09-17T05:50:05.917786Z"}, {"uuid": "14c38728-b3f9-4588-a283-7445c1926bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117284852533602073", "content": "CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms \u22641.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet \u2014 disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE", "creation_timestamp": "2026-09-17T06:00:25.757516Z"}, {"uuid": "b4575726-dfe3-466b-a960-75e8f3984b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvoy22zlsx2f", "content": "CRITICAL: CVE-2026-87796 in sh1zen Multi Uploader for Gravity Forms (\u22641.1.9) allows unauthenticated arbitrary file upload \u2014 potential RCE. Disable or restrict uploads until fix confirmed. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1...", "creation_timestamp": "2026-09-17T06:00:27.805915Z"}, {"uuid": "5c695eb8-2794-404a-8ace-38d1677d412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoyfxypnb24", "content": "\ud83d\udea8 CVE-2026-87796 \u2014 CVSS 9.8 CRITICAL\n\nThe Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87796\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T06:07:06.751746Z"}, {"uuid": "f97a993e-e59a-43e5-b66f-9f89fe5df015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/f4JrGHtkqt0dCR-QPLTbBys3Bbe_i0cnrbfRr-g9_w7f14I", "content": "", "creation_timestamp": "2026-09-18T04:00:06.124885Z"}, {"uuid": "d8dbad6f-8eb1-4750-b7cc-40e649f19464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://t.me/GithubRedTeam/102624", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 23:39:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9; Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T04:00:15.817792Z"}, {"uuid": "90c3e0b6-26bb-4782-b802-72f3d73527d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-18T12:00:08.112215Z"}, {"uuid": "b279ec3a-7bb6-46f2-a508-0e10f46869e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "Telegram/eQMW6jHNlYJ-_QFg96Eu_Cf9z9w24AUQk8Z8zeKSO7_ACVc", "content": "", "creation_timestamp": "2026-09-19T00:00:26.411028Z"}, {"uuid": "6857daa3-0782-468e-ba46-79d8f17c5a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102624", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-87796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 23:39:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-87796 - Multi Uploader for Gravity Forms <= 1.1.9; Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T00:00:10.320401Z"}, {"uuid": "e23fb9dd-0923-43b7-8b35-e8c20526afcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87799", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlhg2lz2f25", "content": "CVE-2026-87799 - lxd\nVersions of Canonical LXD (4.0 and newer) let a user who can create containers or a malicious migration source place specially crafted files that cause the system to write wherever they\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-09-28T13:50:08.051715Z"}, {"uuid": "2378f74d-1aeb-4af2-8e1d-3bf4081e52c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87799", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvsvytld2f", "content": "\ud83d\udea8 CVE-2026-87799 \u2014 CVSS 9.9 CRITICAL\n\nImproper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87799\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:07:51.963979Z"}, {"uuid": "010de934-0266-40fa-a0e7-883a215b4b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87799", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwmqsvbaak2t", "content": "Three critical LXD vulnerabilities, including CVE-2026-87799 (CVSS 9.9), let container users write files as root on the host. Patch to 5.21.8 or 6.10.\n\n#LXD #LXDVulnerabilities #Canonical #ContainerSecurity #btrfs #PathTraversal #LinuxSecurity #PatchNow", "creation_timestamp": "2026-09-29T02:11:03.851988Z"}]}