{"vulnerability": "cve-2026-8977", "sightings": [{"uuid": "aac09477-19b2-4071-ab90-376502823940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8977", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntobotd3e24", "content": "CVE-2026-8977 - WP GDPR Cookie Consent\nCVE ID : CVE-2026-8977\n \n Published : June 9, 2026, 5:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The WP GDPR Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ninja_gdpr_ajax_actions' AJAX ac...", "creation_timestamp": "2026-06-09T07:27:31.225369Z"}, {"uuid": "7add8f6e-428d-4bbc-ac3d-e9247404ac47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8977", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mnvsgwabrl22", "content": "CVE-2026-8977: XSS en WP GDPR Cookie Consent\n\n\u00bfTu sitio usa WP GDPR Cookie Consent \u2264 1.0.0? La CVE-2026-8977 WordPress permite a cualquier subscriber inyectar scripts en tus p\u00e1ginas. Actualiz\u00e1 hoy.\n\n#cve20268977 #storedxss #wpgdprcookieconsent #wordpressxss #pluginsvulnerables", "creation_timestamp": "2026-06-10T03:47:21.386007Z"}, {"uuid": "86f8fafe-554d-4885-b3b5-955030d55aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8977", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnzg4ra6gv22", "content": "CVE-2026-8977 wp-gdpr-cookie-consent (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #wp-gdpr-cookie-consent", "creation_timestamp": "2026-06-11T14:17:34.421601Z"}, {"uuid": "1ce65a59-01f2-4ca4-b6a2-cf7e64475832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89771", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvf4uqjbvd2s", "content": "\ud83d\udfe0 CVE-2026-89771 - High (7.8)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Fix subbuf resi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89771/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-13T08:00:20.979680Z"}, {"uuid": "f1664166-13db-45d6-9287-ca1a7358f030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvngtuvmrh25", "content": "CVE-2026-89775 - linux\nA problem in the Linux kernel\u2019s memory\u2011management code could cause the system to skip needed clean\u2011up steps, which may lead to slower performance or occasional instability. The error\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linux #Debian14 #CVE #infosec", "creation_timestamp": "2026-09-16T15:20:06.267418Z"}, {"uuid": "a5ab2cba-dd24-4fec-b172-e1793a7f4cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89778", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvngtybcm22f", "content": "CVE-2026-89778 - linux\nThe Linux kernel can mistakenly access memory outside its limits when it reads certain compressed files stored on an ISO9660 disc image. This misstep could cause the system to crash or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linux #Debian12 #CVE #infosec", "creation_timestamp": "2026-09-16T15:20:09.567300Z"}, {"uuid": "01bd0d1d-c209-4a1e-b467-334edacc52d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89779", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnhfq5f6f2n", "content": "CVE-2026-89779 - linux\nThe Linux operating system's support for NTFS (Windows) file information can be tricked into exposing memory that should stay private. An attacker who supplies a specially crafted file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linux #Debian12 #CVE #infosec", "creation_timestamp": "2026-09-16T15:30:05.567143Z"}, {"uuid": "7b7f1af0-b7bb-448f-8a47-5921d56e8a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvomusyx742o", "content": "A critical KVM guest escape (CVE-2026-89775) enables an LPE to gain root on Linux hosts. Patch this KVM guest escape vulnerability now.\n\n#KVM #LinuxKernel #CVE202689775 #Cybersecurity #InfoSec", "creation_timestamp": "2026-09-17T02:40:40.085130Z"}, {"uuid": "efaddc37-f354-45b1-895c-f936df3f9f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvr3rvc5l22z", "content": "KVM Guest Escape: Critical CVE-2026-89775 Lets Attackers Break Out of VMs\uff08KVM\u306bCritical\u8106\u5f31\u6027\u3001\u4eee\u60f3\u30de\u30b7\u30f3\u304b\u3089\u30db\u30b9\u30c8\u3078\u306e\u8131\u51fa\u304c\u53ef\u80fd\uff09 #SecurityOnline (Sep 17)\n\nsecurityonline.info/kvm-guest-es...", "creation_timestamp": "2026-09-18T02:12:47.451634Z"}, {"uuid": "a506891c-e5c9-4299-87d9-14df767f00e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mw464c57o72s", "content": "ARM64 KVM nested-virtual hosts vulnerable to CVE-2026-89775: guest VMs can escape and write host memory. Update kernels now. #Security #Linux #ARM64 #KVM #KernelVulnerability https://thedailytechfeed.com/critical-linux-vulnerability-lets-arm64-kvm-guests-escape-to-host-memory/", "creation_timestamp": "2026-09-22T11:53:41.494957Z"}, {"uuid": "bea28723-efc6-45df-9e5c-df97a347c67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mw472sbtgj2w", "content": "CVE-2026-89775: ARM64 Guest Gains Host Memory Access via KVM TLB Bug", "creation_timestamp": "2026-09-22T12:10:44.459929Z"}, {"uuid": "4df0a1eb-2ec9-4686-bdf3-49e116d389e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mw47ek4zvk2g", "content": "CVE-2026-89775 in ARM64 KVM nested virtualization can expose freed host memory to a guest, enabling host memory read/write and potential guest escape.\n", "creation_timestamp": "2026-09-22T12:16:12.972914Z"}, {"uuid": "bcab83a5-18fd-41d8-a1e5-3c0ccc252446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mw47j66y442q", "content": "CVE-2026-89775 in ARM64 KVM nested virtualization can expose freed host memory to a guest, enabling host memory read/write and potential guest escape.\n", "creation_timestamp": "2026-09-22T12:18:46.933129Z"}, {"uuid": "ce25b712-144d-4e28-984e-d94e04ae1289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html", "content": "A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled.\n\nThe bug, tracked as CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.", "creation_timestamp": "2026-09-22T13:00:41.941154Z"}, {"uuid": "f3206e95-968f-4873-9c46-0c806bcf8c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mw4n5vb2c32n", "content": "Linux ARM64 KVM Flaw Enables Guest-to-Host\u00a0Escape\n\nA new Linux kernel vulnerability, CVE-2026-89775, allows ARM64 KVM guests to read and write host kernel memory if nested virtualization is enabled.", "creation_timestamp": "2026-09-22T16:23:01.435557Z"}, {"uuid": "47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/thibaud.dev/post/3mw4p3epc5s2p", "content": "Faille critique sur le noyau Linux (CVE-2026-89775) : une vuln\u00e9rabilit\u00e9 KVM sur ARM64 permet \u00e0 une VM d'acc\u00e9der en lecture/\u00e9criture \u00e0 la m\u00e9moire de l'h\u00f4te.\n\nEscape de VM possible, mais uniquement si la virtualisation imbriqu\u00e9e est activ\u00e9e.\n\ngo.thibaud.dev/z0Q7\n\n#Linux #Security #DevOps", "creation_timestamp": "2026-09-22T16:57:24.208611Z"}, {"uuid": "b41081b0-8aec-4ec2-b727-fcbcd0fb6a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10124", "content": "\ud83d\uded1 New Linux KVM flaw CVE-2026-89775 can let an ARM64 guest escape to the host.\n\nWhen nested virtualization is enabled, the bug can leave freed host kernel memory mapped and writable. No attacks have been reported.\n\nHow the escape works \u2193 https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html", "creation_timestamp": "2026-09-22T11:46:15.000000Z"}, {"uuid": "7709a3c5-6ed8-495d-968c-4ab7bb0d689e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "Telegram/fI0ZbmLncz2xmiv5ONTEfe1zCx6a_92IznGM24jI9RrFIQ", "content": "", "creation_timestamp": "2026-09-22T12:55:50.000000Z"}, {"uuid": "7531a5a7-d36a-468e-911f-e242302db613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "published-proof-of-concept", "source": "Telegram/fI0ZbmLncz2xmiv5ONTEfe1zCx6a_92IznGM24jI9RrFIQ", "content": "", "creation_timestamp": "2026-09-22T12:55:50.000000Z"}, {"uuid": "5a4fdfe6-ce29-4123-ae60-df04b662c6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8977", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117354399908091855", "content": "RE: https://mastodon.bsd.cafe/@stefano/117354014226641780\nSure glad I moved my main workstation to Debian. :brdAngry: \nCVE-2024-5256CVE-2024-5809CVE-2025-2181CVE-2025-2210CVE-2025-2212CVE-2025-3820CVE-2025-3823CVE-2025-3862CVE-2025-3983CVE-2025-3992CVE-2025-4006CVE-2025-4010CVE-2025-4013CVE-2025-4016CVE-2026-10007CVE-2026-100079CVE-2026-2313CVE-2026-4319CVE-2026-4334CVE-2026-4596CVE-2026-5294CVE-2026-5301CVE-2026-5308CVE-2026-5310CVE-2026-5311CVE-2026-5325CVE-2026-5331CVE-2026-6405CVE-2026-6407CVE-2026-6408CVE-2026-6421CVE-2026-6828CVE-2026-6830CVE-2026-6833CVE-2026-7233CVE-2026-7240CVE-2026-7241CVE-2026-7243CVE-2026-7248CVE-2026-7249CVE-2026-7425CVE-2026-7426CVE-2026-7428CVE-2026-7429CVE-2026-7433CVE-2026-7449CVE-2026-7452CVE-2026-7473CVE-2026-7475CVE-2026-8052CVE-2026-8067CVE-2026-8075CVE-2026-8076CVE-2026-8077CVE-2026-8078CVE-2026-8079CVE-2026-8080CVE-2026-8082CVE-2026-8083CVE-2026-8084CVE-2026-8085CVE-2026-8086CVE-2026-8087CVE-2026-8091CVE-2026-8092CVE-2026-8093CVE-2026-8094CVE-2026-8095CVE-2026-8096CVE-2026-8097CVE-2026-8098CVE-2026-8099CVE-2026-8100CVE-2026-8101CVE-2026-8943CVE-2026-8944CVE-2026-8945CVE-2026-8946CVE-2026-8947CVE-2026-8948CVE-2026-8949CVE-2026-8950CVE-2026-8951CVE-2026-8952CVE-2026-8953CVE-2026-8954CVE-2026-8955CVE-2026-8956CVE-2026-8957CVE-2026-8958CVE-2026-8959CVE-2026-8960CVE-2026-8961CVE-2026-8962CVE-2026-8963CVE-2026-8964CVE-2026-8965CVE-2026-8966CVE-2026-8967CVE-2026-8968CVE-2026-8969CVE-2026-8970CVE-2026-8971CVE-2026-8972CVE-2026-8973CVE-2026-8974CVE-2026-8975CVE-2026-8976CVE-2026-8977CVE-2026-8978CVE-2026-8979CVE-2026-8980CVE-2026-8981CVE-2026-8982CVE-2026-8983CVE-2026-8984CVE-2026-8985CVE-2026-8986CVE-2026-8987CVE-2026-8988CVE-2026-8989CVE-2026-8990CVE-2026-8992CVE-2026-8993CVE-2026-8994CVE-2026-8995CVE-2026-8996CVE-2026-8997CVE-2026-8998CVE-2026-8999CVE-2026-9000CVE-2026-9001CVE-2026-9002CVE-2026-9003CVE-2026-9004CVE-2026-9005CVE-2026-9006CVE-2026-9007CVE-2026-9008CVE-2026-9009CVE-2026-9010CVE-2026-9011CVE-2026-9012CVE-2026-9013CVE-2026-9014CVE-2026-9015CVE-2026-9016CVE-2026-9017CVE-2026-9018CVE-2026-9019CVE-2026-9020CVE-2026-9021CVE-2026-9022CVE-2026-9023CVE-2026-9024CVE-2026-9025CVE-2026-9026CVE-2026-9027CVE-2026-9028CVE-2026-9029CVE-2026-9030CVE-2026-9031CVE-2026-9032CVE-2026-9033CVE-2026-9034CVE-2026-9035CVE-2026-9036CVE-2026-9037CVE-2026-9038CVE-2026-9039CVE-2026-9040CVE-2026-9041CVE-2026-9042CVE-2026-9043CVE-2026-9247CVE-2026-9248CVE-2026-9249CVE-2026-9250CVE-2026-9251CVE-2026-9252CVE-2026-9303CVE-2026-9304CVE-2026-9305CVE-2026-9306CVE-2026-9307CVE-2026-9308CVE-2026-9309CVE-2026-9310CVE-2026-9311CVE-2026-9312CVE-2026-9313CVE-2026-9314CVE-2026-9315CVE-2026-9316CVE-2026-9317CVE-2026-9318CVE-2026-9319CVE-2026-9320CVE-2026-9321CVE-2026-9322CVE-2026-9323CVE-2026-9324CVE-2026-9325CVE-2026-9326CVE-2026-9327CVE-2026-9328CVE-2026-9378CVE-2026-9379CVE-2026-9380CVE-2026-9381CVE-2026-9382CVE-2026-9383CVE-2026-9740CVE-2026-9741CVE-2026-9742CVE-2026-9743CVE-2026-9744CVE-2026-9745CVE-2026-9747CVE-2026-9748CVE-2026-9749CVE-2026-9750CVE-2026-9751CVE-2026-9752CVE-2026-9753CVE-2026-9754CVE-2026-9755CVE-2026-9756CVE-2026-9757CVE-2026-9758CVE-2026-9759CVE-2026-9760CVE-2026-9761CVE-2026-9789CVE-2026-9790CVE-2026-9791CVE-2026-9792CVE-2026-9793CVE-2026-9794CVE-2026-9795CVE-2026-9796CVE-2026-9797CVE-2026-9798CVE-2026-9799CVE-2026-9800CVE-2026-9801CVE-2026-9802CVE-2026-9803CVE-2026-9804CVE-2026-9805CVE-2026-9806CVE-2026-9807CVE-2026-9808CVE-2026-9809CVE-2026-9810CVE-2026-9811CVE-2026-9812CVE-2026-9813CVE-2026-9814CVE-2026-9815CVE-2026-9816", "creation_timestamp": "2026-09-29T12:47:18.515700Z"}, {"uuid": "ac490828-c695-4849-a67b-7007b7b33bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89771", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T18:00:00.000000Z"}, {"uuid": "1d8f029a-340a-4bf1-b5f1-21abfdb8c614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89776", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T18:00:00.000000Z"}, {"uuid": "f51517b4-83e7-4ed1-aa3d-9789c4156bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89779", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T18:00:00.000000Z"}, {"uuid": "9b50fa8f-9f03-41ac-b91b-15463a9ad50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89777", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T18:00:00.000000Z"}, {"uuid": "c08f6e24-5acb-4ce9-b5a2-ba961118c0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89778", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T18:00:00.000000Z"}]}