{"vulnerability": "cve-2026-9055", "sightings": [{"uuid": "7392f4a8-05f7-4697-be9f-8b7fd7c62ff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9055", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mujbgir3za2p", "content": "\ud83d\udea8 CVE-2026-9055 \u2014 CVSS 9.8 CRITICAL\n\nThe Booking for Appointments and Events Calendar \u2013 Amelia (Premium) plugin for WordPress is vulnerable to P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-9055\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T06:07:18.024640Z"}, {"uuid": "1b8ecc90-8457-4dc9-bb12-3b932327830c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ctodvfpohicxr", "content": "CVE-2026-9055 - Booking for Appointments and Events Calendar \u2013 Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'\nCVE ID : CVE-2026-9055\n \n Published : Sept. 2, 2026, 5:17 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : The Boo...", "creation_timestamp": "2026-09-02T06:42:24.822438Z"}, {"uuid": "8b647eb5-90ab-4228-85c3-70930e0ad843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9055", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mujhrleleo2s", "content": "\ud83d\udd34 CVE-2026-9055 - Critical (9.8)\n\nThe Booking for Appointments and Events Calendar \u2013 Amelia (Premium) plugin for WordPress is vul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9055/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T08:00:53.626311Z"}, {"uuid": "ef47f7de-ff19-428a-aaca-51185a553342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9055", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mujjmftavs2x", "content": "\u3010\u7dca\u6025\u3011WordPress\u4e88\u7d04\u30d7\u30e9\u30b0\u30a4\u30f3 Amelia \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-9055 / CVSS v3.1 \u3067 9.8 CRITICAL\uff09\n\nPremium\u7248 8.0\u301c9.6.2 \u306f\u3001\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u306b\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4e57\u3063\u53d6\u3089\u308c\u307e\u3059\u3002\n\u5bfe\u51e6: 9.6.3\u4ee5\u964d\uff08\u6700\u65b09.8.1\uff09\u3078\u66f4\u65b0\u3092\u3002\u7121\u6599\u7248\u306f 2.x \u7cfb\u3067\u7248\u6570\u4f53\u7cfb\u304c\u9055\u3046\u306e\u3067\u3001\u307e\u305a\u7ba1\u7406\u753b\u9762\u3067\u30d0\u30fc\u30b8\u30e7\u30f3\u78ba\u8a8d\u3092\u3002\n\nforsmile.jp/articles/ame...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-02T08:33:47.279118Z"}, {"uuid": "a020773e-797a-4c05-af39-17d16ea9afea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9055", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muk5jl42de25", "content": "CVE-2026-9055 - booking for appointments and events calendar \u2013 amelia\nThe Amelia booking plugin for WordPress (versions 8.0 through 9.6.2) lets anyone change their account to a manager and then take over an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#melograno #CVE #infosec", "creation_timestamp": "2026-09-02T14:30:05.674032Z"}, {"uuid": "9cae77c9-4452-4e8d-ac6f-bf21b590c0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdaiumtdh2z", "content": "\ud83d\udfe0 CVE-2026-90553 - High (7.8)\n\nvLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90553/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T13:59:58.194921Z"}, {"uuid": "94c28717-6a66-4896-93c2-ef926d3623d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdplvyo2r2w", "content": "CVE-2026-90558 - sngrep\nVersions of sngrep up to 1.8.4 can mishandle SIP messages that contain very long header fields, causing memory corruption. This could make the program stop working or allow an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sngrep #irontec #CVE #infosec", "creation_timestamp": "2026-09-12T18:30:05.297045Z"}, {"uuid": "bce91b51-7131-4b64-b003-eaf9cfcf6979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90556", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdrcr7i6223", "content": "\ud83d\udfe0 CVE-2026-90556 - High (7.8)\n\nFreeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90556/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T19:00:47.562560Z"}, {"uuid": "91c2eaf7-8637-4840-be54-36b1bc883164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdrczd6r322", "content": "\ud83d\udd34 CVE-2026-90558 - Critical (9.8)\n\nsngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90558/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T19:00:55.365924Z"}, {"uuid": "06017bf8-c7c3-45a3-a6da-c70bfecbbddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90559", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdrdbtszv2e", "content": "\ud83d\udfe0 CVE-2026-90559 - High (7.5)\n\nsnappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(B...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90559/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T19:01:03.962979Z"}, {"uuid": "79fb952f-14b8-4b11-a1bf-93c853a86a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvduzfbw5z25", "content": "\ud83d\udea8 CVE-2026-90558 \u2014 CVSS 9.3 CRITICAL\n\nsngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines wh...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90558\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-12T20:07:06.264960Z"}, {"uuid": "5148f2b3-84fd-4632-8561-b7c669e8e965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90556", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvdwbori6c2c", "content": "Freeciv v3.2.6\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30bb\u30fc\u30d6\u30c7\u30fc\u30bf\u8aad\u8fbc\u6642\u306e\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027\u3002\u60aa\u610f\u3042\u308b\u30bb\u30fc\u30d6\u30c7\u30fc\u30bf\u3067\u30e1\u30e2\u30ea\u7834\u640d\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-90556 CVSS 7.8 | HIGH", "creation_timestamp": "2026-09-12T20:29:38.301091Z"}, {"uuid": "e4fef720-6c65-4c31-bbc0-98408ea11424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvdwdgyuem2b", "content": "sngrep 1.8.4\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306bSIP\u5c5e\u6027\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u51e6\u7406\u306b\u304a\u3051\u308b\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u4e0d\u6b63\u306aSIP\u30d1\u30b1\u30c3\u30c8\u3067\u30af\u30e9\u30c3\u30b7\u30e5\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-90558 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-12T20:30:37.290837Z"}, {"uuid": "399917ec-188f-44c2-a3e4-ccc2f6720ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90558", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117261141603138759", "content": "CVE-2026-90558: CRITICAL stack buffer overflow in irontec sngrep (<=1.8.4). Malicious SIP headers can crash or allow code execution. Patch status pending \u2014 filter untrusted SIP traffic. https://radar.offseq.com/threat/cve-2026-90558-stack-based-buffer-overflow-in-irontec-sngrep-f0d23a6d23082198 #OffSeq #CVE202690558 #vuln #SIPrisk", "creation_timestamp": "2026-09-13T01:30:25.721307Z"}, {"uuid": "8c574f54-2feb-4d3c-aa97-9feb2f3b4fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90558", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mveh3lmsfm2z", "content": "irontec sngrep <=1.8.4 hit by CRITICAL stack buffer overflow (CVE-2026-90558). Malicious SIP headers can crash or lead to RCE. Avoid untrusted SIP packets, check vendor for fixes. https://radar.offseq.com/threat/cve-2026-90558-stack-based-buffer-overflow-in-irontec-sngrep-f0d23a6d23082198 #OffSeq...", "creation_timestamp": "2026-09-13T01:30:27.841052Z"}, {"uuid": "de223d83-bae1-4d09-bb2b-37ae44caeae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mvgisappuh2h", "content": "sngrep: fix CVE-2026-90558\n\nhttps://github.com/NixOS/nixpkgs/pull/562971\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2567\n\n#security", "creation_timestamp": "2026-09-13T21:06:21.114317Z"}, {"uuid": "05301ce6-37e5-49a6-a71a-1f562e3f093c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3mvgsrrqe4k2u", "content": "Merged PRs for 2026-09-13\n\nPackages\n#563033 wlr-utils: 1.7.0 -> 1.8.0\n#563024 linux_testing: 7.3-rc2 -> 7.3-rc3\n#563020 vaultwarden: 1.37.2 -> 1.37.3\n#562984 npb: add changelog\n#562972 workflows/periodic-merge: use correct permissions\n#562971 sngrep: fix CVE-2026-90558\n", "creation_timestamp": "2026-09-14T00:05:03.352567Z"}, {"uuid": "b54371d7-f391-470a-a2d0-aae7831a8721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mvifbq7zes2b", "content": "[Backport release-26.05] sngrep: 1.8.3 -> 1.8.4, fix CVE-2026-90558\n\nhttps://github.com/NixOS/nixpkgs/pull/563160\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2567\n\n#security", "creation_timestamp": "2026-09-14T15:08:45.139939Z"}, {"uuid": "cf750f75-149f-4a9f-a344-bc859732a610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmey7k4i22", "content": "vLLM CVE-2026-90553 (CVSS 8.5) allows RCE via LlavaOnevision2 loader; update to vLLM 0.28.0 now and sandbox model loading. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:26:28.826977Z"}, {"uuid": "547bf1cf-3441-4d9e-a10a-59749260f34d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmfcqqud2g", "content": "vLLM CVE-2026-90553 (CVSS 8.5) allows RCE via the LlavaOnevision2 processor when trust_remote_code is ignored \u2014 update to v0.28.0. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:26:40.286282Z"}, {"uuid": "d2cc6e00-4177-43bc-bde1-c5b4bc983119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmfvwrx42i", "content": "vLLM CVE-2026-90553 (RCE) lets a malicious model run code in the vLLM process; patch to vLLM 0.28.0 now or disable remote processors: https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:27:00.072089Z"}, {"uuid": "306d4a3b-9a3e-4f6c-92f5-48618a66e5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmgdoup424", "content": "CVE-2026-90553 vLLM (<0.28.0) allows malicious models to execute code despite trust_remote_code \u2014 upgrade to v0.28.0 now (CVSS 8.5). https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T07:27:14.552388Z"}, {"uuid": "1c6b5a2f-1a5f-4295-909e-ce82920a9f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90553", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvqrfvggyl2u", "content": "\ud83d\udccc CVE-2026-90553 - vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter... https://www.cyberhub.blog/cves/CVE-2026-90553", "creation_timestamp": "2026-09-17T23:07:07.434238Z"}]}