{"vulnerability": "cve-2026-9084", "sightings": [{"uuid": "896ea915-f747-45bc-ab75-46c3059e3506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcnpje5ms2p", "content": "CVE-2026-9084 - MISP OIDC authentication bypass via automatic email-based account linking under insecure IdP configurations\nCVE ID : CVE-2026-9084\n \n Published : May 20, 2026, 4:16 p.m. | 1\u00a0hour, 59\u00a0minutes ago\n \n Description : MISP\u2019s OIDC authentication plugin allowed automat...", "creation_timestamp": "2026-05-20T19:37:16.542363Z"}, {"uuid": "e5465f17-6ee9-46d5-866d-18d25f9725c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90847", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117272466208832915", "content": "EFM ipTIME C200E v1.094 suffers CRITICAL OS command injection (CVE-2026-90847, CVSS 9.4) via iux_set.cgi. Remotely exploitable, public exploit available. Restrict device access and monitor. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity #CVE", "creation_timestamp": "2026-09-15T01:30:25.485877Z"}, {"uuid": "9e3aa059-899a-47de-acfe-7ed376ee1fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90847", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjhzg7zu62h", "content": "EFM ipTIME C200E 1.094 faces a CRITICAL OS command injection flaw (CVE-2026-90847, CVSS 9.4). Public exploit exists \u2014 restrict access and monitor devices. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity", "creation_timestamp": "2026-09-15T01:30:27.341379Z"}, {"uuid": "4f896f31-f117-466d-baeb-e8900a633744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90843", "type": "seen", "source": "https://gist.github.com/ichintu/ab20711bf02f5b35c139371e41389621", "content": "This daily threat intelligence digest highlights three high-impact vulnerabilities:\n\n\u2022 **CVE-2026-91771 (Weights & Biases, 8.8):** Path traversal in `File.download` (wandb < 0.29.0) allows attackers to write files outside intended directories, potentially enabling remote code execution.\n\u2022 **CVE-2026-90843 (SabyasachiRana WebMap, 8.3):** Remote OS command injection in the `nmap_newscan` function. Publicly exploited; a silent patch is available.\n\u2022 **CVE-2026-85706 (GitLab, 10.0):** Critical unauthenticated path traversal in the repository commits API affects GitLab CE/EE (versions prior to 19.1.8, 19.2.6, and 19.3.2). Enables arbitrary file reads, risking credential theft and CI/CD compromise. Actively exploited, CISA KEV-listed, and patched.\n\n**Recommended Actions:** Prioritize immediate GitLab patching. Hunt logs for malicious API requests, rotate any potentially exposed credentials, and enforce strict access controls and API monitoring across all affected platforms.", "creation_timestamp": "2026-09-15T04:02:20.023098Z"}, {"uuid": "1e6b9547-5538-4e4d-9e49-a4553c8de5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90840", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvjsmt5nzn23", "content": "PHPGurukul Blood Donor Management System 1.0\u306eAdmin Controllers\u306b\u8a8d\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u4e0d\u6b63\u306a\u8a8d\u8a3c\u304c\u53ef\u80fd\u3002\nCVE-2026-90840 CVSS 7.3 | HIGH", "creation_timestamp": "2026-09-15T04:40:15.660143Z"}, {"uuid": "3463d137-ad18-4391-b6ed-7e3cacbe641f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90841", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvjspk2edg23", "content": "PHPGurukul Blood Donor Management System 1.0\u306eReport Endpoint (/application/controllers/admin/Report\u2026\nCVE-2026-90841 CVSS 7.3 | HIGH", "creation_timestamp": "2026-09-15T04:41:46.601967Z"}]}