{"vulnerability": "cve-2026-9182", "sightings": [{"uuid": "af5ec895-c9ba-40dd-874a-2f4473c32968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9182", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvxqfq4f2z", "content": "CVE-2026-9182 - Unvalidated File Upload vulnerability in ArcGIS Server.\nCVE ID : CVE-2026-9182\n \n Published : July 6, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit t...", "creation_timestamp": "2026-07-06T20:18:49.143905Z"}, {"uuid": "88eff45d-2801-44ae-bcb2-9cb15af4be71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9182", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq47nlkutf2h", "content": "CVE-2026-9182 - arcgis_server\nArcGIS Server has a security weakness that lets attackers upload files without permission. This could allow them to do harm to your system. To protect yourself, make sure you\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcgisserver #esri #CVE #infosec", "creation_timestamp": "2026-07-08T03:50:04.987303Z"}, {"uuid": "05d69d58-5d55-470d-9fe1-b71b4adf95c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91826", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mvpzwhigi62w", "content": "CVE-2026-91826: RCE in Samsung rlottie Library Creates Supply-Chain Risk", "creation_timestamp": "2026-09-17T16:06:53.949743Z"}, {"uuid": "502f47de-a5c2-44e0-b1c6-1c6849281465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/46ncnlr5iqg3c", "content": "CVE-2026-91827 - Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export\nCVE ID : CVE-2026-91827\n \n Published : Sept. 22, 2026, 6:58 a.m. | 20\u00a0minutes ago\n \n Description : The Ninja Forms WordPress plugin 3.15.3 does not prevent user-submitted form field value...", "creation_timestamp": "2026-09-22T07:52:46.375825Z"}]}