{"vulnerability": "cve-2026-9192", "sightings": [{"uuid": "a969c8f0-e27e-44c9-a3eb-3de2d2f50bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9192", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdzu5srge2f", "content": "CVE-2026-9192\nAn older version of MarkLogic Server's ODBC App Server can be exploited by an attacker to access the server without a password. This means an attacker can run queries with the same permissions as a server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T17:18:04.321866Z"}, {"uuid": "84d19bec-9121-47a0-8993-6c622600121a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9192", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781", "content": "", "creation_timestamp": "2026-08-06T16:15:51.674002Z"}, {"uuid": "80ed9b71-cecc-4989-a103-ad142a2edfd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91926", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jvcd2gra33hrg", "content": "CVE-2026-91926 - Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge\nCVE ID : CVE-2026-91926\n \n Published : Sept. 15, 2026, 11:49 a.m. | 26\u00a0minutes ago\n \n Description : A flaw was found in gss-ntlmssp. A memory leak...", "creation_timestamp": "2026-09-15T13:39:16.670171Z"}, {"uuid": "a843536f-9557-475c-ab4f-bb1794c3fc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91925", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmer3usl222", "content": "CVE-2026-91925 - polyaxon\nPolyaxon versions up to 2.16.4 allow a logged\u2011in user to place special code in certain configuration fields. When the system prepares a job, it runs this code on the server, which can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#polyaxon #CVE #infosec", "creation_timestamp": "2026-09-16T05:10:05.878733Z"}, {"uuid": "b3cb013a-8e26-4342-9f1c-62291215e097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91925", "type": "seen", "source": "Telegram/ihh6lu2JwVHbxCCtzMwz7J2so3OYSU8lmtMIGGUfSqoltoc", "content": "", "creation_timestamp": "2026-09-18T04:00:13.651605Z"}, {"uuid": "587b754a-1f08-4c01-8793-558d04a800b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91925", "type": "published-proof-of-concept", "source": "Telegram/ihh6lu2JwVHbxCCtzMwz7J2so3OYSU8lmtMIGGUfSqoltoc", "content": "", "creation_timestamp": "2026-09-19T00:00:13.282226Z"}, {"uuid": "903bb6aa-b187-4865-aadb-23ef3e985f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91921", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3l4sam5lsxya3", "content": "CVE-2026-91921 - Cross-Site Scripting (XSS) in 1millionbot\u2019s AI chatbot platform\nCVE ID : CVE-2026-91921\n \n Published : Sept. 21, 2026, 9:43 a.m. | 17\u00a0minutes ago\n \n Description : Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side ...", "creation_timestamp": "2026-09-21T10:40:40.955892Z"}, {"uuid": "15b4eafc-ea93-4b08-9309-287f3e679a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91923", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw64jo3nft2l", "content": "CVE-2026-91923: SSRF in KubeSphere (through 4.1.3) lets authed users hit internal services via the git credential endpoint and leak Secret basic-auth creds. CVSS 7.7. No patch yet, review underway - restrict endpoint access now. https://www.valtersit.com/cve/CVE-2026-91923/ #CVE #infosec #Kubernetes", "creation_timestamp": "2026-09-23T06:30:41.958565Z"}, {"uuid": "dac9e525-653b-4dfb-8b00-a0ac537ad676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91923", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117318945299045763", "content": "CVE-2026-91923: SSRF in KubeSphere (through 4.1.3) lets authed users hit internal services via the git credential endpoint and leak Secret basic-auth creds. CVSS 7.7. No patch yet, review underway - restrict endpoint access now. https://www.valtersit.com/cve/CVE-2026-91923/ #CVE #infosec #Kubernetes", "creation_timestamp": "2026-09-23T06:30:49.441777Z"}]}