{"vulnerability": "cve-2026-9223", "sightings": [{"uuid": "8b287685-7e36-4c39-9c35-858a900d90a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9223", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhelz5xcq2e", "content": "CVE-2026-9223 - Devolutions Server Authentication Bypass\nCVE ID : CVE-2026-9223\n \n Published : 22 mai 2026 15:21 | 29\u00a0minutes ago\n \n Description : Missing authorization in the vault import feature in Devolutions Server\u00a0\u00a02026.1.16.0 and earlier allows a low-privileged authentic...", "creation_timestamp": "2026-05-22T16:37:11.509372Z"}, {"uuid": "c1c22aa5-6431-421f-ae90-082bb8a3f918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92238", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:48:05.662009Z"}, {"uuid": "690ec0c6-65d7-4b97-ab92-3d02a268377c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92239", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:48:07.790368Z"}, {"uuid": "37e68ce4-8cde-49b2-ac00-c0eca57fb59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92235", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117350361198874605", "content": "CVE-2026-92235: WP Ultimate Review plugin unpatched, CVSS 8.1. Subscriber-level users can run arbitrary shortcodes. No fix available - disable the plugin now. https://www.valtersit.com/cve/CVE-2026-92235/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-28T19:40:15.183690Z"}, {"uuid": "139c280b-559e-4601-876e-32445e55a145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92235", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwm43q4qra25", "content": "CVE-2026-92235: WP Ultimate Review plugin unpatched, CVSS 8.1. Subscriber-level users can run arbitrary shortcodes. No fix available - disable the plugin now. https://www.valtersit.com/cve/CVE-2026-92235/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-28T20:00:10.883021Z"}]}