{"vulnerability": "cve-2026-9274", "sightings": [{"uuid": "ab9bb646-e1be-48cd-9c86-5177b6d363a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92749", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5t33tqx2f", "content": "\ud83d\udea8 CVE-2026-92749 \u2014 CVSS 9.2 CRITICAL\n\nSafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand g...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92749\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:11:14.955149Z"}, {"uuid": "8a303744-9d7d-4e6d-bdfc-61134f2168a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92749", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoddstwwv2j", "content": "CVE-2026-92749 - safeline\nSafeLine versions up to 9.4.1 create the secret used to sign admin session cookies with a predictable random generator. An unauthenticated attacker who knows roughly when the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#safeline #chaitin #CVE #infosec", "creation_timestamp": "2026-09-16T23:50:05.851916Z"}, {"uuid": "e382987d-c331-488c-b17b-35000d2a350c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92748", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtui64lp52f", "content": "CVE-2026-92748 - empire\nBC Security Empire versions before 6.7.1 let a signed-in user upload a file and choose any location on the server by putting \"..\" in the file name. This can let an attacker drop\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#empire #bcsecurity #CVE #infosec", "creation_timestamp": "2026-09-19T04:40:04.042053Z"}, {"uuid": "003568de-80f9-4ba3-bf61-e4a14f37f9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92747", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117344817424516659", "content": "CVE-2026-92747: cockpit-machines leaks VM root/user passwords via process args during install. Local attacker with process visibility can grab credentials. CVSS 5.0, no patch yet. Limit process visibility, harden hosts. https://www.valtersit.com/cve/CVE-2026-92747/ #CVE #infosec #Cockpit", "creation_timestamp": "2026-09-27T20:10:17.838294Z"}, {"uuid": "bda56fa8-8995-42da-a1ac-ed244952ec0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92747", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwjncgm4tg2i", "content": "CVE-2026-92747: cockpit-machines leaks VM root/user passwords via process args during install. Local attacker with process visibility can grab credentials. CVSS 5.0, no patch yet. Limit process visibility, harden hosts. https://www.valtersit.com/cve/CVE-2026-92747/ #CVE #infosec #Cockpit", "creation_timestamp": "2026-09-27T20:30:10.601471Z"}]}