{"vulnerability": "cve-2026-9290", "sightings": [{"uuid": "8f18a6d0-7a38-4616-9897-ffd31fcccc71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlha7sokz2g", "content": "\ud83d\udfe0 CVE-2026-9290 - High (7.5)\n\nThe WP User Manager \u2013 User Profile Builder & Membership plugin for WordPress is vulnerable to L...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9290/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-06T01:00:08.527109Z"}, {"uuid": "d1bbaf11-e568-47f4-8ec4-7dd23d2e1c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlikqk23d2r", "content": "CVE-2026-9290 - WP User Manager\nCVE ID : CVE-2026-9290\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : The WP User Manager \u2013 User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in...", "creation_timestamp": "2026-06-06T01:23:54.569361Z"}, {"uuid": "6cf70252-852a-434e-ad44-f578e1bd271e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnlxyr5bek2b", "content": "CVE-2026-9290. WP User Manager plugin. 7.5/10 CVSS.\n\nAny visitor reads wp-config.php. Database credentials exposed. PHP execution. Your server becomes theirs.\n\nUpdate to 2.9.17 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #LFI #CyberSecurity", "creation_timestamp": "2026-06-06T06:00:11.366083Z"}, {"uuid": "956cea10-6a30-48e2-a218-8bb7d9bfe69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-9290.yaml", "content": "", "creation_timestamp": "2026-06-10T07:07:43.000000Z"}, {"uuid": "e196045f-636c-4278-bc72-4f9614c85e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mobeu2pmfd2e", "content": "CVE-2026-9290 wp-user-manager (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-14T18:16:06.950888Z"}, {"uuid": "b8ca4172-5c8e-45f2-a6bc-20eeaa99be81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "seen", "source": "https://t.me/GithubRedTeam/92104", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9290\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 23:18:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.788284Z"}, {"uuid": "3d518b2f-04f0-4898-a2ad-d4460d1f1a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92104", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9290\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 23:18:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth Local File Inclusion in WP User Manager <= 2.9.17 via path traversal in tab parameter (CVSS 7.5)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.092702Z"}, {"uuid": "9134c5a1-2238-4b17-9df8-fe57396dcad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "seen", "source": "Telegram/weN5BIEcpzWRP-culIl-ZBjR5vCD_HYHl8jd7V-2oU2RFQY", "content": "", "creation_timestamp": "2026-07-16T19:00:21.103289Z"}, {"uuid": "14919c52-1481-4556-8bfc-0116636f71ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9290", "type": "published-proof-of-concept", "source": "Telegram/weN5BIEcpzWRP-culIl-ZBjR5vCD_HYHl8jd7V-2oU2RFQY", "content": "", "creation_timestamp": "2026-07-18T00:00:23.206339Z"}, {"uuid": "ef7a7985-8be4-4473-b117-7380d268c999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92903", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3gtatbtihyy4c", "content": "CVE-2026-92903 - Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings\nCVE ID : CVE-2026-92903\n \n Published : Sept. 17, 2026, 11:17 a.m. | 33\u00a0minutes ago\n \n Description : Improper input validation in Sn...", "creation_timestamp": "2026-09-17T12:17:09.381875Z"}, {"uuid": "57e599d7-b84e-4142-80f9-c7fff37a1935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92905", "type": "seen", "source": "https://gist.github.com/alon710/ace3059648afffb1ee9f4d1ec9f04119", "content": "# CVE-2026-92905: CVE-2026-92905: Denial of Service in Zoho ManageEngine EventLog Analyzer and Log360 Log Collector\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-09-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92905\n\n## Summary\nZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a denial-of-service (DoS) vulnerability that allowed unauthenticated remote attackers to crash the log collector service using malformed syslog packets.\n\n## TL;DR\nUnauthenticated remote attackers can crash the ManageEngine log collector service by sending crafted, malformed syslog datagrams to the syslog listener port.\n\n## Technical Details\n\n- **CWE ID**: CWE-248 (Uncaught Exception)\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **Impact**: Denial of Service (Availability)\n- **Exploit Status**: No public PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Zoho ManageEngine EventLog Analyzer\n- Zoho ManageEngine Log360\n- **ManageEngine EventLog Analyzer**: < Build 13071 (Fixed in: `Build 13071`)\n- **ManageEngine Log360**: < Build 13071 (Fixed in: `Build 13071`)\n\n## Mitigation\n\n- Upgrade to Build 13071 or later\n- Network Segmentation & ACLs\n- Configure automated service recovery\n\n**Remediation Steps:**\n1. Identify all deployed EventLog Analyzer and Log360 instances.\n2. Check the current build number. If it is 13070 or earlier, plan an upgrade.\n3. Download the Service Pack 13071 from the official ManageEngine site.\n4. Apply the patch during a scheduled maintenance window.\n5. Restrict inbound access to UDP/TCP port 514 via firewall rules to known log sources.\n\n## References\n\n- [https://www.manageengine.com/log-management/advisory/CVE-2026-92905.html](https://www.manageengine.com/log-management/advisory/CVE-2026-92905.html)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-92905](https://nvd.nist.gov/vuln/detail/CVE-2026-92905)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92905) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-29T07:30:30.000000Z"}]}