{"vulnerability": "cve-2026-9410", "sightings": [{"uuid": "ca173563-f7bf-4a39-a6e6-80262cfbb567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://gist.github.com/ichintu/6f6d6a80c56f871cb012c31151e3888f", "content": "This daily digest highlights two cybersecurity updates:\n\n1. **CVE-2026-94104 (NivoCart \u22642.4.0):** A high-severity (8.8) vulnerability that enables remote code execution via arbitrary PHP file uploads. The flaw stems from missing file extension validation in the file manager's `multi()` endpoint and requires only basic back-office access to exploit.\n2. **EchelonGraph Pulse:** A newly launched, rapid CVE notification tool designed for cybersecurity professionals, currently seeking community feedback to refine its features and improve user support.", "creation_timestamp": "2026-09-20T12:01:53.345538Z"}, {"uuid": "569d131b-e028-4593-b084-534b8a7706ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94107", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvxadfhbx62f", "content": "CVE-2026-94107\nThe NivoCart shopping system (versions up to 2.4.0) creates password\u2011reset codes in a way that can be predicted. An attacker who knows an admin's email can request a reset and guess the code, letting them log\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-20T12:50:07.790063Z"}, {"uuid": "fa61f653-5146-4747-9e45-c36428f17dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94107", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvxenbvub52y", "content": "\ud83d\udea8 CVE-2026-94107 \u2014 CVSS 9.2 CRITICAL\n\nNivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94107\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-20T14:07:15.927675Z"}, {"uuid": "59083d2b-240e-46c0-ad83-4471045d6795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2d5g2scbqyya3", "content": "CVE-2026-94109 - openEQUELLA before 2026.1.0 Remote Code Execution via FreeMarker Template Injection\nCVE ID : CVE-2026-94109\n \n Published : Sept. 20, 2026, 12:17 p.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : openEQUELLA versions before 2026.1.0 contain a remote code execution...", "creation_timestamp": "2026-09-20T14:12:38.154592Z"}, {"uuid": "6b438ff3-153a-49f5-9e6e-6d585840c193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94106", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhqnsmuq22", "content": "\ud83d\udfe0 CVE-2026-94106 - High (8.8)\n\ngetID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94106/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:02:50.071939Z"}, {"uuid": "affbf21f-0261-420e-a9a9-4f1c8647ee1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94107", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhquye4m2m", "content": "\ud83d\udfe0 CVE-2026-94107 - High (8.1)\n\nNivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94107/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:02:57.753806Z"}, {"uuid": "bf9adb75-5c20-47f4-933e-46edeaa345b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94109", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhs6u72n23", "content": "\ud83d\udfe0 CVE-2026-94109 - High (8.8)\n\nopenEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94109/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:03:41.955311Z"}, {"uuid": "99cf2363-dc2e-49ea-888e-6bdfbb473e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhso3kse2k", "content": "\ud83d\udfe0 CVE-2026-94104 - High (8.8)\n\nNivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi(...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94104/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:03:57.668577Z"}, {"uuid": "c1fe009f-182f-4399-a9cf-e3e17d3e9878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvyvfz6mva2t", "content": "CVE-2026-94104\nIf someone with view\u2011only back\u2011office access logs in, they can place a script file in the public image folder and make the server run it. This could let an attacker take control of the web site. Upgrade\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-21T04:40:04.114808Z"}, {"uuid": "d80aca47-63e6-41eb-b030-b5460f4b373e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94106", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvyvg4oxck2n", "content": "CVE-2026-94106 - php-getid3\nThe PHP-getID3 library used on Debian systems can be tricked into running unwanted system commands if a file name contains special characters. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpgetid3 #debian #Debian12 #CVE #infosec", "creation_timestamp": "2026-09-21T04:40:07.684733Z"}, {"uuid": "8a07f3bd-48ab-44de-a3c9-6ec8c1167c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94109", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvyvxvedzi2t", "content": "CVE-2026-94109 - openequella\nVersions of openEQUELLA released before 2026.1.0 allow someone who has a valid account to insert specially crafted text into reports or dashboards that causes the system to execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openequella #CVE #infosec", "creation_timestamp": "2026-09-21T04:50:04.326520Z"}, {"uuid": "b834ffc6-f130-4b99-990a-3a1d496d069f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94101", "type": "seen", "source": "https://gist.github.com/ichintu/c888a270fbf834dd12a0076ed8bbb3e4", "content": "This daily threat intelligence briefing covers three key developments:\n\n\u2022 **Jade Sleet Breach:** North Korean threat group Jade Sleet compromised a small Indian IT firm by specifically targeting developers, deploying FLATROOF and ROOFDECK backdoors (reported by SentinelOne).\n\u2022 **CVE-2026-94142 (High/Local):** A write-what-where vulnerability in the BioStar Temperature Monitor Utility\u2019s driver is publicly exploitable. The vendor has not responded to early notifications.\n\u2022 **CVE-2026-94101 (Critical/Remote):** A buffer overflow in the Netcore NBR200V2 router is publicly available for exploitation, with the vendor also remaining unresponsive.\n\nBoth CVEs were published on September 21, 2026, and pose immediate risk due to publicly disclosed, functional exploits.", "creation_timestamp": "2026-09-21T08:04:42.861722Z"}, {"uuid": "c0c174bf-1980-4c05-88f5-5f6018f9946c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94101", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117308917462367519", "content": "Netcore NBR200V2 (v1.3.241127.071246) hit by CRITICAL CVE-2026-94101 buffer overflow in /usr/bin/routerd. Remote code exec possible. Public exploit, no patch. Restrict remote access ASAP. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #RouterSecurity #Infosec", "creation_timestamp": "2026-09-21T12:00:27.380120Z"}, {"uuid": "27ef08c8-9915-4946-b0b8-6dbd5f0a1e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94101", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvznzjtlda2z", "content": "Netcore NBR200V2 routers (v1.3.241127.071246) face a CRITICAL buffer overflow (CVE-2026-94101). Public exploit, no patch. Restrict remote access or replace device. https://radar.offseq.com/threat/cve-2026-94101-buffer-overflow-in-netcore-nbr200v2-21b7762bd81c815b #OffSeq #Netcore #Vulnerability", "creation_timestamp": "2026-09-21T12:00:29.821823Z"}, {"uuid": "2d02e609-111f-4084-941a-06896e3555ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94101", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvzpgnt7e72t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-94101: A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-94101\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-21T12:25:43.093499Z"}]}