{"metadata": {"vulnerability": "cve-2026-94089", "count": 21, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-20T00:00:00Z", "date_only": false, "value": "2026-09-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-94089", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-20T02:00:00Z", "date_only": false, "value": "2026-09-20T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-94089", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-09-20T08:02:24.652Z", "date_only": false, "value": "2026-09-20T08:02:24.652Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-94089", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-20T08:10:58.326Z", "date_only": false, "value": "2026-09-20T08:10:58.326928Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117302352760461321", "record": "CVE-2026-94089", "field": "creation_timestamp", "uuid": "b73544be-8f0d-4b58-8a47-1fa050ae7d89", "content": "A new vulnerability with increased severity was disclosed for D-Link DIR-868L (CVE-2026-94089) https://vuldb.com/vuln/408017", "url": "https://infosec.exchange/users/vuldb/statuses/117302352760461321"}, {"timestamp": "2026-09-20T10:07:31Z", "date_only": false, "value": "2026-09-20T10:07:31.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-94089", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-09-20T20:45:10.159Z", "date_only": false, "value": "2026-09-20T20:45:10.159Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-94089", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-20T20:45:10.159Z", "date_only": false, "value": "2026-09-20T20:45:10.159Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-94089", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-20T21:16:55Z", "date_only": false, "value": "2026-09-20T21:16:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PC7V-4CMJ-HG88", "record": "GHSA-PC7V-4CMJ-HG88", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-20T21:16:55.780Z", "date_only": false, "value": "2026-09-20T21:16:55.780", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94089", "record": "FKIE_CVE-2026-94089", "field": "published"}, {"timestamp": "2026-09-20T21:31:34Z", "date_only": false, "value": "2026-09-20T21:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PC7V-4CMJ-HG88", "record": "GHSA-PC7V-4CMJ-HG88", "field": "published"}, {"timestamp": "2026-09-20T21:31:34Z", "date_only": false, "value": "2026-09-20T21:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PC7V-4CMJ-HG88", "record": "GHSA-PC7V-4CMJ-HG88", "field": "modified"}, {"timestamp": "2026-09-20T21:40:04.805Z", "date_only": false, "value": "2026-09-20T21:40:04.805027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvy5wzcnit2j", "record": "CVE-2026-94089", "field": "creation_timestamp", "uuid": "599c946b-6a2e-4041-924e-805027b91bce", "content": "CVE-2026-94089 - dir-868l\nThe DIR-868L router\u2019s login handling script can be tricked into overflowing its memory when a specially crafted username or password is sent. This flaw lets an attacker run their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir868l #dlink #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvy5wzcnit2j"}, {"timestamp": "2026-09-20T22:02:16.473Z", "date_only": false, "value": "2026-09-20T22:02:16.473776Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy76nt3bi2k", "record": "CVE-2026-94089", "field": "creation_timestamp", "uuid": "f16b1a8b-9d40-47cf-b61b-1ba11f2a62d1", "content": "\ud83d\udd34 CVE-2026-94089 - Critical (10)\n\nA vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94089/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy76nt3bi2k"}, {"timestamp": "2026-09-21T00:50:31.773Z", "date_only": false, "value": "2026-09-21T00:50:31.773238Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/c58741083d468fc238c83dced24e080a", "record": "CVE-2026-94089", "field": "creation_timestamp", "uuid": "52831652-676d-4614-afb5-163bff0da47e", "content": "Here is a concise threat intelligence summary:\n\n**Date:** September 20, 2026  \n**Overview:** Two critical vulnerabilities were disclosed, both with publicly available exploits requiring immediate remediation.\n\n\u2022 **CVE-2026-94089 | D-Link DIR-868L (Firmware 2.01b05) | Severity: 10.0 (CRITICAL)**  \nA stack-based buffer overflow in the authentication CGI handler (`webfa_authentication.cgi`) caused by unsafe `strcpy` usage. Attackers can remotely exploit this via manipulated `id/password` parameters. Public exploits are available.\n\n\u2022 **CVE-2026-88854 | OrdaSoft Joomla Gallery (Joomla < 6.2.7) | Severity: 9.3 (CRITICAL)**  \nAn unauthenticated SQL injection in the search functionality (`showSearchResult`/`Ajax` functions) due to insufficient input sanitization. Allows anonymous attackers to inject `UNION SELECT` statements and extract arbitrary database contents. Publicly exploitable.\n\n**Recommendation:** Apply vendor patches immediately, restrict exposure of affected endpoints, and monitor for exploitation activity given the critical severity and public exploit availability.", "url": "https://gist.github.com/ichintu/c58741083d468fc238c83dced24e080a"}, {"timestamp": "2026-09-21T23:07:27.546Z", "date_only": false, "value": "2026-09-21T23:07:27.546398Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117311540198506805", "record": "CVE-2026-94089", "field": "creation_timestamp", "uuid": "6c476740-62be-4335-badc-3c702f1ec083", "content": "CVE-2026-94089 - Critical RCE via Stack Buffer Overflow in D-Link DIR-868L. Public exploit available. CVSS 10.0. Isolate unpatched devices immediately. #CVE #DLink #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-94089/", "url": "https://mastodon.social/users/hugovalters/statuses/117311540198506805"}, {"timestamp": "2026-09-22T15:36:49.438Z", "date_only": false, "value": "2026-09-22T15:36:49.438806Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-94089", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-22T15:36:49.438Z", "date_only": false, "value": "2026-09-22T15:36:49.438806Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94089", "record": "FKIE_CVE-2026-94089", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-22T15:42:13.561Z", "date_only": false, "value": "2026-09-22T15:42:13.561Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-94089", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-22T15:42:13.561Z", "date_only": false, "value": "2026-09-22T15:42:13.561Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-94089", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-22T16:18:16.913Z", "date_only": false, "value": "2026-09-22T16:18:16.913", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94089", "record": "FKIE_CVE-2026-94089", "field": "lastModified"}, {"timestamp": "2026-10-20T01:20:10.391Z", "date_only": false, "value": "2026-10-20T01:20:10.391628Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117470606341679033", "record": "CVE-2026-94089", "field": "creation_timestamp", "uuid": "dd301d3a-2a8d-4af1-b9e0-c3d264d38287", "content": "CVE-2026-94089: critical stack buffer overflow in D-Link DIR-868L auth handler, remote, public exploit, CVSS 10, no patch yet. Stop exposing the web UI and update now: #CVE #infosec #DLink https://www.valtersit.com/cve/CVE-2026-94089/", "url": "https://mastodon.social/users/hugovalters/statuses/117470606341679033"}]}