{"uuid": "926d96bb-6122-4c5d-828f-61de71fae9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87902", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mwc4kryxcf2l", "content": "Agency checklist for CVE-2026-87902 (active exploitation):\n\n1. Update every site still on \u22647.1.1 to 7.1.2 (or the backport for your branch)\n2. Review logs for suspicious pagename/page_id probes\n3. Check /tmp and /var/tmp for unexpected .php (wp-pear-rce-flag.php, poc87902.php, luci_.php, zeta_.php)", "creation_timestamp": "2026-09-24T20:41:58.242914Z"}