{"uuid": "a1f699bf-74d7-42ad-8ea9-9c83fae5f2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93985", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117297946535057847", "content": "CVE-2026-93985 (CVSS 9.4) in Openpanel-dev openpanel v0: Critical code injection via JS webhook template validator. Attackers with project write access can run arbitrary code in the worker process. Limit permissions & monitor. https://radar.offseq.com/threat/cve-2026-93985-improper-control-of-generation-of-code-code-injection-in-openpanel-dev-openpanel-f8ef9daa74899f8b #OffSeq #Vuln #AppSec", "creation_timestamp": "2026-09-19T13:30:24.305038Z"}