{"uuid": "a415693a-6cef-4d6e-ad0a-d61e7e0a09d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15981", "type": "seen", "source": "https://bsky.app/profile/mohamedation.com/post/3mukbuavwtt2s", "content": "CVE-2026-15981 is being exploited in public using the POC code. IPs seem to be coming from Russia and the traffic is hitting both WPMU DEV Dashboard and SAML Single Sign-On plugins. If you run either, this is relevant right now.\nThere is some mixing of CVE numbers floating around.", "creation_timestamp": "2026-09-02T15:47:39.609107Z"}