{"uuid": "d440da5d-0a34-4a37-9295-07871718d701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88854", "type": "seen", "source": "https://gist.github.com/ichintu/c58741083d468fc238c83dced24e080a", "content": "Here is a concise threat intelligence summary:\n\n**Date:** September 20, 2026  \n**Overview:** Two critical vulnerabilities were disclosed, both with publicly available exploits requiring immediate remediation.\n\n\u2022 **CVE-2026-94089 | D-Link DIR-868L (Firmware 2.01b05) | Severity: 10.0 (CRITICAL)**  \nA stack-based buffer overflow in the authentication CGI handler (`webfa_authentication.cgi`) caused by unsafe `strcpy` usage. Attackers can remotely exploit this via manipulated `id/password` parameters. Public exploits are available.\n\n\u2022 **CVE-2026-88854 | OrdaSoft Joomla Gallery (Joomla < 6.2.7) | Severity: 9.3 (CRITICAL)**  \nAn unauthenticated SQL injection in the search functionality (`showSearchResult`/`Ajax` functions) due to insufficient input sanitization. Allows anonymous attackers to inject `UNION SELECT` statements and extract arbitrary database contents. Publicly exploitable.\n\n**Recommendation:** Apply vendor patches immediately, restrict exposure of affected endpoints, and monitor for exploitation activity given the critical severity and public exploit availability.", "creation_timestamp": "2026-09-21T00:50:31.888169Z"}