https://vulnerability.circl.lu/sightings/feed 2026-10-08T16:33:09.137968+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f5421494-18fd-498a-a070-7efac1134784/export 2026-10-08T16:33:09.158168+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f5421494-18fd-498a-a070-7efac1134784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105110", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxefx67qvd2x", "content": "Iskratel Innbox GPON ONT: CVE-2026-105110 (CRITICAL, 9.8 CVSS) enables unauthenticated remote OS command injection as root. Restrict access, monitor login.xgi, await patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-...", "creation_timestamp": "2026-10-08T12:00:29.059741Z"} 2026-10-08T12:00:29.059741+00:00 https://vulnerability.circl.lu/sighting/70ec86a1-7df2-4979-8bae-515c0e80c9dd/export 2026-10-08T16:33:09.159491+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "70ec86a1-7df2-4979-8bae-515c0e80c9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105110", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117405176710830698", "content": "CVE-2026-105110 (CRITICAL, CVSS 9.8): Iskratel Innbox GPON ONT devices have an OS command injection flaw in login.xgi. Remote, unauthenticated code execution as root possible. Restrict access & monitor until patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-2e83a9c5703badaa #OffSeq #infosec #zeroday #vuln", "creation_timestamp": "2026-10-08T12:00:27.049978Z"} 2026-10-08T12:00:27.049978+00:00 https://vulnerability.circl.lu/sighting/b0b455f8-8378-4ba9-bc3a-e02a49a01459/export 2026-10-08T16:33:09.159635+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b0b455f8-8378-4ba9-bc3a-e02a49a01459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105110", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxebzc2vfh2z", "content": "CVE-2026-105110 - innbox\nThe login page on Iskratel Innbox GPON devices can be tricked into running any command without needing to log in. This lets an outsider gain full control of the device. Apply the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#innbox #iskratel #CVE #infosec", "creation_timestamp": "2026-10-08T10:50:04.686360Z"} 2026-10-08T10:50:04.686360+00:00 https://vulnerability.circl.lu/sighting/acd492b1-45ef-4811-844a-90f641b47f84/export 2026-10-08T16:33:09.159741+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "acd492b1-45ef-4811-844a-90f641b47f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105110", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxe7msct3e2l", "content": "\ud83d\udea8 CVE-2026-105110 \u2014 CVSS 9.3 CRITICAL\n\nOS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105110\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T10:07:18.151219Z"} 2026-10-08T10:07:18.151219+00:00