{"vulnerability": "CVE-2026-100886", "sightings": [{"uuid": "d8793f45-a161-4541-963c-6776defb78fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117345723098081984", "content": "Seetong T8108 series (v4.6.1.4-build202604241011) hit by CRITICAL CVE-2026-100886: improper authentication in Debug Service. Exploitable remotely \u2014 public exploit code available. No patch. Restrict network access ASAP. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #CVE2026100886 #IoTSecurity #Vuln", "creation_timestamp": "2026-09-28T00:00:37.025968Z"}, {"uuid": "0e477d9b-b53e-4335-a2d3-678464e066d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100886", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwjz2sebua2b", "content": "Seetong T8108 series faces CRITICAL CVE-2026-100886: remote unauthenticated access possible due to improper authentication (v4.6.1.4). No patch \u2014 restrict device access immediately. https://radar.offseq.com/threat/cve-2026-100886-improper-authentication-in-seetong-t8108-acea634abd75f700 #OffSeq #...", "creation_timestamp": "2026-09-28T00:00:38.878702Z"}, {"uuid": "c8befd3b-b8b3-44c7-94f0-dfd61ce870f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwjz3ypojc27", "content": "\ud83d\udd34 CVE-2026-100886 - Critical (10)\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build20260424101...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100886/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T00:01:20.453069Z"}, {"uuid": "261fe31c-07eb-41ae-ac71-8ba9c6a44a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://gist.github.com/ichintu/0739db6c0846cb8d7c608bff5afb2d43", "content": "This September 27, 2026 threat intelligence briefing covers four newly disclosed vulnerabilities and a community security discussion:\n\n\u2022 **Seetong T8108 Series (CVE-2026-100886):** Critical (10.0) remote debug service improper authentication flaw. Exploit is public and the vendor remains unresponsive.\n\u2022 **Nezha \u22642.2.3 (CVE-2026-101090):** Critical (9.8) OAuth2 host header injection that reflects attacker-controlled URLs, enabling account takeover. No patch currently available.\n\u2022 **Obot \u2264v0.22.1 (4 CVEs):** Four high-to-critical (8.3\u20139.8) vulnerabilities, including unauthenticated admin access via Docker quickstart misconfiguration, OAuth/authorization bypasses, and SSRF via MCP registration. Remediation involves updating to v0.23.0 or explicitly enabling authentication.\n\u2022 **Community Discussion:** A Reddit thread explores budget-friendly (~$300) strategies for building a highly private, secure digital workspace from scratch.", "creation_timestamp": "2026-09-28T00:00:34.000000Z"}, {"uuid": "bc962866-d6c5-4926-917b-e2056a4b0ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwjzgpjkv62u", "content": "\ud83d\udea8 CVE-2026-100886 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The aff...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100886\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T00:07:18.595460Z"}, {"uuid": "14299cee-2927-4ae9-9eb8-a5363af57415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwk25kijk22u", "content": "CVE-2026-100886\nThe Seetong T8108, T8108P, T8116 and T8232 units contain a flaw in their troubleshooting (debug) service that can let an attacker skip the normal login check from anywhere on the network. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-28T00:20:04.563321Z"}, {"uuid": "3185af97-037b-411c-a85f-6decdb102bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100886", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ctyisjmolbrf7", "content": "CVE-2026-100886 - Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication\nCVE ID : CVE-2026-100886\n \n Published : Sept. 27, 2026, 11:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4...", "creation_timestamp": "2026-09-28T00:47:19.378128Z"}]}