{"vulnerability": "CVE-2026-1048", "sightings": [{"uuid": "e3e06de8-3a63-4a19-95b4-f3b2a4d42f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcnfblrm6g2h", "content": "", "creation_timestamp": "2026-01-17T19:53:18.023502Z"}, {"uuid": "9166aaa5-2d0d-4572-9cbd-138d4863e111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104845", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvrmekinm24", "content": "\ud83d\udfe0 CVE-2026-104845 - High (7.5)\n\nSeroval facilitates JS value stringification, including complex structures beyond JSON.stringify ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104845/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T16:19:16.373321Z"}, {"uuid": "370f3045-88f0-44e8-b1e6-19965d716ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104846", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvrmljs5u2b", "content": "\ud83d\udd34 CVE-2026-104846 - Critical (9.8)\n\nSeroval facilitates JS value stringification, including complex structures beyond JSON.stringify ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104846/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T16:19:23.246028Z"}, {"uuid": "f1e9007f-cb7f-40cf-b073-8e5cbe39453d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104851", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvuy53bpy24", "content": "\ud83d\udfe0 CVE-2026-104851 - High (8.8)\n\nfsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104851/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T17:19:32.482846Z"}, {"uuid": "52f04ea6-3d2e-424f-89f6-38cccc1dc350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2i33t7gzrilod", "content": "CVE-2026-104849 - Tinypool: Prototype Pollution Gadget to RCE in run() options\nCVE ID : CVE-2026-104849\n \n Published : Oct. 2, 2026, 4:17 p.m. | 44\u00a0minutes ago\n \n Description : Tinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads file...", "creation_timestamp": "2026-10-02T17:49:12.413190Z"}, {"uuid": "f7af9f77-7843-4713-8749-b8135750d3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104851", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6jxlt7b7hpwb5", "content": "CVE-2026-104851 - fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution\nCVE ID : CVE-2026-104851\n \n Published : Oct. 2, 2026, 4:36 p.m. | 25\u00a0minutes ago\n \n Description : fsspec is a specification and Python implementation framework for fi...", "creation_timestamp": "2026-10-02T17:55:12.364905Z"}, {"uuid": "9c824947-9cd0-4100-a8dd-2e7713f0a261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/avgovzmn4ifvd", "content": "CVE-2026-104853 - Nx: Path traversal in nx migrate package-migrations extraction\nCVE ID : CVE-2026-104853\n \n Published : Oct. 2, 2026, 4:52 p.m. | 9\u00a0minutes ago\n \n Description : Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23....", "creation_timestamp": "2026-10-02T17:57:12.407253Z"}, {"uuid": "1ad36a20-3e92-472f-862f-94846a22db23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104846", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwvxo4e4jl22", "content": "\ud83d\udea8 CVE-2026-104846 \u2014 CVSS 9.8 CRITICAL\n\nSeroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabiliti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104846\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T18:07:35.661854Z"}, {"uuid": "045ce99c-e5f7-4765-8710-10e558b4efae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104848", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwvxoem7lf2x", "content": "\ud83d\udea8 CVE-2026-104848 \u2014 CVSS 9.5 CRITICAL\n\nTinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.1, Tinypool constructs Thread...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104848\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T18:07:44.402697Z"}, {"uuid": "c7c01514-1cdf-428e-b4d9-2651fdd54266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104849", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwvxonlqux2w", "content": "\ud83d\udea8 CVE-2026-104849 \u2014 CVSS 9.5 CRITICAL\n\nTinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads filename fr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104849\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T18:07:53.663005Z"}, {"uuid": "72e966f5-617d-449e-9a3a-e91b78c7d03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104861", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvyyqd6gc24", "content": "\ud83d\udfe0 CVE-2026-104861 - High (7.5)\n\nprobe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/p...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104861/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T18:31:27.051916Z"}, {"uuid": "29379521-b105-479a-b5c9-537f3ef2dcb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104848", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwvzhpba762b", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-104848: Tinypool is a minimal Node.js worker thread pool implementation\nCVSS 9.5\nhttps://beta.vulnsea.com/cve/CVE-2026-104848\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-10-02T18:39:48.429159Z"}, {"uuid": "fefa4adf-8709-4226-90bd-a7d4c86a4406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104826", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104102", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-104826\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KiwKNR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-02 16:14:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-104826: path traversal to RCE in DropzoneFileExplorer chunked upload handler\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-02T17:05:48.000000Z"}, {"uuid": "017eb5c7-39c3-464a-a729-01b48b55d632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/77ex5acvywk6i", "content": "CVE-2026-104874 - Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction\nCVE ID : CVE-2026-104874\n \n Published : Oct. 2, 2026, 8:21 p.m. | 40\u00a0minutes ago\n \n Description : Multidict is an implementation of a multidict data structure. From 6.7.0 unti...", "creation_timestamp": "2026-10-02T21:28:14.922620Z"}, {"uuid": "e9f64d19-4a87-4fa3-b17a-cbfad1acccf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104861", "type": "seen", "source": "https://gist.github.com/alon710/97cc08d3ade1a2a102e89c6da7267a8f", "content": "# CVE-2026-104861: CVE-2026-104861: Quadratic-time Regular Expression Denial of Service in probe-image-size SVG Parser\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-10-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-104861\n\n## Summary\nAn uncontrolled resource consumption vulnerability (CWE-1333 / CWE-400) exists in probe-image-size versions prior to 7.4.0. The SVG parser utilizes an unanchored, inefficient regular expression to find the SVG root tag, leading to catastrophic backtracking when handling malformed payloads. This blocks the single-threaded Node.js event loop, resulting in a complete denial of service.\n\n## TL;DR\nUnauthenticated remote attackers can cause complete CPU exhaustion and Denial of Service in Node.js applications using probe-image-size by supplying malformed SVG streams with unclosed opening brackets.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1333, CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity Score**: 7.5 (High)\n- **EPSS Score**: 0.00043\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: Proof of Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- probe-image-size (npm package)\n- **probe-image-size**: < 7.4.0 (Fixed in: `7.4.0`)\n\n## Mitigation\n\n- Upgrade probe-image-size to version 7.4.0 or later.\n- Deploy WAF rules to reject XML/SVG requests larger than 10 KB.\n- Implement request timeouts on image download endpoints to prevent streaming connection hanging.\n\n**Remediation Steps:**\n1. Identify applications utilizing the probe-image-size package.\n2. Update package.json dependencies to specify version ^7.4.0.\n3. Run npm update probe-image-size or yarn upgrade probe-image-size to apply the patch.\n4. Deploy the updated application to production and monitor CPU usage patterns.\n\n## References\n\n- [NVD Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2026-104861)\n- [CVE.org Authoritative Record](https://www.cve.org/CVERecord?id=CVE-2026-104861)\n- [GitHub Security Advisory](https://github.com/nodeca/probe-image-size/security/advisories/GHSA-gjj5-9665-rwrc)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-104861) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-03T00:30:30.000000Z"}, {"uuid": "6a044792-8310-490e-9f5f-f3d4be26b1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104861", "type": "published-proof-of-concept", "source": "https://github.com/nodeca/probe-image-size/security/advisories/GHSA-gjj5-9665-rwrc", "content": "", "creation_timestamp": "2026-08-15T06:16:01.000000Z"}, {"uuid": "172c4aed-61bc-4b53-a97e-c8f809d0bb29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104816", "type": "seen", "source": "https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mwx7adwdpml2", "content": "Misskey\u306e\u904e\u53bb\u306e\u8106\u5f31\u6027\u3001CVE ID\u3092\u7533\u8acb\u3057\u3066\u305f\u306e\u306b\u5168\u7136\u97f3\u6c99\u6c70\u306a\u304b\u3063\u305f\u3093\u3067\u3059\u304c\u3001\uff12\u30f6\u6708\u9045\u308c\u3067\u63a1\u756a\u3055\u308c\u305f\u3063\u307d\u3044\uff082026.7.0\u3067\u4fee\u6b63\u3055\u308c\u305f\u5206\uff09\n\nCVE-2026-103937\nhttps://github.com/misskey-dev/misskey/security/advisories/GHSA-m9xp-2fvm-pfmq\n\nCVE-2026-104816\nhttps://github.com/misskey-dev/misskey/security/advisories/GHSA-p73x-6qrq-34jc\n\nCVE-2026-104817 [\u2026]", "creation_timestamp": "2026-10-03T05:56:10.909938Z"}, {"uuid": "8006476f-2a13-455a-b399-a37ed8fd2a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104817", "type": "seen", "source": "https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mwx7adwdpml2", "content": "Misskey\u306e\u904e\u53bb\u306e\u8106\u5f31\u6027\u3001CVE ID\u3092\u7533\u8acb\u3057\u3066\u305f\u306e\u306b\u5168\u7136\u97f3\u6c99\u6c70\u306a\u304b\u3063\u305f\u3093\u3067\u3059\u304c\u3001\uff12\u30f6\u6708\u9045\u308c\u3067\u63a1\u756a\u3055\u308c\u305f\u3063\u307d\u3044\uff082026.7.0\u3067\u4fee\u6b63\u3055\u308c\u305f\u5206\uff09\n\nCVE-2026-103937\nhttps://github.com/misskey-dev/misskey/security/advisories/GHSA-m9xp-2fvm-pfmq\n\nCVE-2026-104816\nhttps://github.com/misskey-dev/misskey/security/advisories/GHSA-p73x-6qrq-34jc\n\nCVE-2026-104817 [\u2026]", "creation_timestamp": "2026-10-03T05:56:10.959060Z"}, {"uuid": "86c3560a-ffa0-469f-be5e-572db38b83d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104855", "type": "seen", "source": "https://gist.github.com/alon710/a0ca06f289edb2a99a12936f2ba8cda3", "content": "# CVE-2026-104855: CVE-2026-104855: Sandbox Escape via Reentrant State Desynchronization in Wasmtime Bulk Memory Operations\n\n> **CVSS Score:** 2.0\n> **Published:** 2026-10-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-104855\n\n## Summary\nCVE-2026-104855 is a critical vulnerability involving a race condition and reentrant state desynchronization within Wasmtime, a standalone WebAssembly runtime. Due to incremental mid-operation preemption points in compiler-generated loops for bulk memory and table operations, a host-defined epoch or fuel deadline callback could mutate the WebAssembly Store. Upon resuming, the virtual machine utilized stale cached pointers, resulting in use-after-free, out-of-bounds writes, and sandbox escape.\n\n## TL;DR\nA state desynchronization flaw in Wasmtime's bulk operations allowed host reentrancy during loop preemption checks. Under specific configurations, a callback could modify the linear memory layout or garbage-collection heap, causing the resumed loop to perform use-after-free operations or out-of-bounds writes, potentially leading to WebAssembly sandbox escape.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization)\n- **Attack Vector**: Network / Local\n- **CVSS Score**: 2.0 (Low Base / Critical Downstream Impact)\n- **EPSS Score**: Not Listed\n- **Impact**: Sandbox Escape, Memory Corruption (Use-After-Free, Out-of-Bounds Write)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Wasmtime standalone WebAssembly runtime\n- **Wasmtime**: >= 46.0.0, < 46.0.2 (Fixed in: `46.0.2`)\n- **Wasmtime**: >= 47.0.0, < 47.0.3 (Fixed in: `47.0.3`)\n\n## Mitigation\n\n- Upgrade to Wasmtime 46.0.2, 47.0.3, or later versions.\n- Avoid mutating critical Store resources (such as growing memory or tables) within user-defined host epoch or fuel deadline callbacks.\n- Implement resource limiters to prevent guest modules from performing excessively large, non-preemptible bulk memory copies that could lead to CPU thread starvation.\n\n**Remediation Steps:**\n1. Update cargo.toml dependencies for bytecodealliance/wasmtime to at least 46.0.2 or 47.0.3.\n2. Run `cargo update` in the project root to fetch the updated crate version.\n3. Audit all registered epoch_deadline_callback and set_fuel callback implementations for potential reentrant mutations to the store state.\n\n## References\n\n- [GHSA-2hw9-mc66-jc2q](https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-2hw9-mc66-jc2q)\n- [CVE-2026-104855 Record](https://www.cve.org/CVERecord?id=CVE-2026-104855)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-104855) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-03T10:30:31.000000Z"}, {"uuid": "4ea6a416-50c0-4631-be22-86ed821172d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ab2tdfbh2t453", "content": "CVE-2026-104809 - Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution\nCVE ID : CVE-2026-104809\n \n Published : Oct. 5, 2026, 8:32 a.m. | 55\u00a0minutes ago\n \n Description : DigitalCanion has discovered a vulnerability that allows an attacker to caus...", "creation_timestamp": "2026-10-05T09:43:09.257933Z"}, {"uuid": "e002a2e9-7daa-4757-a817-f4f7e4847dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fcbn5eei6qsq4", "content": "CVE-2026-104810 - Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability\nCVE ID : CVE-2026-104810\n \n Published : Oct. 5, 2026, 8:33 a.m. | 54\u00a0minutes ago\n \n Description : This vulnerability allows remote attackers to delete sensitive files on vulner...", "creation_timestamp": "2026-10-05T09:49:09.221194Z"}, {"uuid": "a472de17-eae3-421d-8055-b562ae9e029e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cdl7xnve6m2n6", "content": "CVE-2026-104811 - Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution\nCVE ID : CVE-2026-104811\n \n Published : Oct. 5, 2026, 8:34 a.m. | 53\u00a0minutes ago\n \n Description : DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arb...", "creation_timestamp": "2026-10-05T09:55:10.005832Z"}, {"uuid": "f7036427-8150-4811-ac12-5aba62a20afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104826", "type": "seen", "source": "Telegram/JFeIVPxQVEolL5ptZlHbPI1XtNj442M5_4nUR95B3vSwQuk", "content": "", "creation_timestamp": "2026-10-02T19:00:16.000000Z"}, {"uuid": "0a1e6774-5d60-4edc-8125-53d1e9cd7a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104826", "type": "seen", "source": "Telegram/tPIIW1-bVGMQRqIAHywC_LQgF4V6Z18VSekeJ8F-XbxWxJY", "content": "", "creation_timestamp": "2026-10-03T03:00:05.000000Z"}, {"uuid": "7072f621-1823-440d-ae7d-e9d6b72649a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104891", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx5dp5yudb2b", "content": "\ud83d\udfe0 CVE-2026-104891 - High (7.5)\n\nmppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104891/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T16:31:35.194784Z"}, {"uuid": "fc4f177d-50e3-460d-bbe2-25fa336fa25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104826", "type": "published-proof-of-concept", "source": "Telegram/tPIIW1-bVGMQRqIAHywC_LQgF4V6Z18VSekeJ8F-XbxWxJY", "content": "", "creation_timestamp": "2026-10-03T03:00:05.000000Z"}, {"uuid": "0293e69a-c635-48c1-9dcf-032741cb562c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104891", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-104891", "content": "", "creation_timestamp": "2026-10-05T07:17:06.000000Z"}, {"uuid": "22060ef4-3bc1-4f08-80ea-cb6d04ecc3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104890", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-104890", "content": "", "creation_timestamp": "2026-10-05T07:17:06.000000Z"}, {"uuid": "02ce1a8c-c942-49fe-b995-8b0333d7a0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104826", "type": "published-proof-of-concept", "source": "Telegram/JFeIVPxQVEolL5ptZlHbPI1XtNj442M5_4nUR95B3vSwQuk", "content": "", "creation_timestamp": "2026-10-02T19:00:16.000000Z"}, {"uuid": "a589aa23-b047-4a6d-8ffc-ea0332804773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/diuqsoxudhc6s", "content": "CVE-2026-104852 - GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`\nCVE ID : CVE-2026-104852\n \n Published : Oct. 5, 2026, 10:56 p.m. | 14\u00a0minutes ago\n \n Description : GraphQL Tools provides utilities for building, stitching, and mocking Gra...", "creation_timestamp": "2026-10-05T23:58:00.736000Z"}, {"uuid": "58f9cc22-27e3-46b2-aff4-81edddd45c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104874", "type": "published-proof-of-concept", "source": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925", "content": "", "creation_timestamp": "2026-09-21T09:04:06.000000Z"}, {"uuid": "484cab72-870e-4bb5-9b2e-c1918faf36fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104851", "type": "published-proof-of-concept", "source": "https://github.com/fsspec/filesystem_spec/security/advisories/GHSA-27vj-qcqg-25rc", "content": "", "creation_timestamp": "2026-09-01T20:21:20.000000Z"}, {"uuid": "f51ed122-f054-46ac-8f2c-c27e10664e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104848", "type": "published-proof-of-concept", "source": "https://github.com/tinylibs/tinypool/security/advisories/GHSA-5gmw-xhrv-c9v3", "content": "", "creation_timestamp": "2026-08-30T05:32:48.000000Z"}, {"uuid": "15c58856-1453-4071-a378-f6560a0bc537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104849", "type": "published-proof-of-concept", "source": "https://github.com/tinylibs/tinypool/security/advisories/GHSA-85c8-ppgw-ccpr", "content": "", "creation_timestamp": "2026-08-30T05:32:37.000000Z"}, {"uuid": "4d7fe213-0375-4f4c-94fc-00a6f5d975b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104846", "type": "seen", "source": "https://bsky.app/profile/standup.thecompound.tech/post/3mx66szskd324", "content": "CVE-2026-104846 affects plugin-capable Seroval releases from 0.12.0 through 1.6.0: fromJSON() can invoke plugin-produced callables when it assimilates a deserialized Promise thenable, bypassing the fix in 1.5.3. #dev", "creation_timestamp": "2026-10-06T00:36:55.499586Z"}, {"uuid": "39c10288-a4a2-4441-ae4f-15004c08b7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104844", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mx7f233lnf2l", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-104844 impacts postcss-selector-parser in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/730\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-10-06T12:00:53.271224Z"}, {"uuid": "0bc87298-88cb-4bd5-b0ec-81dfe77a766e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxa3qknlun2g", "content": "\ud83d\udfe0 CVE-2026-104850 - High (7.5)\n\nMCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-06T18:47:11.073855Z"}, {"uuid": "f845994d-7f4a-4497-9dbc-ebd75c793ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104848", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxc4pxx5l72r", "content": "CVE-2026-104848 - tinypool\nThe tinypool library used to manage Node.js worker threads can be tricked into loading any script an attacker supplies. By adding malicious values to the default object\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tinypool #tinylibs #npm #CVE #infosec", "creation_timestamp": "2026-10-07T14:10:04.250842Z"}, {"uuid": "940c3a80-efa0-421f-98eb-c51d21d4860b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104898", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117414562095285811", "content": "CVE-2026-104898 Online Scheduling and Appointment Booking System <= 28.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via 'id' and 'wp_user_id' Parameters via Query String / JSON Body The Online Scheduling and Appointment Booking System \u2013 Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wp_user_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the WordPress account binding of any Bookly staff record, including those owned by administrators, effectively hijacking a higher-privileged staff member's account association and escalating privileges. Exploitation requires the attacking user to be linked to at least one Bookly staff record, which occurs by default whenever an admin enables the bookly_gen_allow_staff_edit_profile option (active on fresh installs) and links a WordPress user to a staff entry.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104898https://www.wordfence.com/threat-intel/vulnerabilities/id/1c3cfaa5-00e3-41b6-8f38-cebdd5dec180?source=cvehttps://plugins.trac.wordpress.org/browser/bookly-responsive-appointment-booking-tool/tags/28.4/backend/components/dialogs/staff/edit/Ajax.php#L111https://plugins.trac.wordpress.org/browser/bookly-responsive-appointment-booking-tool/tags/28.4/backend/components/dialogs/staff/edit/Ajax.php#L93https://plugins.trac.wordpress.org/browser/bookly-responsive-appointment-booking-tool/tags/28.4/lib/base/Request.php#L49https://plugins.trac.wordpress.org/browser/bookly-responsive-appointment-booking-tool/tags/28.4/lib/base/Entity.php#L172https://plugins.trac.wordpress.org/browser/bookly-responsive-appointment-booking-tool/tags/28.4/lib/base/Entity.php#L247https://plugins.trac.wordpress.org/browser/bookly-responsive-appointment-booking-tool/tags/28.4/backend/components/dialogs/staff/edit/Ajax.php#L364https://plugins.trac.wordpress.org/changeset?reponame=&new=3730881%40bookly-responsive-appointment-booking-tool%2Ftags%2F28.5&old=3722721%40bookly-responsive-appointment-booking-tool%2Ftags%2F28.4#wordpress #ladela #OnlineSchedulingandAppointmentBookingSystem\u2013Bookly#CVE_2026_104898#bot", "creation_timestamp": "2026-10-10T03:47:16.466717Z"}, {"uuid": "07e0b563-9036-435f-a98d-1f0c379271d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104899", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415028195417315", "content": "CVE-2026-104899 GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter The GeoDirectory \u2013 WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'design_type' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. The required nonce is trivially obtainable by any anonymous visitor, as the geodir_basic_nonce value is localized to every public frontend page via the geodir_params script object, meaning no authentication, user interaction, or specific site content is required to exploit this vulnerability.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104899https://www.wordfence.com/threat-intel/vulnerabilities/id/ac817587-1403-46e2-84bf-be5fcadc5425?source=cvehttps://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.187/includes/widgets/class-geodir-widget-tags.php#L1064https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.187/includes/class-geodir-ajax.php#L709https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.187/includes/template-functions.php#L143https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.187/includes/template-functions.php#L199https://github.com/AyeCode/geodirectory/commit/2357d640dad7973988742a6706b3a857b6b05d52https://plugins.trac.wordpress.org/changeset/3725126/geodirectory/trunk/includes/widgets/class-geodir-widget-tags.php#wordpress #paoltaia #GeoDirectory\u2013WPBusinessDirectoryPluginandClassifiedListingsDirectory#CVE_2026_104899#bot", "creation_timestamp": "2026-10-10T05:45:48.538494Z"}, {"uuid": "ae0f2212-af51-486f-8afb-39e3857554d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104801", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415337554333338", "content": "CVE-2026-104801 PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter The PPOM \u2013 Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The relocated file is moved byte-identically into the publicly accessible wp-content/uploads/ppom_files/confirmed/ directory, meaning the attack also results in arbitrary file read for any web-readable file on the server.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104801https://www.wordfence.com/threat-intel/vulnerabilities/id/650b510f-dc13-4ba4-af68-187f516b3051?source=cvehttps://plugins.trac.wordpress.org/browser/woocommerce-product-addon/tags/34.0.10/src/WooCommerce/Order/OrderHandler.php#L287https://plugins.trac.wordpress.org/browser/woocommerce-product-addon/tags/34.0.10/src/WooCommerce/Cart/CartHandler.php#L369https://plugins.trac.wordpress.org/browser/woocommerce-product-addon/tags/34.0.10/src/Support/Helpers.php#L224https://plugins.trac.wordpress.org/browser/woocommerce-product-addon/tags/34.0.10/src/Files/Handler.php#L738https://plugins.trac.wordpress.org/changeset/3733313/woocommerce-product-addon/trunk/src/WooCommerce/Order/OrderHandler.php#wordpress #themeisle #PPOM\u2013ProductAddons&CustomFieldsforWooCommerce#CVE_2026_104801#bot", "creation_timestamp": "2026-10-10T07:04:29.048025Z"}, {"uuid": "3ec51470-b7e8-4bf1-b9be-0f2ea2648c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104801", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxiyvcyos52w", "content": "CVE-2026-104801\nThe PPOM Product Addons & Custom Fields plugin for WooCommerce on WordPress allows unauthenticated users to delete files on the server because it does not properly check file paths. This could let attackers\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-10T07:50:06.177761Z"}, {"uuid": "292494cb-8c60-410f-8a5c-115594d36aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/55rwsvxpbjckd", "content": "CVE-2026-104801 - PPOM ][n][org]' Parameter\nCVE ID : CVE-2026-104801\n \n Published : Oct. 10, 2026, 6:40 a.m. | 49\u00a0minutes ago\n \n Description : The PPOM \u2013 Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to ins...", "creation_timestamp": "2026-10-10T07:55:20.817506Z"}, {"uuid": "45275a90-a6d0-4c43-a7a5-5f8308dbeb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104803", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415549890591555", "content": "CVE-2026-104803 WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters of the social-login callback handler registered on the `init` hook. The vulnerability exists because the `login` function's social-login flow performs no nonce validation, no OAuth state verification, and no per-visitor namespace isolation in the session store, allowing an unauthenticated attacker to issue a crafted GET request that writes an attacker-named, attacker-valued entry into the global session namespace (bypassing the per-visitor prefix by prepending an underscore), then issue a second GET request triggering `weapp_new_user()` to read that forged entry and resolve the attacker-supplied `openid` value to a bound WordPress account before `wp_set_auth_cookie()` establishes a fully authenticated session. This makes it possible for unauthenticated attackers to log in as any WordPress user \u2014 including administrators \u2014 whose bound social provider identifier (openid/unionid) is known or discoverable. Successful exploitation requires that the target site has at least one social provider configured (which activates the vulnerable handler) and that the attacker knows or can enumerate the victim account's bound openid or unionid.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104803https://www.wordfence.com/threat-intel/vulnerabilities/id/3dee7f76-bd66-4e54-8ef6-bbf581ebcc11?source=cvehttps://plugins.trac.wordpress.org/browser/wpcom-member/tags/1.7.27/includes/social-login.php#L1235https://plugins.trac.wordpress.org/browser/wpcom-member/tags/1.7.27/includes/social-login.php#L91https://plugins.trac.wordpress.org/browser/wpcom-member/tags/1.7.27/includes/social-login.php#L674https://plugins.trac.wordpress.org/browser/wpcom-member/tags/1.7.27/includes/class-sesstion.php#L13https://plugins.trac.wordpress.org/browser/wpcom-member/trunk/includes/social-login.php#wordpress #whyun #WPCOMMember#CVE_2026_104803#bot", "creation_timestamp": "2026-10-10T07:58:29.071573Z"}, {"uuid": "37658461-9dd4-4d42-bae9-0ff1bc94e27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104801", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxizubuxcp2o", "content": "\ud83d\udea8 CVE-2026-104801 \u2014 CVSS 9.1 CRITICAL\n\nThe PPOM \u2013 Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary f...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104801\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T08:07:25.346808Z"}, {"uuid": "e818bbd1-93b1-4ed3-8ed4-a4fcff54d17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104803", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj4shy4te2l", "content": "CVE-2026-104803\nThe WPCOM Member add\u2011on for WordPress (versions up to 1.7.27) can be tricked into creating a logged\u2011in session without a password. An attacker who knows a visitor\u2019s social\u2011login identifier can send specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-10T09:00:05.887619Z"}, {"uuid": "39e5d1f0-12c2-433e-bf15-66acab97998a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104803", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117415793431162883", "content": "WPCOM Member plugin (\u22641.7.27) suffers CRITICAL auth bypass (CVE-2026-104803, CVSS 9.8) \ud83d\udee1\ufe0f. Attackers can impersonate any WordPress user via social-login flaw. Disable social login & check vendor for fixes. https://radar.offseq.com/threat/cve-2026-104803-cwe-287-improper-authentication-in-whyun-wpcom-member-4f47db1288fd1984 #OffSeq #WordPress #Infosec #CVE2026104803", "creation_timestamp": "2026-10-10T09:00:25.330719Z"}, {"uuid": "9c8e2e61-0f2d-4be7-97a0-e9996ee52bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104803", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxj4t3xvni2p", "content": "CRITICAL: whyun WPCOM Member WordPress plugin (\u22641.7.27) allows auth bypass via social login flaw. Attackers can access any account. Disable social login & monitor for patches. https://radar.offseq.com/threat/cve-2026-104803-cwe-287-improper-authentication-in-whyun-wpcom-member-4f47db1288fd1984 #O...", "creation_timestamp": "2026-10-10T09:00:28.176684Z"}, {"uuid": "5f416c1b-b952-415c-9aa1-9f7ba0e76942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104803", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjakxteaq2n", "content": "\ud83d\udea8 CVE-2026-104803 \u2014 CVSS 9.8 CRITICAL\n\nThe WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and inc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104803\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:07:29.067497Z"}]}