{"vulnerability": "CVE-2026-1054", "sightings": [{"uuid": "fb880525-2179-4d3d-8df4-495c7d80a19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdhx2zxaa72n", "content": "", "creation_timestamp": "2026-01-28T09:20:58.445636Z"}, {"uuid": "b05ae2f6-fea6-4b13-af7f-0aa6a61c5701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10548", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnbt5gaofz22", "content": "CVE-2026-10548 - NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authentication\nCVE ID : CVE-2026-10548\n \n Published : June 2, 2026, 2:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : A securit...", "creation_timestamp": "2026-06-02T05:06:41.489240Z"}, {"uuid": "c8eff9bf-3785-4f58-a94d-5832af919ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10544", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnsk4qi4ed2p", "content": "CVE-2026-10544 - Devolutions Server PAM Provider Command Injection\nCVE ID : CVE-2026-10544\n \n Published : June 8, 2026, 7:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Improper neutralization of special elements in the built-in PAM provider password rotation templates in D...", "creation_timestamp": "2026-06-08T20:42:27.574056Z"}, {"uuid": "0ddca3cb-0faf-462d-9c91-bc64db82dbbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10540", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6hbhxtg26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10540: \u0441\u043b\u0430\u0431\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0445\u0435\u0448\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0432 Control-M/Enterprise Manager\n\n\n\nhttps://kripta.biz/posts/2363C6D9-1921-48CB-83E1-362D9E445B9D", "creation_timestamp": "2026-07-01T09:13:23.733476Z"}, {"uuid": "23bc3bdb-e95b-49a1-94f7-42d3158219d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpljddvzy32y", "content": "CVE-2026-10540 - Weak password hash protection in Control-M/Entreprise Manager\nCVE ID : CVE-2026-10540\n \n Published : July 1, 2026, 7:52 a.m. | 3\u00a0hours, 54\u00a0minutes ago\n \n Description : The Control-M/Enterprise Manager uses weak protections for stored hashes of account password...", "creation_timestamp": "2026-07-01T12:28:06.671304Z"}, {"uuid": "ba8a74a9-e17d-4d51-973c-b723455e9e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10540", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpltfzyla622", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10540: \u0441\u043b\u0430\u0431\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0445\u0435\u0448\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0432 Control-M/Enterprise Manager\n\n\n\nhttps://kripta.biz/posts/4067676F-31A2-48A9-AF3C-E90144E0BBF6", "creation_timestamp": "2026-07-01T15:28:30.988696Z"}, {"uuid": "80e25630-ce5f-4fc5-b15b-06ea6a7b23be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10546", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzlvaom62w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10546 \u0432 IBM Langflow OSS: \u0443\u0433\u0440\u043e\u0437\u0430 SSRF \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0BAEDF63-BD6B-4CA4-977B-F20D94C70F48", "creation_timestamp": "2026-07-03T07:29:48.621233Z"}, {"uuid": "fc2c9538-f4e0-4a83-9f32-c2e7d51417ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10543", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtfvudwafy24", "content": "\ud83d\udccc CVE-2026-10543 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query. https://www.cyberhub.blog/cves/CVE-2026-10543", "creation_timestamp": "2026-08-19T04:37:07.146836Z"}, {"uuid": "e813ce12-2b3d-4984-bc01-81c9ed108028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105421", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ih3qm5w2tuwch", "content": "CVE-2026-105421 - WordPress Kit (formerly ConvertKit) for WooCommerce plugin\nCVE ID : CVE-2026-105421\n \n Published : Oct. 5, 2026, 2:17 p.m. | 53\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-wo...", "creation_timestamp": "2026-10-05T15:47:31.655609Z"}, {"uuid": "fdfa59f9-980d-410b-a614-80f6acad84ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105421", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx5c22egyz2h", "content": "CVE-2026-105421: A missing authorization flaw affects the Kit (formerly ConvertKit) for WooCommerce plugin by Kit in versions through 2.2.0. No exploitation is confirmed. Update to version 2.2.1 to resolve the issue.", "creation_timestamp": "2026-10-05T16:01:52.174397Z"}, {"uuid": "29a87eb3-821b-40b5-9989-a6fd5ebff620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105484", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117391728774105147", "content": "TOTOLINK X6000R (9.4.0cu.652_B20230116) hit by CRITICAL OS command injection (CVE-2026-105484). Remote, unauthenticated attackers can gain full control. Restrict interface access & monitor /cgi-bin/cstecgi.cgi. Details: https://radar.offseq.com/threat/cve-2026-105484-os-command-injection-in-totolink-x6000r-ffaed0dcf0c90a02 #OffSeq #CVE #IoTSecurity", "creation_timestamp": "2026-10-06T03:00:28.996482Z"}, {"uuid": "6243419a-b643-4b1d-8fd9-8d074804181c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105484", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx6gtqyxzc2j", "content": "TOTOLINK X6000R (9.4.0cu.652_B20230116) faces CRITICAL OS command injection (CVE-2026-105484). Remote attackers can fully compromise devices. Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-105484-os-command-injection-in-totolink-x6000r-ffaed0dcf0c90a02 #OffSeq #CVE #IoTSe...", "creation_timestamp": "2026-10-06T03:00:31.620477Z"}, {"uuid": "08d005b3-c926-415b-99d6-6f05d2747ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cgk44ojg3qw7r", "content": "CVE-2026-105487 - yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection\nCVE ID : CVE-2026-105487\n \n Published : Oct. 6, 2026, 2:17 a.m. | 54\u00a0minutes ago\n \n Description : A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected b...", "creation_timestamp": "2026-10-06T03:54:10.925139Z"}, {"uuid": "be00e128-1747-4e22-8267-ebb19cff4bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105486", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6tjhtktvb3ji2", "content": "CVE-2026-105486 - OSSRS srs System API api.go systemAPI.Run missing authentication\nCVE ID : CVE-2026-105486\n \n Published : Oct. 6, 2026, 2:17 a.m. | 54\u00a0minutes ago\n \n Description : A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run ...", "creation_timestamp": "2026-10-06T04:00:11.052323Z"}, {"uuid": "973aa609-3505-4efc-867e-76a9e156c6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105484", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx6klbyu6s2l", "content": "\ud83d\udea8 CVE-2026-105484 \u2014 CVSS 10 CRITICAL\n\nA security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105484\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T04:07:20.433727Z"}, {"uuid": "9c16968e-2d42-43b7-93f7-68a58510437b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105484", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcp63m4vv2h", "content": "CVE-2026-105484 - x6000r\nThe X6000R router\u2019s firmware\u2011upload feature can be tricked into running arbitrary system commands when a specially crafted file name is used. This can be exploited over the network,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#x6000r #totolink #CVE #infosec", "creation_timestamp": "2026-10-07T19:40:05.092123Z"}, {"uuid": "5f17c04b-f4c9-4760-b24d-a83a8082a959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105436", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxeyg6qey423", "content": "\ud83d\udfe0 CVE-2026-105436 - High (8.8)\n\nDeserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105436/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-08T17:31:00.117785Z"}]}