{"vulnerability": "CVE-2026-1495", "sightings": [{"uuid": "bb2a52fc-38e4-4caa-89c4-544f82e747aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1495", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-04", "content": "", "creation_timestamp": "2026-02-10T11:00:00.000000Z"}, {"uuid": "f9410a47-1b61-49f7-bbe2-bb35e64d07ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14950", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117126859166464287", "content": "#OT #Advisory VDE-2026-078Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities\nFrauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953\nhttps://certvde.com/en/advisories/vde-2026-078/\n#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json", "creation_timestamp": "2026-08-20T08:20:38.086069Z"}, {"uuid": "c10fe97f-1aa2-47a0-b45d-00848f2a0b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14951", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117126859166464287", "content": "#OT #Advisory VDE-2026-078Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities\nFrauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953\nhttps://certvde.com/en/advisories/vde-2026-078/\n#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json", "creation_timestamp": "2026-08-20T08:20:38.198335Z"}, {"uuid": "726e906e-68b5-4b3a-b04b-70ff8488a84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14952", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117126859166464287", "content": "#OT #Advisory VDE-2026-078Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities\nFrauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953\nhttps://certvde.com/en/advisories/vde-2026-078/\n#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json", "creation_timestamp": "2026-08-20T08:20:38.256668Z"}, {"uuid": "9b65d23e-5c98-4418-8f67-e7804990b61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14953", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117126859166464287", "content": "#OT #Advisory VDE-2026-078Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities\nFrauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953\nhttps://certvde.com/en/advisories/vde-2026-078/\n#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json", "creation_timestamp": "2026-08-20T08:20:38.463440Z"}, {"uuid": "2c91d1fd-2d1e-4052-afa6-9d6f04141fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14950", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtiyretrpm25", "content": "\ud83d\udea8 CVE-2026-14950 \u2014 CVSS 9.2 CRITICAL\n\nAn unauthenticated remote attacker in possession of a valid session identifier is able to continue using th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-14950\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T10:07:07.714956Z"}, {"uuid": "65ca95da-2c2b-4ede-9ca2-0c11776f6249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14952", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aznwvtinynf45", "content": "CVE-2026-14952 - Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files with sensitive information for download without requiring authentication\nCVE ID : CVE-2026-14952\n \n Published : Aug. 20, 2026, 9:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : An unauthenti...", "creation_timestamp": "2026-08-20T10:42:00.100056Z"}, {"uuid": "15e26648-06de-4112-9c19-593e3b2718e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14951", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7jy62svthsusw", "content": "CVE-2026-14951 - Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Cross-Site Request Forgery due to missing CSFR protection headers\nCVE ID : CVE-2026-14951\n \n Published : Aug. 20, 2026, 9:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : An low privileged rem...", "creation_timestamp": "2026-08-20T10:47:59.562730Z"}, {"uuid": "8386dff6-524d-44fc-89bc-d5edc8f7d041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14950", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7rdhipwwi52kt", "content": "CVE-2026-14950 - Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insufficient Session Expiration due to flawed session expiration logic\nCVE ID : CVE-2026-14950\n \n Published : Aug. 20, 2026, 9:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : An unauthenticat...", "creation_timestamp": "2026-08-20T10:53:59.681793Z"}, {"uuid": "bfe99dd2-a1a9-4016-bd8d-347d62d48efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14950", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtjpjytpsc2q", "content": "Frauscher FDS102 vulnerabilities include CVE-2026-14950 (CVSS 9.8), a session flaw enabling unauthorized continued access. Update to v2.14.0.\n\n#Frauscher #FDS102 #ICS #RailwaySecurity #CVE #OTSecurity", "creation_timestamp": "2026-08-20T16:54:37.202509Z"}, {"uuid": "09e44c23-94ae-4845-a322-3422d5e68064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14956", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqspwyuihy2i", "content": "CVE-2026-14956 - Bricksforge\nCVE ID : CVE-2026-14956\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due to improper vali...", "creation_timestamp": "2026-07-17T02:40:15.171605Z"}, {"uuid": "e4274b59-87af-46a4-8541-4d531bd0b3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14956", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqsqbg6u4i25", "content": "CVE-2026-14956 - bricksforge\nA security issue in Bricksforge plugin for WordPress allows attackers to create new admin accounts without a password. This can happen if a public form is configured to allow user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bricksforge #CVE #infosec", "creation_timestamp": "2026-07-17T02:46:04.725771Z"}, {"uuid": "1b41f8c4-6a0b-4e6d-a332-8240c478d4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14957", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116991002509583973", "content": "Attention, elevated activities detected targeting libreswan (CVE-2026-14957) https://vuldb.com/vuln/383328/cti", "creation_timestamp": "2026-07-27T08:30:35.022966Z"}, {"uuid": "bfb19a96-93e9-4fe3-b3ef-06e1c6eaa55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqk2jwuqs2i", "content": "CVE-2026-14959 - OS Command Injection in IBM Aspera Faspex\nCVE ID : CVE-2026-14959\n \n Published : July 28, 2026, 9:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code...", "creation_timestamp": "2026-07-28T23:14:43.559101Z"}, {"uuid": "6ec79305-5705-43bc-b140-ec00b8cf0315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14958", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrql6dwnqr2i", "content": "CVE-2026-14958 - OS command injection in IBM Aspera Faspex\nCVE ID : CVE-2026-14958\n \n Published : July 28, 2026, 9:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code...", "creation_timestamp": "2026-07-28T23:34:48.700965Z"}, {"uuid": "34618d1c-85d3-4eec-9118-2c9455f4a696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14959", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrqlsmo2et2i", "content": "CVE-2026-14959 - aspera faspex 5\nA vulnerability in IBM Aspera Faspex allows an attacker to execute system commands on the server, potentially giving them control over the system. This could allow the attacker to delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-07-28T23:46:05.142291Z"}, {"uuid": "877d20e7-2a1c-4757-bb9c-78a398698fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14958", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrqlw6ttae23", "content": "CVE-2026-14958 - aspera faspex 5\nIBM Aspera Faspex, a file sharing and collaboration tool, contains a security flaw that could allow an authorized user to execute unauthorized system commands. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-07-28T23:48:05.076516Z"}, {"uuid": "2216b79f-7906-4403-9229-d167b12db722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14957", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muj5qf4wef2q", "content": "\ud83d\udfe0 CVE-2026-14957 - High (7.5)\n\nIn FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-14957/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T05:01:15.955132Z"}]}