{"vulnerability": "CVE-2026-1868", "sightings": [{"uuid": "cb742c72-9b8a-4b27-8c42-b3c402f7263d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3megmbgyscr2j", "content": "", "creation_timestamp": "2026-02-09T14:00:14.338735Z"}, {"uuid": "9dfd4fc7-d6e7-47c6-bbb0-42abd8fded04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mehw52uqvb2w", "content": "", "creation_timestamp": "2026-02-10T02:29:24.869775Z"}, {"uuid": "23700623-8ffa-4079-8cdd-0e36494f87f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3men2qvbvls2w", "content": "", "creation_timestamp": "2026-02-12T03:35:25.441037Z"}, {"uuid": "551268a7-325f-46e7-8ae2-55ce325ee40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3meewtunyey2i", "content": "", "creation_timestamp": "2026-02-08T22:04:10.474922Z"}, {"uuid": "3db8a867-e5ea-4c1f-82d2-98ddceff2989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mefvrszgsg2v", "content": "", "creation_timestamp": "2026-02-09T07:17:48.042539Z"}, {"uuid": "43d24351-af92-4473-a8c1-a7613be255a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1868", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mefwisv7o52v", "content": "", "creation_timestamp": "2026-02-09T07:30:39.573531Z"}, {"uuid": "b850474c-9b43-4647-b1a8-610a538a06aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1868", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116039498936890154", "content": "", "creation_timestamp": "2026-02-09T07:30:42.889342Z"}, {"uuid": "5a116775-8dbf-4ba0-bf9f-71f1c21da120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3meg364jshc25", "content": "", "creation_timestamp": "2026-02-09T08:54:18.552046Z"}, {"uuid": "b5a8b6a4-7a09-46e9-bce7-43a6792e39a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3meg367zioc25", "content": "", "creation_timestamp": "2026-02-09T08:54:19.542693Z"}, {"uuid": "581bf5f4-16cb-4216-b12b-f417d9c1b64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3meg36cnuuk25", "content": "", "creation_timestamp": "2026-02-09T08:54:20.550083Z"}, {"uuid": "1127db63-3c89-407d-bb08-825a9b4d2d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1868", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3medkykaeoi2w", "content": "", "creation_timestamp": "2026-02-08T08:59:23.133599Z"}, {"uuid": "a149fe02-d587-4402-82fe-910d213e6044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117036919208348305", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\nhttps://www.valtersit.com/cve/cve-2026-18686/", "creation_timestamp": "2026-08-04T11:07:45.606757Z"}, {"uuid": "7d131304-8b1e-4c4c-b293-ba187889060f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msauoyb6mx2r", "content": "CVE-2026-18686 - Critical command injection in GL.iNet GL-MT3000 via nas-web.add_user. Public exploit, CVSS 9.8, unpatched. Restrict access and monitor now. #CVE #GLiNet #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18686/", "creation_timestamp": "2026-08-04T11:07:42.750755Z"}, {"uuid": "704ccec2-ce5d-4fea-9b94-100ca08efcff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18682", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dy7cso26k7dk6", "content": "CVE-2026-18682 - OpenAkita File Upload API upload cross site scripting\nCVE ID : CVE-2026-18682\n \n Published : Aug. 3, 2026, 9:30 p.m. | 28\u00a0minutes ago\n \n Description : A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of th...", "creation_timestamp": "2026-08-03T22:28:17.222275Z"}, {"uuid": "9f06929b-a850-4daf-93c9-ebb1cc9203f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18684", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7mazaa2b2p", "content": "CVE-2026-18684 - gl-mt3000\nA security weakness in the GL.iNet GL-MT3000 modem allows attackers to execute unauthorized commands remotely. This could be used to gain control of the modem or disrupt its\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glmt3000 #glinet #CVE #infosec", "creation_timestamp": "2026-08-03T23:04:04.452429Z"}, {"uuid": "cee15acd-45a2-4f52-b333-864843c8abb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7p5zk45z2f", "content": "CVE-2026-18685 - gl-mt3000\nThe GL.iNet GL-MT3000 modem has a vulnerability that allows attackers to execute unauthorized commands when upgrading the modem's software. This can be done remotely, which means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glmt3000 #glinet #CVE #infosec", "creation_timestamp": "2026-08-03T23:56:05.271621Z"}, {"uuid": "bcc30692-a3eb-4e03-a514-c51959175014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7pg6a5dr2g", "content": "GL.iNet GL-MT3000 (v4.4.0 \u2013 4.4.5) hit by CRITICAL command injection (CVE-2026-18685). Remote code execution possible \u2014 no patch yet. Restrict access & monitor devices. https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #IoTSecurity #Vuln...", "creation_timestamp": "2026-08-04T00:00:39.884919Z"}, {"uuid": "7a72757c-a25d-4a39-9d4b-4d509546fef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034296046822265", "content": "CVE-2026-18685: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated RCE possible. No patch yet \u2014 restrict access & monitor for abuse. Details: https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #vuln #IoT #infosec", "creation_timestamp": "2026-08-04T00:00:37.565864Z"}, {"uuid": "2a409c84-8f90-4be2-bb33-84a84d61a092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034649197021910", "content": "CVE-2026-18686: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated code execution possible \u2014 no patch yet. Limit admin interface exposure & monitor for abuse. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE #RouterSecurity", "creation_timestamp": "2026-08-04T01:30:25.850830Z"}, {"uuid": "bc902cd8-0afc-49a2-8da3-de51e0e11b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18686", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7ugrbllc2x", "content": "CRITICAL command injection (CVE-2026-18686) hits GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote attackers can run commands \u2014 no patch yet. Restrict admin access & monitor closely. https://radar.offseq.com/threat/cve-2026-18686-command-injection-in-glinet-gl-mt3000-14534eb705079787 #OffSeq #CVE", "creation_timestamp": "2026-08-04T01:30:29.063716Z"}, {"uuid": "9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6lw44fkpwikn", "content": "CVE-2026-18685 - GL.iNet GL-MT3000 modem.so glc set_upgrade command injection\nCVE ID : CVE-2026-18685\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the ...", "creation_timestamp": "2026-08-04T01:55:20.759165Z"}, {"uuid": "9a13a0d9-cea3-4983-89a8-2e661d0d9684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cknwu5hcvw2cw", "content": "CVE-2026-18686 - GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection\nCVE ID : CVE-2026-18686\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected e...", "creation_timestamp": "2026-08-04T02:01:18.571730Z"}, {"uuid": "2b9da478-8a33-48f4-9450-ca07d93494c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18684", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117035003364698464", "content": "CVE-2026-18684 | CRITICAL command injection in GL.iNet GL-MT3000 (fw 4.4.0 \u2013 4.4.5) \ud83d\udee1\ufe0f Remote attackers can execute commands \u2014 no patch yet. Restrict access and watch for vendor updates. Info: https://radar.offseq.com/threat/cve-2026-18684-command-injection-in-glinet-gl-mt3000-4a4de87391e0f428 #OffSeq #CVE202618684 #IoTSecurity", "creation_timestamp": "2026-08-04T03:00:30.149887Z"}, {"uuid": "a6d34ca3-aa93-44e5-9b36-19a2f71089fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18684", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7zhszcls2t", "content": "CVE-2026-18684 (CRITICAL): GL.iNet GL-MT3000 routers (4.4.0 \u2013 4.4.5) allow remote command injection. No patch \u2014 limit network exposure & monitor vendor for updates. Details: https://radar.offseq.com/threat/cve-2026-18684-command-injection-in-glinet-gl-mt3000-4a4de87391e0f428 #OffSeq #CVE202618684...", "creation_timestamp": "2026-08-04T03:00:32.215177Z"}]}