{"vulnerability": "CVE-2026-62928", "sightings": [{"uuid": "f2960dd3-f7cd-4833-9b83-19d4543d2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://jvn.jp/en/jp/JVN32505330", "content": "", "creation_timestamp": "2026-09-04T04:46:23.613426Z"}, {"uuid": "39af9e2c-ab52-4459-9d84-f50f031e7e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muohk7syvb2m", "content": "CVE-2026-62928 - xing cptrans-me-x\nThe XING CPTrans-ME-X component can be tricked into executing operating system commands without requiring any login. This means an attacker could potentially take control of the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xing #CVE #infosec", "creation_timestamp": "2026-09-04T07:40:04.216597Z"}, {"uuid": "02cc9ea9-e396-4709-9c41-9f34b31fc7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muoipb4jyl2v", "content": "\ud83d\udd34 CVE-2026-62928 - Critical (9.8)\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62928/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T08:00:47.475260Z"}, {"uuid": "04f2c610-c84c-481f-b299-2a515980d318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muoj3uaetz22", "content": "\ud83d\udea8 CVE-2026-62928 \u2014 CVSS 9.3 CRITICAL\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62928\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T08:07:49.352799Z"}]}