{"vulnerability": "CVE-2026-76801", "sightings": [{"uuid": "a7a29d99-70b3-4c04-aebe-59e36c4a45f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76801", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv2jipzoo52g", "content": "CVE-2026-76801 affects the FireBox WordPress plugin by fireplugins, versions through 3.1.10. Authenticated users with author-level access or above can execute remote code on the server. No exploitation is confirmed. Update the plugin to the latest available version.", "creation_timestamp": "2026-09-09T02:46:58.007409Z"}, {"uuid": "fb975034-497b-4e23-9c47-d8c46baa7995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76801", "type": "seen", "source": "https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355", "content": "On September 9, 2026, Microsoft released a record-breaking Patch Tuesday update addressing 972\u2013974 vulnerabilities, including 113 critical flaws and two actively exploited zero-days across Windows, Office, and SQL. The digest also highlights several high-severity CVEs: a CVSS 10.0 pre-auth RCE in N-able N-central (CVE-2026-86218) added to CISA\u2019s KEV catalog with a federal patch deadline of Sept 11; an authenticated RCE in the WordPress FireBox plugin (CVE-2026-76801); and a high-severity out-of-bounds write in Android\u2019s Keymaster trustlet (CVE-2026-21085). Finally, the update covers emerging AI cybersecurity trends, featuring Alovia\u2014a new security layer for AI-driven platforms\u2014and ongoing industry discussions on the escalating AI arms race and agentic AI applications for both attackers and defenders.", "creation_timestamp": "2026-09-09T08:11:50.449929Z"}]}