{"vulnerability": "CVE-2026-7855", "sightings": [{"uuid": "c6f10f56-cd6a-4414-83a3-0549a10f3f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7855", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vn5y2oe2r", "content": "\ud83d\udfe0 CVE-2026-7855 - High (8.8)\n\nA vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7855/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:17:35.447635Z"}, {"uuid": "af04fab2-2436-4d9e-be8a-0ddb0dbeff6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml544oeqka2p", "content": "CVE-2026-7855 - D-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflow\nCVE ID : CVE-2026-7855\n \n Published : May 5, 2026, 7:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function...", "creation_timestamp": "2026-05-05T21:13:37.981970Z"}, {"uuid": "78f57b02-2ab9-4407-ba8b-152c37ffe5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7855", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml7iunx2nc2s", "content": "\ud83d\udccc CVE-2026-7855 - A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP... https://www.cyberhub.blog/cves/CVE-2026-7855", "creation_timestamp": "2026-05-06T20:07:07.709146Z"}, {"uuid": "eb988a29-8cfe-4cf2-ae1c-0a710a9ddac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu6ksdv5v25", "content": "CVE-2026-78555 - ransomlook\nThe RansomLook management page showed the entire secret keys in the hidden code of the page, even though only a short version was visible. Anyone who can view the page source or logs\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ransomlook #CVE #infosec", "creation_timestamp": "2026-08-24T20:50:06.539209Z"}, {"uuid": "e3461d17-27a5-441a-9393-e1d711430405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78551", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gla5e6xuvjzei", "content": "CVE-2026-78551 - RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts\nCVE ID : CVE-2026-78551\n \n Published : Aug. 24, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : RansomLook contains multiple weaknesses in its authenti...", "creation_timestamp": "2026-08-24T21:07:26.932508Z"}, {"uuid": "e8a60e76-0c43-437f-aab4-aa1b5cd54aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hsi2l5kmjjwul", "content": "CVE-2026-78555 - RansomLook API Key Disclosure Through /admin/apikeys HTML Source\nCVE ID : CVE-2026-78555\n \n Published : Aug. 24, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys admin...", "creation_timestamp": "2026-08-24T21:08:27.680048Z"}, {"uuid": "c4b829cc-d258-407f-baed-2893bc066491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78555", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtucvjah3q2e", "content": "\ud83d\udea8 CVE-2026-78555 \u2014 CVSS 9.4 CRITICAL\n\nRansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78555\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T22:07:41.151398Z"}, {"uuid": "d8cc1b8e-b017-4298-b8c7-74fdefdfd389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv5cahcny2e", "content": "CVE-2026-78555\nThe RansomLook management interface showed complete API keys hidden in the page source, allowing anyone who could view the page to copy the keys. This could let an attacker use the same permissions as the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T06:00:05.812200Z"}, {"uuid": "238e0101-9df9-47c3-bac8-b63ace70d405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7855", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:15.607185Z"}, {"uuid": "0e69e022-9a77-4985-bbf6-90be2a706440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7855", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:35.054923Z"}]}