{"vulnerability": "CVE-2026-8598", "sightings": [{"uuid": "d7558f4c-7d63-4104-8acd-8ae483a0adc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8598", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-04", "content": "", "creation_timestamp": "2026-05-19T05:00:00.000000Z"}, {"uuid": "99005c89-2683-4176-99cd-8c1565bb8247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmceloul452q", "content": "CVE-2026-8598 - Unauthenticated Export Service in ZKTeco CCTV Cameras\nCVE ID : CVE-2026-8598\n \n Published : May 20, 2026, 2:53 p.m. | 1\u00a0hour, 28\u00a0minutes ago\n \n Description : An undocumented configuration export port is accessible on some models \nof ZKTeco CCTV cameras. This po...", "creation_timestamp": "2026-05-20T16:53:41.994426Z"}, {"uuid": "f9e91a97-8d9e-4a25-89d9-0b3b62c5b004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8598", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmclqkabl52n", "content": "\ud83d\udd34 CVE-2026-8598 - Critical (9.1)\n\nAn undocumented configuration export port is accessible on some models \nof ZKTeco CCTV cameras. T...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8598/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-20T19:01:42.446287Z"}, {"uuid": "cd678dc6-63a5-47a6-8e91-2518d98a944d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85982", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv2kb6butl2p", "content": "\ud83d\udd34 CVE-2026-85982 - Critical (9)\n\nThe Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to impr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85982/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T03:00:39.577354Z"}, {"uuid": "9178d6e0-dd5b-43db-b085-7de297a7eede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85983", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv2kbffh4y2s", "content": "\ud83d\udfe0 CVE-2026-85983 - High (7.8)\n\nThe Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. Th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85983/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T03:00:46.652724Z"}, {"uuid": "d69881c8-0836-41cb-935b-b12b9f4780a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85982", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3knbaw7m2j", "content": "CVE-2026-85982 - auth0 ad/ldap connector\nThe admin screen of Auth0\u2019s AD/LDAP Connector can display data that isn\u2019t properly cleaned, so a user who can change directory information\u2014or even a low\u2011level user on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#auth0 #CVE #infosec", "creation_timestamp": "2026-09-09T12:40:04.425263Z"}, {"uuid": "bc65c39f-cf89-444b-b7a6-20f1d3c79dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwh3lobomz2r", "content": "\ud83d\udea8 CVE-2026-85984 \u2014 CVSS 9.8 CRITICAL\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85984\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T20:07:52.676531Z"}, {"uuid": "ea67f3ab-8f20-4918-a3fd-c780a17dd7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwh6pbek3j2h", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cminiOrange OTP Login, Verification and SMS Notifications\u300d\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u7ba1\u7406\u8005\u304c\u7279\u5b9a\u8a2d\u5b9a\u2026\nCVE-2026-85984 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-26T21:03:34.709701Z"}, {"uuid": "ea363b39-fa6a-44ab-b5ee-dde51a810936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhdjwsepw2o", "content": "CVE-2026-85984 - miniorange otp login, verification and sms notifications\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress can let someone sign in as an administrator without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cyberlord92 #CVE #infosec", "creation_timestamp": "2026-09-26T22:30:04.585847Z"}, {"uuid": "90425d28-2bb7-425f-b23e-1c200cabdc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhhtu7qqz2m", "content": "\ud83d\udd34 CVE-2026-85984 - Critical (9.8)\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85984/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T23:47:13.105166Z"}, {"uuid": "7af375d4-347d-4a73-bf9b-c08b3af70c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340767866919057", "content": "CVE-2026-85984: CRITICAL auth bypass in miniOrange OTP Login plugin \u22645.5.5. Attackers can log in as admin with just a username if certain options are enabled. Disable risky settings and check vendor guidance. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-verification-and-5c3999015784c4c9 #OffSeq #WordPress #CVE202685984", "creation_timestamp": "2026-09-27T03:00:26.254737Z"}, {"uuid": "5d3d75d4-2f8f-46fd-8e7a-8134fde584c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhsng7xlp2j", "content": "miniOrange OTP Login plugin (\u22645.5.5) hit by CRITICAL auth bypass (CVE-2026-85984). Admin login possible with username only if risky options are enabled. Disable those settings ASAP. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-...", "creation_timestamp": "2026-09-27T03:00:28.069730Z"}]}