{"vulnerability": "CVE-2026-87898", "sightings": [{"uuid": "bce4c904-4dfa-40b8-95ff-08807f1a54c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87898", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qwp63g724", "content": "\ud83d\udea8 CVE-2026-87898 \u2014 CVSS 9.4 CRITICAL\n\nOS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privile...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87898\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:08:33.378512Z"}, {"uuid": "6d937945-42b2-4edc-a8fb-d1e46113fd8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87898", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa33e5nrk24", "content": "CVE-2026-87898 - plesk extension \"site import\"\nThe Site Import add\u2011on for Plesk can be used by someone who has an account to run any commands on the server, giving them the same power as the system\u2019s administrator.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webpros #CVE #infosec", "creation_timestamp": "2026-09-24T01:10:07.283083Z"}, {"uuid": "ede5e1e4-3352-4186-b0a3-f9f8c553ab41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87898", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-961", "content": "", "creation_timestamp": "2026-09-24T07:43:22.000000Z"}]}