{"vulnerability": "CVE-2026-90847", "sightings": [{"uuid": "e5465f17-6ee9-46d5-866d-18d25f9725c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90847", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117272466208832915", "content": "EFM ipTIME C200E v1.094 suffers CRITICAL OS command injection (CVE-2026-90847, CVSS 9.4) via iux_set.cgi. Remotely exploitable, public exploit available. Restrict device access and monitor. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity #CVE", "creation_timestamp": "2026-09-15T01:30:25.485877Z"}, {"uuid": "9e3aa059-899a-47de-acfe-7ed376ee1fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90847", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjhzg7zu62h", "content": "EFM ipTIME C200E 1.094 faces a CRITICAL OS command injection flaw (CVE-2026-90847, CVSS 9.4). Public exploit exists \u2014 restrict access and monitor devices. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity", "creation_timestamp": "2026-09-15T01:30:27.341379Z"}]}