{"vulnerability": "CVE-2026-92720", "sightings": [{"uuid": "b8b4461e-2c26-4fa7-a5ff-742ced627f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92720", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnt5g54g22f", "content": "CVE-2026-92720 - kubero\nKubero versions up to 3.1.1 do not require login for its notifications API. This means an attacker could view stored webhook credentials and URLs, and could add or delete webhook\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kubero #kuberodev #CVE #infosec", "creation_timestamp": "2026-09-16T19:00:10.909145Z"}, {"uuid": "565be539-0f8f-4f9b-8fb9-ec34950f99e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92720", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnwwr2fvf2r", "content": "\ud83d\udea8 CVE-2026-92720 \u2014 CVSS 9.3 CRITICAL\n\nKubero through 3.1.1 fails to apply authentication guards to the notifications API endpoints, allowing unau...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92720\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T20:08:04.632909Z"}]}