{"vulnerability": "CVE-2026-94503", "sightings": [{"uuid": "02896e2c-b22e-486a-bddd-41fe0fc19f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94503", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117410839431606449", "content": "PX-lab Zombify \u22641.7.7 is affected by CVE-2026-94503 (CRITICAL, CVSS 10): unrestricted upload of dangerous files enables remote code execution. No patch yet \u2014 restrict uploads & monitor for updates. https://radar.offseq.com/threat/cve-2026-94503-unrestricted-upload-of-file-with-dangerous-type-in-px-lab-zombify-8e6fe0b08d444b23 #OffSeq #CVE202694503 #WebSecurity #Infosec", "creation_timestamp": "2026-10-09T12:00:33.341379Z"}, {"uuid": "ad2f112f-fe60-4959-81cf-7516d18d1883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94503", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxgwgbmqcq2p", "content": "PX-lab Zombify \u22641.7.7 has a CRITICAL flaw (CVE-2026-94503) enabling web shell upload and full system compromise. No patch \u2014 restrict upload features now. https://radar.offseq.com/threat/cve-2026-94503-unrestricted-upload-of-file-with-dangerous-type-in-px-lab-zombify-8e6fe0b08d444b23 #OffSeq #CVE2...", "creation_timestamp": "2026-10-09T12:00:35.164198Z"}, {"uuid": "7d151bd3-eb96-4117-be18-2fb832f55a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94503", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxgwsw7v4e2x", "content": "\ud83d\udea8 CVE-2026-94503 \u2014 CVSS 10 CRITICAL\n\nUnrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94503\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T12:07:38.968472Z"}, {"uuid": "12dd2baf-0c2e-4f8e-a063-021c8550af60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94503", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi2ppo2w42l", "content": "CVE-2026-94503 - zombify\nThe Zombify plugin for WordPress (versions up to 1.7.7) lets anyone upload files of any type, including web shells that can run code on your server. This could give an attacker control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zombify #pxlab #CVE #infosec", "creation_timestamp": "2026-10-09T22:50:06.065533Z"}]}