{"vulnerability": "CVE-2026-97730", "sightings": [{"uuid": "2d0b96fc-5a68-4c37-adbd-abb7d2728b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97730", "type": "seen", "source": "https://gist.github.com/ichintu/cef2c12046d7246fbad5e72900e0d2df", "content": "Today\u2019s threat intelligence digest highlights four notable vulnerabilities:\n\n\u2022 **macOS TCC Bypass:** CDC/ACM serial interfaces can circumvent macOS Transparency, Consent, and Control (TCC) security restrictions, granting unauthorized access to protected resources.  \n\u2022 **pfSense LFI (CVE-2026-97730, HIGH/8.5):** A flaw in dashboard widget sequence handling allows local file inclusion, enabling arbitrary PHP execution (requires authentication and dashboard modification privileges).  \n\u2022 **Argus Monitor DoS (CVE-2026-79417):** A local IOCTL vulnerability exploits a TOCTOU race condition to disable x86 `MONITOR`/`MWAIT` instructions, triggering `HYPERVISOR_ERROR` bugchecks in Hyper-V and kernel components.  \n\u2022 **Root Browser Classic Injection (CVE-2026-85082, HIGH/8.5):** Unsafe passing of SQLite database paths to the OS shell enables command injection due to improper filename/command separation.  \n\nAll entries include technical write-ups, CVSS metrics, and proof-of-concept resources for further analysis.", "creation_timestamp": "2026-09-25T04:00:27.000000Z"}, {"uuid": "1af7d916-17a2-4c88-b335-6634ee206760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97730", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwcyhkytxe2d", "content": "\ud83d\udfe0 CVE-2026-97730 - High (8.5)\n\nIn Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-97730/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-25T05:01:15.851963Z"}]}