{"vulnerability": "cve-2026-1075", "sightings": [{"uuid": "46e18f17-a732-4a72-ace1-9224247853f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1075", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md5x2662652c", "content": "", "creation_timestamp": "2026-01-24T09:53:51.912414Z"}, {"uuid": "d264faa5-aca0-4975-8c91-7f71dd4df400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplapaqefn2u", "content": "CVE-2026-10750 - Royal MCP\nCVE ID : CVE-2026-10750\n \n Published : 1 Jul 2026, 6 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : The Royal MCP WordPress plugin before 1.4.26 does not perform capability checks on the majority of its MCP tools after token authentication, allowing ...", "creation_timestamp": "2026-07-01T09:53:38.960707Z"}, {"uuid": "71d8ee9f-efc3-4731-ab03-d8e9ac1b9677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10750", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mplibhzlrp2l", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3 The Royal MCP 1.4.26\u672a\u6e80\u306f\u3001\u30c8\u30fc\u30af\u30f3\u8a8d\u8a3c\u5f8c\u306e\u6a29\u9650\u30c1\u30a7\u30c3\u30af\u304c\u4e0d\u5341\u5206\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u8cfc\u8aad\u8005\u306a\u3069\u4f4e\u6a29\u9650\u306e\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u304c\u3001\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b3\u30f3\u30c6\u30f3\u30c4\u306e\u95b2\u89a7\u3001\u5168\u2026\nCVE-2026-10750 CVSS 8.1 | HIGH", "creation_timestamp": "2026-07-01T12:09:06.928598Z"}, {"uuid": "5bf2904c-8ec2-4b75-994c-c0cec9ed3855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10750", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mpmpzdsalf2f", "content": "Royal MCP (CVE-2026-10750, CVSS 8.1): Subscribers can read private posts. Enumerate all users. Delete content they don't own. No patch available\u2014disable it now. Scan your WordPress site: pulse-wp.com\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-07-02T00:00:23.598794Z"}, {"uuid": "0556d2d0-d88d-4783-8899-ec9d5eb47715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10750", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnel7m7wj2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10750 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Royal MCP \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/198522FD-4FC3-41B6-A72C-4878E73B1B09", "creation_timestamp": "2026-07-02T06:08:17.994377Z"}, {"uuid": "b88d1ab2-3072-4538-90bf-988c6f840739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr2t24q7et2q", "content": "CVE-2026-10755 - All in One SEO\nCVE ID : CVE-2026-10755\n \n Published : July 20, 2026, 7:16 a.m. | 28\u00a0minutes ago\n \n Description : The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing user...", "creation_timestamp": "2026-07-20T07:56:58.937340Z"}, {"uuid": "0679a4b5-e882-4b00-9df5-f079ddab3fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwexeg3k6t2m", "content": "\ud83d\udfe0 CVE-2026-10758 - High (7.5)\n\nEsri LERC is an open-source image or raster format which supports rapid encoding and decoding for...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10758/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-25T23:46:55.678364Z"}, {"uuid": "af4b1535-b476-42f4-9ba8-5f20ee598e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107510", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117404822798499578", "content": "CVE-2026-107510: CRITICAL vuln in Infoblox NIOS 9.0.x \u2013 9.1.0. Auth'd high-priv users can escalate privileges via argument injection. Restrict admin access & watch for vendor updates. https://radar.offseq.com/threat/cve-2026-107510-vulnerability-in-infoblox-nios-dd277637e9e73e9d #OffSeq #Infosec #CVE2026107510", "creation_timestamp": "2026-10-08T10:30:26.964190Z"}, {"uuid": "6be17988-367a-4cbf-aaf1-a964abb33ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107510", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxeawa4tum2y", "content": "Infoblox NIOS 9.0.x \u2013 9.1.0 hit by CRITICAL CVE-2026-107510. High-priv users can escalate via argument injection. Limit admin access & watch for patches. https://radar.offseq.com/threat/cve-2026-107510-vulnerability-in-infoblox-nios-dd277637e9e73e9d #OffSeq #Vulnerability", "creation_timestamp": "2026-10-08T10:30:29.700539Z"}, {"uuid": "5497a986-8aba-4270-b081-15349d04324e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107510", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxed52bmaq2l", "content": "CVE-2026-107510\nA user who can log in with high-level access can add extra instructions to the system's troubleshooting commands, giving them even more control than intended. This could let them take over parts of the system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-08T11:10:04.652369Z"}, {"uuid": "53c5af5d-2ac4-4994-9ca1-eb0e81f527f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107510", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxegdzekc32x", "content": "\ud83d\udea8 CVE-2026-107510 \u2014 CVSS 9.1 CRITICAL\n\nAn authenticated high privilege user can inject arguments in troubleshooting commands resulting in privileg...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107510\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T12:07:39.372974Z"}, {"uuid": "5b63d6c6-63a2-47b8-8194-972fa69c87e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107589", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gppweivbynvsy", "content": "CVE-2026-107589 - Authentication Bypass by Spoofing in Jacamar CI\nCVE ID : CVE-2026-107589\n \n Published : Oct. 8, 2026, 3:11 p.m. | 16\u00a0minutes ago\n \n Description : Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to ...", "creation_timestamp": "2026-10-08T16:14:15.873112Z"}, {"uuid": "4ce5a091-5f2d-48c5-9140-de04e5af7214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107586", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/45oiay3pfezxe", "content": "CVE-2026-107586 - Allocation of Resources Without Limits or Throttling in hMailServer\nCVE ID : CVE-2026-107586\n \n Published : Oct. 8, 2026, 3:11 p.m. | 16\u00a0minutes ago\n \n Description : Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMail...", "creation_timestamp": "2026-10-08T16:26:16.356492Z"}]}