{"vulnerability": "cve-2026-1418", "sightings": [{"uuid": "1688963f-9f63-428e-a01b-d2b0ed945b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1418", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdcpmbrn5j2c", "content": "", "creation_timestamp": "2026-01-26T07:24:08.802301Z"}, {"uuid": "b16a1c66-e9d0-4c77-9794-6770dacf7eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14188", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mslhsakyrb2o", "content": "CVE-2026-14188 easy-appointments (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-08T16:16:11.539172Z"}, {"uuid": "ed03c88a-b46a-4c86-a363-aa1719f2d61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14181", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mplh2pyhpk2z", "content": "\ud83d\udea8 High-severity security fix in @fastify/middie@9.3.3 just released!\n\nPatches CVE-2026-14181: @fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths\n\ngithub.com/fastify/midd...", "creation_timestamp": "2026-07-01T11:47:27.813710Z"}, {"uuid": "f882bffe-0898-44a9-a072-6244587e6bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14181", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplk6kd5px2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14181 \u0432 @fastify/middie: \u0443\u0433\u0440\u043e\u0437\u0430 URL-\u043d\u043e\u0440\u043c\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/140B5E81-D752-433D-AFCF-4D1FAD502494", "creation_timestamp": "2026-07-01T12:43:21.256648Z"}, {"uuid": "62519af0-38a5-46d6-86f4-f53874558609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14181", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplkygbgl42p", "content": "CVE-2026-14181 - @fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths\nCVE ID : CVE-2026-14181\n \n Published : July 1, 2026, 11:42 a.m. | 3\u00a0minutes ago\n \n Description : @fastify/middie versions 9.1.0 through 9.3.2 fail to guard th...", "creation_timestamp": "2026-07-01T12:57:44.423797Z"}, {"uuid": "2d54e5c1-9c63-44a5-8d22-ab9c465a2589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14181", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mplppopgjc2l", "content": "@fastify/middie 9.1.0\uff5e9.3.2\u306f\u3001\u4e0d\u6b63\u306aURL\u30a8\u30f3\u30b3\u30fc\u30c9\u30b7\u30fc\u30b1\u30f3\u30b9\u306e\u51e6\u7406\u306b\u3088\u308a\u3001Node.js\u30d7\u30ed\u30bb\u30b9\u304c\u7d42\u4e86\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u653b\u6483\u3092\u53d7\u3051\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002middie.run\u3092\u30b9\u2026\nCVE-2026-14181 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-01T14:22:19.774687Z"}, {"uuid": "f112a228-16bc-4dc3-a388-ad2a7fdfe182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14181", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplt4tpp652l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14181 \u0432 @fastify/middie: \u0443\u0433\u0440\u043e\u0437\u0430 URL-\u043d\u043e\u0440\u043c\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/41986DD6-0E1C-43A9-B985-A15A098655F9", "creation_timestamp": "2026-07-01T15:23:22.475990Z"}, {"uuid": "45e5ef44-6e54-4070-b7a7-317983d051b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14181", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnldxs66c2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14181 \u0432 @fastify/middie: \u0443\u0433\u0440\u043e\u0437\u0430 URL-\u043d\u043e\u0440\u043c\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/20EAF030-9F90-4F1B-874E-973E74C29E9E", "creation_timestamp": "2026-07-02T08:09:31.056740Z"}, {"uuid": "cb590988-3ce6-43c1-8523-cfad3308b5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14182", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxvcuy23z2t", "content": "CVE-2026-14182 - customer email verification for woocommerce\nAn unpatched plugin for WooCommerce WordPress websites allows attackers to take over any unconfirmed user account. This can happen when an attacker tricks\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-13T14:50:04.857950Z"}, {"uuid": "e22c6df1-69a9-4cba-88e5-e47fd434c015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14183", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5k5lhahv2s", "content": "CVE-2026-14183 - Classified Listing\nCVE ID : CVE-2026-14183\n \n Published : July 21, 2026, 7:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt handler belongs to...", "creation_timestamp": "2026-07-21T09:55:50.785143Z"}, {"uuid": "e8d639e9-9774-403f-ab22-962cd4fe3ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kdfuebu2q", "content": "CVE-2026-14184 - Academy LMS\nCVE ID : CVE-2026-14184\n \n Published : July 21, 2026, 7:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : The Academy LMS WordPress plugin before 3.8.1 does not verify ownership of a user-supplied user identifier in several of its lesson AJAX hand...", "creation_timestamp": "2026-07-21T09:59:06.509865Z"}, {"uuid": "3a27704c-c84c-4174-b2ae-0a2aac5a28c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kjwyjep2e", "content": "CVE-2026-14185 - WPBot AI ChatBot\nCVE ID : CVE-2026-14185\n \n Published : July 21, 2026, 7:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settin...", "creation_timestamp": "2026-07-21T10:02:45.405954Z"}]}