{"vulnerability": "cve-2026-1836", "sightings": [{"uuid": "d909eb18-e78e-4cdd-95de-2e317d1d7e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18360", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp", "content": "[SBA-ADV-20260126-01] CVE-2026-16969 CVE-2026-18360 CVE-2026-18361: DFIR-IRIS 2.4.26 and possibly others Stored XSS", "creation_timestamp": "2026-07-30T14:07:09.888565Z"}, {"uuid": "43f929b2-8bec-4f2a-b7f9-480a3a1e44ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18361", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp", "content": "[SBA-ADV-20260126-01] CVE-2026-16969 CVE-2026-18360 CVE-2026-18361: DFIR-IRIS 2.4.26 and possibly others Stored XSS", "creation_timestamp": "2026-07-30T14:07:09.939017Z"}, {"uuid": "861a701e-2cfd-49d0-9e7f-4b3fa76b790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18363", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24", "content": "osTicket CRITICAL vuln (CVE-2026-18363): Weak password reset logic lets attackers reuse valid reset tokens. Affects versions <1.17.8 & <1.18.4. Upgrade ASAP when patch is released; monitor reset activity. https://radar.offseq.com/threat/cve-2026-18363-cwe-640-weak-password-recovery-mechanism-for-...", "creation_timestamp": "2026-07-30T12:00:30.475999Z"}, {"uuid": "8e0ab2bd-5b26-4e09-b322-c92ad583f7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18362", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/f23y4hauoujpy", "content": "[SBA-ADV-20260128-02] CVE-2026-16971 CVE-2026-18362: DFIR-IRIS 2.4.26 and possibly others Missing Brute Force Protection", "creation_timestamp": "2026-07-30T14:13:10.572200Z"}, {"uuid": "edc9b60d-c1fc-4dfc-a61d-bda1c31f1910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18363", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrudbnnaaf2y", "content": "CVE-2026-18363 - osticket\nA security flaw in osTicket's password reset process allows attackers to reuse valid password reset tokens, potentially taking control of an account. This affects osTicket\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#osticket #enhancesoft #CVE #infosec", "creation_timestamp": "2026-07-30T11:24:04.859319Z"}]}