{"vulnerability": "cve-2026-1942", "sightings": [{"uuid": "dfba574a-75d9-41aa-8b3a-83dfb06b5d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3dnrlt47wnofx", "content": "CVE-2026-19426 - FitSoft\uff5cPOS Sytstem - Missing Authentication\nCVE ID : CVE-2026-19426\n \n Published : Aug. 12, 2026, 7:07 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers ...", "creation_timestamp": "2026-08-12T08:38:23.379232Z"}, {"uuid": "8ca77235-1618-4a2f-a6b3-853992b3bbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19426", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msuy3wrwht2u", "content": "\ud83d\udfe0 CVE-2026-19426 - High (8.2)\n\nPOS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remot...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19426/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T11:01:54.089401Z"}, {"uuid": "03041d0c-e75d-4d6c-8a62-31d087bf0251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19426", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11101-4f85c-2.html", "content": "", "creation_timestamp": "2026-08-12T12:45:02.940643Z"}, {"uuid": "450cee4b-0878-43dd-bd8d-aeb33d9e7e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqgt4gzcu2u", "content": "CVE-2026-19429 - jenkins\nA security patch for Jenkins Project Jenkins is incomplete, allowing an authenticated attacker to access sensitive files on the server. This can happen because the patch does\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jenkins #jenkinsproject #CVE #infosec", "creation_timestamp": "2026-08-10T15:42:05.043999Z"}, {"uuid": "5350048c-599f-4f6e-a847-c58c74d0c2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19424", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11097-ee412-2.html", "content": "", "creation_timestamp": "2026-08-13T08:47:11.007031Z"}, {"uuid": "ee37ef6f-6eb0-43a0-a604-2c6b8549d4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19429", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msrcbmtv622n", "content": "CVE-2026-19429 is trending. Hype score 2, currently #9 on cvemon.\n\nJenkins FilePath.untarFrom() in all versions, including those with the CVE-2026-33001 patch applied, validates symlink destinations but not targets. The CVE-2026-33001 fix enforces\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19429", "creation_timestamp": "2026-08-10T23:53:23.245050Z"}, {"uuid": "783efe7a-4b59-441b-9afb-6fda8254e1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19425", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11099-56aa8-2.html", "content": "", "creation_timestamp": "2026-08-11T08:45:03.677833Z"}, {"uuid": "67522fa1-a20f-4075-8e1d-5358336a58f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19425", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117076054927533100", "content": "Win Men Intermational Travel Agency Management System has a CRITICAL SQL Injection flaw (CVE-2026-19425, CVSS 9.8). Unauthenticated attackers may fully compromise databases. No patch yet: restrict access & monitor for SQLi. https://radar.offseq.com/threat/cve-2026-19425-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-c590b6d3eb66ff09 #OffSeq #CVE202619425 #SQLInjection #InfoSec", "creation_timestamp": "2026-08-11T09:00:27.087157Z"}, {"uuid": "16509398-cd2e-4989-9266-b45a656fb68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19425", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mssatwo7hm2s", "content": "Critical SQL Injection (CVE-2026-19425) in Win Men Intermational Travel Agency Management System \u26a0\ufe0f allows unauthenticated DB compromise. No patch yet \u2014 restrict access & monitor systems. https://radar.offseq.com/threat/cve-2026-19425-cwe-89-improper-neutralization-of-special-elements-used-in-an-...", "creation_timestamp": "2026-08-11T09:00:30.938534Z"}, {"uuid": "30727bfc-60aa-4b4a-9491-8cf61dc5e9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ceapl2yiykvox", "content": "CVE-2026-19424 - Inventec Appliances\uff5cChiline Cloud - Insecure Direct Object Reference\nCVE ID : CVE-2026-19424\n \n Published : Aug. 11, 2026, 1:56 a.m. | 34\u00a0minutes ago\n \n Description : Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnera...", "creation_timestamp": "2026-08-11T03:07:12.701884Z"}, {"uuid": "1aa86d9a-a933-4374-98c6-326526974779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19424", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msrrkbor4i26", "content": "Inventec Appliances\u88fdChiline Cloud\u306bIDOR\u8106\u5f31\u6027\u3002\u672a\u8a8d\u8a3c\u306e\u9060\u9694\u653b\u6483\u8005\u304c\u30d1\u30e9\u30e1\u30fc\u30bf\u6539\u5909\u3067\u4ed6\u30e6\u30fc\u30b6\u30fc\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u3092\u8aad\u307f\u53d6\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19424 CVSS 7.5 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19424", "creation_timestamp": "2026-08-11T04:26:39.255029Z"}]}