{"vulnerability": "cve-2026-1958", "sightings": [{"uuid": "2b2d5714-8134-45ae-87c3-5276f00f5fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1958", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhqd4gktwy2n", "content": "", "creation_timestamp": "2026-03-23T14:58:34.563522Z"}, {"uuid": "b75eff22-23de-428a-9897-6f388e8bbda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1958", "type": "seen", "source": "https://cert.pl/en/posts/2026/03/CVE-2026-1958/", "content": "", "creation_timestamp": "2026-03-23T10:55:00.000000Z"}, {"uuid": "6a550eec-1c57-4303-883a-1eea5cbf7cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19582", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtiobzd5mw2b", "content": "binutils 2.46.1\u4ee5\u524d\u3067\u3001\u7d30\u5de5\u3055\u308c\u305fPE\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u304f\u3068\u3001\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306b\u3088\u308a\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u304c\u5b9f\u884c\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19582 CVSS 7.8 | HIGH", "creation_timestamp": "2026-08-20T06:59:34.907478Z"}, {"uuid": "3902019f-523a-4aef-b902-d0f4608e7290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19588", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bqkrn7c4lme5f", "content": "CVE-2026-19588 - Samsung rlottie Integer Overflow to Buffer Overflow\nCVE ID : CVE-2026-19588\n \n Published : 2026\u5e748\u670812\u65e5 03:16 | 1\u00a0\u5c0f\u65f6\uff0c15\u00a0\u5206\u949f ago\n \n Description : Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.\n \n Severity:...", "creation_timestamp": "2026-08-12T04:55:07.204661Z"}, {"uuid": "51102c3d-1f11-4df4-a171-180bca58ccd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkqajzw6i2k", "content": "CVE-2026-19586 (CVSS 9.3) is a pre-authentication OS command injection flaw in Omada gateways. TP-Link has released fixed firmware.\n\n#Omada #TPLink #CVE202619586 #CommandInjection #OpenVPN #NetworkSecurity", "creation_timestamp": "2026-08-21T02:39:52.841658Z"}, {"uuid": "b1839c09-1f69-4550-8fe5-7650295fee5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2ezjnaj2p", "content": "\ud83d\udea8 CVE-2026-19586 \u2014 CVSS 9.3 CRITICAL\n\nA pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19586\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:40.163874Z"}, {"uuid": "e92b4866-7e51-4f87-95a0-c39cc948c143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtk2hjjoud2u", "content": "CVE-2026-19586 - er7212pc v2\nIf your Omada gateway is set up as an OpenVPN server, an attacker on the internet can send specially crafted connection requests that run commands on the device before logging\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#er7212pcv2 #tplink #CVE #infosec", "creation_timestamp": "2026-08-20T20:10:05.159646Z"}, {"uuid": "ac11f364-b197-4163-9e0e-007fb84f5236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d4p7no2ywgtvf", "content": "CVE-2026-19583 - Velociraptor Required Permissions bypass by using client monitoring queries\nCVE ID : CVE-2026-19583\n \n Published : Sept. 10, 2026, 3:16 a.m. | 20\u00a0minutes ago\n \n Description : Velociraptor allows some sensitive artifacts to be gated by additional permissions. F...", "creation_timestamp": "2026-09-10T03:40:52.045330Z"}, {"uuid": "a270bff9-b076-4305-b1e7-4f440c2a66f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hiq56e3pwylgs", "content": "CVE-2026-19584 - Velociraptor VQL injection during notebook restore from backup\nCVE ID : CVE-2026-19584\n \n Published : Sept. 10, 2026, 3:17 a.m. | 20\u00a0minutes ago\n \n Description : Velociraptor allows for the creation of notebook backups in its default enabled daily backup featu...", "creation_timestamp": "2026-09-10T04:00:51.799432Z"}, {"uuid": "a4a34580-15c5-45d4-9005-0f01178463bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19583", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv56hy7chv2j", "content": "\ud83d\udea8 CVE-2026-19583 \u2014 CVSS 9.9 CRITICAL\n\nVelociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19583\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T04:07:40.976894Z"}, {"uuid": "7dcae192-f8a4-4c96-8b81-d49268762654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19583", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117244862440874857", "content": "CVE-2026-19583: CRITICAL vuln in Rapid7 Velociraptor (<0.77.2) allows users w/ artifact scheduling rights to execute privileged artifacts like Linux.Sys.BashShell \u2014 risking full compromise. Restrict permissions, monitor activity. https://radar.offseq.com/threat/cve-2026-19583-cwe-732-incorrect-permission-assignment-for-critical-resource-in-rapid7-velociraptor-f6df828b1d19e549 #OffSeq #Vuln #Infosec", "creation_timestamp": "2026-09-10T04:30:25.391520Z"}, {"uuid": "d47ea9f8-6517-48ff-8faf-fb436724dbe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19583", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv57qojtw424", "content": "Rapid7 Velociraptor (<0.77.2) hit by CRITICAL CVE-2026-19583. Users with monitoring artifact permissions can schedule privileged BashShell, risking full system compromise. Restrict user permissions & monitor activity. https://radar.offseq.com/threat/cve-2026-19583-cwe-732-incorrect-permission-ass...", "creation_timestamp": "2026-09-10T04:30:28.158599Z"}, {"uuid": "8d9b8b54-9ad2-4157-8cc4-1b6b8d51d282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19584", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv5etsdzvx2z", "content": "\ud83d\udfe0 CVE-2026-19584 - High (7.7)\n\nVelociraptor allows for the creation of notebook backups in its default enabled daily backup feat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19584/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-10T06:01:40.985799Z"}, {"uuid": "270fd5f4-f132-4412-b9c9-b51ceeb1510b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19583", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv5j7yvjzx2w", "content": "CVE-2026-19583 - velociraptor\nIn Velociraptor, the monitoring feature does not enforce the same permission checks as other tasks. This means someone who can set up a monitoring task could also trigger\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velociraptor #rapid7 #CVE #infosec", "creation_timestamp": "2026-09-10T07:20:04.771875Z"}]}