{"vulnerability": "cve-2026-2819", "sightings": [{"uuid": "b3b74f5f-e06d-4a28-a737-531afe364d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28193", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfrpelcdnh2w", "content": "", "creation_timestamp": "2026-02-26T17:20:09.609873Z"}, {"uuid": "5c8cab35-094b-4547-842e-a5b3a1f394d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28193", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfouthkpeo26", "content": "", "creation_timestamp": "2026-02-25T14:19:59.040263Z"}, {"uuid": "4c0abfc0-74c2-4f26-8f1c-28bbc397c4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfoxrojavt2v", "content": "", "creation_timestamp": "2026-02-25T15:12:39.963556Z"}, {"uuid": "2f9e8ef0-84ae-474e-a31c-5eb72f561756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtekyrpn4h2c", "content": "CVE-2026-28192\nAn attacker can upload any file to a Piotnet Addons For Elementor Pro installation without needing a password. This can potentially lead to security issues if an attacker uploads malicious files. To protect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-18T15:50:04.857679Z"}, {"uuid": "370ac4bf-e9bc-4dbe-86f1-88b6e002f428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtelyt6q4p2c", "content": "\ud83d\udea8 CVE-2026-28192 \u2014 CVSS 9.6 CRITICAL\n\nUnauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28192\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T16:08:00.058586Z"}, {"uuid": "7ce2ff6f-44b7-48f2-bb4d-0a00262c0993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/1ThaDno_W3Ka2b0qcRhQY27-XNg8SeWiGEBhbywH0dvG480h", "content": "", "creation_timestamp": "2026-08-21T04:00:04.178889Z"}, {"uuid": "dd89040c-033e-42ea-ac24-eaf3272a4042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/b4WBtRo620bcBWWOg8X_RfJcTN35itwU9g11mGhdE2NlcRcc", "content": "", "creation_timestamp": "2026-08-21T04:00:04.084411Z"}, {"uuid": "e6cbafe0-ebd5-4756-841c-ce22469b9455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/-SvGncDmyD8mCinZhEuoCdd-YFQP5dpOrLuNh1m61f7bY1jo", "content": "", "creation_timestamp": "2026-08-22T07:00:02.908687Z"}, {"uuid": "950a97a2-45c8-4f69-8a91-b7436d35432c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/1ThaDno_W3Ka2b0qcRhQY27-XNg8SeWiGEBhbywH0dvG480h", "content": "", "creation_timestamp": "2026-08-22T00:00:29.544977Z"}, {"uuid": "21d81aeb-204b-45c8-a7a5-7da565694eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/b4WBtRo620bcBWWOg8X_RfJcTN35itwU9g11mGhdE2NlcRcc", "content": "", "creation_timestamp": "2026-08-22T00:00:29.734125Z"}, {"uuid": "dbdbc9c3-b6ce-446a-9ab8-5677d97cf4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/1_b90yBOy2SfvjuZ69uWqxo4lLXWTFoL87sqOYfdotwyiTZa", "content": "", "creation_timestamp": "2026-08-24T17:00:03.459075Z"}, {"uuid": "af0b9abe-e07d-4e2d-98ed-ff94eed125a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/Wkw5Q93mgEWIMhhwt6CYg1p81IUQmroPxiysbO9zWQOWvyeP", "content": "", "creation_timestamp": "2026-08-24T17:00:03.710198Z"}, {"uuid": "a1421783-3051-4faf-8e1e-5ba25d5ca901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/mCB2grCGFyDPyP46h0RoSTt2nzVg4a1r-qTUhzVOT_Pb_Nr6", "content": "", "creation_timestamp": "2026-08-24T17:00:03.935832Z"}, {"uuid": "0a8a6aea-7b1b-49f8-8046-95c815ba5a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/94zsc3RGfL-cYo-R392AxLlVEM1n1YwHAA5wklhiAnO4RRX-", "content": "", "creation_timestamp": "2026-08-24T17:00:04.156427Z"}, {"uuid": "1db718cb-191c-4736-804d-06b7a508f021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/mVHbj7a1DYNF9kaBsr_OFLsg6Xhcx7FdBO2-7gQR_Jq3tWAA", "content": "", "creation_timestamp": "2026-08-24T17:00:04.865034Z"}, {"uuid": "9fecb502-5d1b-411b-84c7-8f97094d50fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/-SvGncDmyD8mCinZhEuoCdd-YFQP5dpOrLuNh1m61f7bY1jo", "content": "", "creation_timestamp": "2026-08-23T00:00:41.238626Z"}, {"uuid": "b3458e34-c2e8-47a9-b634-4cbdfc7df53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/mCB2grCGFyDPyP46h0RoSTt2nzVg4a1r-qTUhzVOT_Pb_Nr6", "content": "", "creation_timestamp": "2026-08-25T00:00:21.972637Z"}, {"uuid": "6e25e559-246f-44f3-9dbf-0128c41a9bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/94zsc3RGfL-cYo-R392AxLlVEM1n1YwHAA5wklhiAnO4RRX-", "content": "", "creation_timestamp": "2026-08-25T00:00:22.203988Z"}, {"uuid": "d6a41940-016e-4b71-91cf-44533f64383b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/mVHbj7a1DYNF9kaBsr_OFLsg6Xhcx7FdBO2-7gQR_Jq3tWAA", "content": "", "creation_timestamp": "2026-08-25T00:00:11.816258Z"}, {"uuid": "0bdadcac-95a1-4451-b27b-18c9ea670e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/1_b90yBOy2SfvjuZ69uWqxo4lLXWTFoL87sqOYfdotwyiTZa", "content": "", "creation_timestamp": "2026-08-25T00:00:21.485790Z"}, {"uuid": "221c3d0f-2c6a-4662-8eb2-f8a13301505a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/Wkw5Q93mgEWIMhhwt6CYg1p81IUQmroPxiysbO9zWQOWvyeP", "content": "", "creation_timestamp": "2026-08-25T00:00:21.726701Z"}, {"uuid": "a3b60313-f85b-4552-912b-87686a2ef50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/Ll1AzPD7QTzjWba10UNv1-Omd-fgpywQHDyh7DMj-s8cU8TfcA", "content": "", "creation_timestamp": "2026-09-03T08:00:04.910089Z"}, {"uuid": "c5881052-dc7e-4cbc-9592-9c585d23d507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/Wq1RQ9DZ7N2QDdyjbZp2O4a0WnlHH9sKKPWozfdrK71FdlohDQ", "content": "", "creation_timestamp": "2026-09-03T08:00:05.075632Z"}, {"uuid": "d767089e-468a-4d9d-8b85-ccc513052b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/dEu8f3Utvvz3CENWStBoW1q9DUH9bR4YUoyKQUPDbdvpHG7DHA", "content": "", "creation_timestamp": "2026-09-03T08:00:05.221262Z"}, {"uuid": "d069a0f5-520a-4813-8f44-d893a579cbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/Wq1RQ9DZ7N2QDdyjbZp2O4a0WnlHH9sKKPWozfdrK71FdlohDQ", "content": "", "creation_timestamp": "2026-09-04T00:00:54.723021Z"}, {"uuid": "1f6e9314-d657-4224-897d-3b7065487444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/Ll1AzPD7QTzjWba10UNv1-Omd-fgpywQHDyh7DMj-s8cU8TfcA", "content": "", "creation_timestamp": "2026-09-04T00:00:55.050570Z"}, {"uuid": "bd347471-1881-4a4a-b290-93afc921dd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/dEu8f3Utvvz3CENWStBoW1q9DUH9bR4YUoyKQUPDbdvpHG7DHA", "content": "", "creation_timestamp": "2026-09-04T00:00:55.340601Z"}, {"uuid": "33142ae3-9d5f-4239-8d85-593eedd06e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/8yRqTs6iNIaG1p-0fIet7GRVNa1yJ-tacVkFZ69SKDvKdXX0xA", "content": "", "creation_timestamp": "2026-09-04T08:00:04.522684Z"}, {"uuid": "5a3cdfda-7489-49b3-a00a-f5d5e5fd34f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28192", "type": "seen", "source": "Telegram/8yRqTs6iNIaG1p-0fIet7GRVNa1yJ-tacVkFZ69SKDvKdXX0xA", "content": "", "creation_timestamp": "2026-09-05T01:00:34.899187Z"}, {"uuid": "c83605b9-d3bf-42ad-a2c0-0f4d8660a0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28199", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cadieoptmd722", "content": "CVE-2026-28199 - Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell\nCVE ID : CVE-2026-28199\n \n Published : 18 septembre 2026 11:19 | 33\u00a0minutes ago\n \n Description : An authenticated user with access to the NetBackup Flex OS management \nshell could...", "creation_timestamp": "2026-09-18T13:17:29.781240Z"}, {"uuid": "0fa63aaf-3fc4-4126-8992-7883cdc25833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28197", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsb34i7ml2g", "content": "CVE-2026-28197 - netbackup flex os\nA user with limited rights on the NetBackup Flex OS management console can enter specially crafted input that tricks a privileged command into running with full system rights. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cohesity #CVE #infosec", "creation_timestamp": "2026-09-18T13:20:05.093983Z"}, {"uuid": "a150b974-e2aa-4a97-be62-9089de1c668a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28198", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsb37koeb2w", "content": "CVE-2026-28198 - netbackup flex os\nA user who can log into the NetBackup Flex OS management console can trick the system into skipping a security check and run a support command with full administrator rights. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cohesity #CVE #infosec", "creation_timestamp": "2026-09-18T13:20:08.356103Z"}, {"uuid": "0fce22a8-ba12-4db9-9dbf-c165a18fe59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28197", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsdk7uzgp2w", "content": "\ud83d\udfe0 CVE-2026-28197 - High (8.8)\n\nAn authenticated, low-privileged user with access to the NetBackup Flex \nOS management shell coul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28197/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T14:04:19.473064Z"}, {"uuid": "15851269-d0a6-490a-b86e-bab906406f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28198", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsdmn66b42b", "content": "\ud83d\udfe0 CVE-2026-28198 - High (8.8)\n\nAn authenticated, low-privileged user with access to the NetBackup Flex \nOS management shell coul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28198/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T14:05:41.765579Z"}, {"uuid": "8f2f8bc4-af86-4422-96f1-166cfe82f1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28197", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvsdpnhiz72f", "content": "\ud83d\udea8 CVE-2026-28197 \u2014 CVSS 9.4 CRITICAL\n\nAn authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28197\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T14:07:21.521157Z"}, {"uuid": "7b5109e6-46c7-4b09-926f-06c92d0c7d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28198", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvsdpvxtyp2t", "content": "\ud83d\udea8 CVE-2026-28198 \u2014 CVSS 9.4 CRITICAL\n\nAn authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28198\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T14:07:30.356927Z"}, {"uuid": "decc8969-b43c-458d-88a9-4093a059bdb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28197", "type": "seen", "source": "https://gist.github.com/ichintu/a37032d4209bee987101439e7254e730", "content": "This daily cybersecurity digest highlights emerging threats, critical vulnerabilities, and vendor advisories from September 2026:\n\n**Active Threats & Campaigns**\n- **Transparent Tribe (APT36):** Pakistan-linked group deploying new Rust-based backdoors targeting Indian and Afghan government/defense entities.\n- **GhostCode Phishing:** Exploits Microsoft 365\u2019s OAuth device authorization flow to capture tokens, persistently register devices via Intune/Azure AD, and maintain up to 14 days of SSO-equivalent access.\n- **Teams Impersonation:** Attackers use default external chats to deliver malicious MSI files that steal passwords via fake Windows lock screens.\n\n**Critical Vulnerabilities & Advisories**\n- **AI Coding Agents:** \u201cPlugin4Shell\u201d exposes a zero-click RCE flaw in Anthropic, OpenAI, Google, and GitHub agents by bypassing Git SHA validation. Anthropic and OpenAI are patched; GitHub remains partially exposed.\n- **Network/ICS:** Moxa and Advantech issued advisories for Ethernet switches vulnerable to CVE-2026-15579 (buffer overflow causing DoS).\n- **Enterprise & Browser:** NetBackup Flex OS has a critical (9.4) privilege escalation flaw (CVE-2026-28197). Grafana OSS (v12.3.0\u201313.2.1) contains a Geomap XSS vulnerability. Google Chrome (<153.0.8010.53) requires urgent patching.\n\n**Key Defensive Actions**\nApply all vendor patches immediately, restrict device-code authentication via Conditional Access, disable default Teams external chats for non-essential users, and monitor AI agent plugin installations alongside EDR/CI-CD logs for anomalous activity.", "creation_timestamp": "2026-09-18T16:02:06.659549Z"}]}