{"vulnerability": "cve-2026-4150", "sightings": [{"uuid": "04e093f5-cc41-4a26-b92f-39ae344316ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4150", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj75w67b652h", "content": "", "creation_timestamp": "2026-04-11T06:00:43.947480Z"}, {"uuid": "2ee8199e-229b-4a6e-870c-ad46567856de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4150", "type": "published-proof-of-concept", "source": "Telegram/jQJESTxAnDJkcV3IOr4zcsYk9e3AhwwItG0ad6oUuWk-UR8", "content": "", "creation_timestamp": "2026-04-11T03:21:08.000000Z"}, {"uuid": "4e66afee-4da4-4220-be5c-3296808262cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41505", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpamyqrv2t", "content": "\ud83d\udfe0 CVE-2026-41505 - High (8.7)\n\nRELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41505/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-07T17:06:31.307390Z"}, {"uuid": "938b5985-12dc-4bfe-863c-da1f4977fd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41505", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbrbkzfot2h", "content": "CVE-2026-41505 - RELATE: Predictable Token Generation in auth.py and exam.py\nCVE ID : CVE-2026-41505\n \n Published : May 7, 2026, 3:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predic...", "creation_timestamp": "2026-05-07T17:42:49.652230Z"}, {"uuid": "2a6182e9-e42f-420b-abbf-f6bbdaab3197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41501", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mld43oqcmb2n", "content": "CVE-2026-41501 - electerm has Command Injection Vulnerability via runLinux function\nCVE ID : CVE-2026-41501\n \n Published : May 8, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client....", "creation_timestamp": "2026-05-08T06:29:06.415684Z"}, {"uuid": "705fd5d8-c7a6-42d1-a2a1-02231fda6b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41500", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mld4mfolm62v", "content": "CVE-2026-41500 - electerm has Command Injection Vulnerability via runMac function\nCVE ID : CVE-2026-41500\n \n Published : May 8, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. P...", "creation_timestamp": "2026-05-08T06:38:24.314325Z"}, {"uuid": "7768bb44-8301-4638-a57c-1c974b2f5fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41501", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mleli66ktf26", "content": "\ud83d\udccc CVE-2026-41501 - electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability ex... https://www.cyberhub.blog/cves/CVE-2026-41501", "creation_timestamp": "2026-05-08T20:37:08.147777Z"}, {"uuid": "ab2d0f2a-443e-4664-bb85-c9f1d5613e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41507", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlemqt6vvp2q", "content": "\ud83d\udd34 CVE-2026-41507 - Critical (9.8)\n\nmath-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41507/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-08T20:59:52.861197Z"}, {"uuid": "90ed2d13-69cb-4af5-80ee-345b2066ece3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41500", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlhqqra25s2f", "content": "\ud83d\udd34 CVE-2026-41500 - Critical (9.8)\n\nelecterm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41500/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-10T02:49:24.749151Z"}, {"uuid": "d7d9a96a-d54b-4897-b4b3-2822214ba500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41501", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlhqqyc22o2k", "content": "\ud83d\udd34 CVE-2026-41501 - Critical (9.8)\n\nelecterm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41501/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-10T02:49:32.293586Z"}, {"uuid": "3dd1684b-d8e2-4824-be6b-330281f3a9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41500", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mljkqe552225", "content": "\ud83d\udccc CVE-2026-41500 - electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability ex... https://www.cyberhub.blog/cves/CVE-2026-41500", "creation_timestamp": "2026-05-10T20:07:07.883597Z"}, {"uuid": "11f60175-7564-430d-96e5-9728cd91c184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41507", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlo2vqio2r2o", "content": "\ud83d\udccc CVE-2026-41507 - math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim in... https://www.cyberhub.blog/cves/CVE-2026-41507", "creation_timestamp": "2026-05-12T15:08:10.238693Z"}, {"uuid": "c0973ae3-f139-4439-a300-e593fc5237bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4150", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mobofuj3sv2f", "content": "\ud83d\udccc CVE-2026-4150 - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af... https://www.cyberhub.blog/cves/CVE-2026-4150", "creation_timestamp": "2026-06-14T21:07:07.569291Z"}, {"uuid": "ba50663d-e333-4292-a62e-c6625f0b97ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41501", "type": "seen", "source": "https://t.me/shimiscyberworld/1290", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-41501 \u2014 CVSS 9.8\nElecterm Critical Command Injection Flaw Patched (CVE-2026-41501)\n\nCVE-2026-41501 \u2014 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in githu\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-41501 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:12.798621Z"}, {"uuid": "70664dd8-95da-4b26-94a4-73327127220a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41500", "type": "seen", "source": "https://t.me/shimiscyberworld/1317", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-08\n\n\ud83d\udcca 65 vulnerabilities detected today \u2014 16 \ud83d\udd34 Critical, 49 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42826 (10) \u2014 Azure DevOps Critical Info Disclosure: CVE-2026-42826\n  \u2022 CVE-2026-41070 (10) \u2014 CVE-2026-41070: openvpn-auth-oauth2 Critical Bypass in\u2026\n  \u2022 CVE-2026-33109 (9.9) \u2014 CVE-2026-33109: Critical RCE in Azure Managed Instance for\u2026\n  \u2022 CVE-2026-41512 (9.9) \u2014 ai-scanner RCE: Critical JavaScript Injection in\u2026\n  \u2022 CVE-2026-41500 (9.8) \u2014 electerm CVE-2026-41500: Critical Command Injection in\u2026\n  \u2022 CVE-2026-41501 (9.8) \u2014 Electerm Critical Command Injection Flaw Patched\u2026\n  \u2022 CVE-2026-8153 (9.8) \u2014 Universal Robots PolyScope Critical OS Command Injection\u2026\n  \u2022 CVE-2026-41497 (9.8) \u2014 CVE-2026-41497: PraisonAI Multi-Agent System Critical RCE\n  \u2026 and 8 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-32207 (8.8) \u2014 Azure Machine Learning XSS Exposes Data, Allows Spoofing\n  \u2022 CVE-2026-41900 (8.8) \u2014 CVE-2026-41900: OpenLearnX RCE Allows Sandbox Escape and\u2026\n  \u2022 CVE-2026-8137 (8.8) \u2014 Totolink X5000R Buffer Overflow (CVE-2026-8137) Exposed\n  \u2022 CVE-2026-8138 (8.8) \u2014 Tenda CX12L Stack Buffer Overflow (CVE-2026-8138) Risks\u2026\n  \u2022 CVE-2026-5127 (8.8) \u2014 WordPress Plugin Vulnerability: CVE-2026-5127 Allows Code\u2026\n  \u2022 CVE-2026-42275 (8.7) \u2014 zrok WebDAV Vulnerability (CVE-2026-42275) Allows Remote\u2026\n  \u2022 CVE-2026-41524 (8.7) \u2014 Brave CMS XSS Vulnerability: Editor Role Leads to\u2026\n  \u2022 CVE-2026-42047 (8.6) \u2014 CVE-2026-42047: Inngest Exposes Environment Variables via\u2026\n  \u2022 CVE-2026-35435 (8.6) \u2014 Azure AI Foundry M365 Flaw Allows Network Privilege\u2026\n  \u2022 CVE-2026-44339 (8.6) \u2014 PraisonAI Vulnerability Allows Undeclared Tool Invocation\u2026\n  \u2026 and 39 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:12.163089Z"}, {"uuid": "584c8f30-971e-40e7-b608-441bfee5a330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41501", "type": "seen", "source": "https://t.me/shimiscyberworld/1317", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-08\n\n\ud83d\udcca 65 vulnerabilities detected today \u2014 16 \ud83d\udd34 Critical, 49 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42826 (10) \u2014 Azure DevOps Critical Info Disclosure: CVE-2026-42826\n  \u2022 CVE-2026-41070 (10) \u2014 CVE-2026-41070: openvpn-auth-oauth2 Critical Bypass in\u2026\n  \u2022 CVE-2026-33109 (9.9) \u2014 CVE-2026-33109: Critical RCE in Azure Managed Instance for\u2026\n  \u2022 CVE-2026-41512 (9.9) \u2014 ai-scanner RCE: Critical JavaScript Injection in\u2026\n  \u2022 CVE-2026-41500 (9.8) \u2014 electerm CVE-2026-41500: Critical Command Injection in\u2026\n  \u2022 CVE-2026-41501 (9.8) \u2014 Electerm Critical Command Injection Flaw Patched\u2026\n  \u2022 CVE-2026-8153 (9.8) \u2014 Universal Robots PolyScope Critical OS Command Injection\u2026\n  \u2022 CVE-2026-41497 (9.8) \u2014 CVE-2026-41497: PraisonAI Multi-Agent System Critical RCE\n  \u2026 and 8 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-32207 (8.8) \u2014 Azure Machine Learning XSS Exposes Data, Allows Spoofing\n  \u2022 CVE-2026-41900 (8.8) \u2014 CVE-2026-41900: OpenLearnX RCE Allows Sandbox Escape and\u2026\n  \u2022 CVE-2026-8137 (8.8) \u2014 Totolink X5000R Buffer Overflow (CVE-2026-8137) Exposed\n  \u2022 CVE-2026-8138 (8.8) \u2014 Tenda CX12L Stack Buffer Overflow (CVE-2026-8138) Risks\u2026\n  \u2022 CVE-2026-5127 (8.8) \u2014 WordPress Plugin Vulnerability: CVE-2026-5127 Allows Code\u2026\n  \u2022 CVE-2026-42275 (8.7) \u2014 zrok WebDAV Vulnerability (CVE-2026-42275) Allows Remote\u2026\n  \u2022 CVE-2026-41524 (8.7) \u2014 Brave CMS XSS Vulnerability: Editor Role Leads to\u2026\n  \u2022 CVE-2026-42047 (8.6) \u2014 CVE-2026-42047: Inngest Exposes Environment Variables via\u2026\n  \u2022 CVE-2026-35435 (8.6) \u2014 Azure AI Foundry M365 Flaw Allows Network Privilege\u2026\n  \u2022 CVE-2026-44339 (8.6) \u2014 PraisonAI Vulnerability Allows Undeclared Tool Invocation\u2026\n  \u2026 and 39 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:12.310951Z"}, {"uuid": "2be9040b-a0ac-4c16-9135-5e49620540d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41507", "type": "seen", "source": "https://t.me/shimiscyberworld/1306", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-41507 \u2014 CVSS 9.8\nCVE-2026-41507: math-codegen RCE Exposes Apps to Arbitrary Command Execution\n\nCVE-2026-41507 \u2014 math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim into a new Func\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-41507 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:12.716695Z"}, {"uuid": "236cd9f3-821f-43c6-94af-3f00313cd0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41500", "type": "seen", "source": "https://t.me/shimiscyberworld/1289", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-41500 \u2014 CVSS 9.8\nelecterm CVE-2026-41500: Critical Command Injection in Terminal Client\n\nCVE-2026-41500 \u2014 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in githu\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-41500 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:12.759899Z"}, {"uuid": "0883322e-9a25-45d7-9946-48d383e7ad37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41505", "type": "seen", "source": "https://t.me/shimiscyberworld/1280", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-07\n\n\ud83d\udcca 32 vulnerabilities detected today \u2014 8 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-6508 (9.8) \u2014 CVE-2026-6508: Liderahenk Origin Validation Error Allows\u2026\n  \u2022 CVE-2026-7414 (9.8) \u2014 Yarbo Firmware v2.3.9 Critical Hardcoded Credential\u2026\n  \u2022 CVE-2026-7415 (9.8) \u2014 CVE-2026-7415: Yarbo Robot Firmware Exposes Sensitive Data\u2026\n  \u2022 CVE-2026-37709 (9.8) \u2014 Snipe-IT CVE-2026-37709: Critical RCE via Insecure\u2026\n  \u2022 CVE-2026-5791 (9.6) \u2014 DivvyDrive Critical CSRF Vulnerability: CVE-2026-5791 Poses\u2026\n  \u2022 CVE-2026-41589 (9.6) \u2014 CVE-2026-41589: Critical Path Traversal in Wish SSH Server\u2026\n  \u2022 CVE-2026-6795 (9.6) \u2014 DivvyDrive Open Redirect Vulnerability CVE-2026-6795 Rated\u2026\n  \u2022 CVE-2026-41902 (9.1) \u2014 CVE-2026-41902: FreeScout Invite Hash Vulnerability Allows\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-3953 (8.8) \u2014 CVE-2026-3953: Gosoft Proticaret E-Commerce XSS\u2026\n  \u2022 CVE-2026-5784 (8.8) \u2014 DivvyDrive Stored XSS Vulnerability (CVE-2026-5784) Poses\u2026\n  \u2022 CVE-2026-6002 (8.8) \u2014 DivvyDrive XSS Vulnerability (CVE-2026-6002) Poses High Risk\n  \u2022 CVE-2026-42215 (8.8) \u2014 CVE-2026-42215: GitPython Arbitrary Command Execution\u2026\n  \u2022 CVE-2026-41505 (8.7) \u2014 CVE-2026-41505: RELATE Courseware Package Suffers\u2026\n  \u2022 CVE-2025-14341 (8.3) \u2014 CVE-2025-14341: DivvyDrive Vulnerability Allows Excessive\u2026\n  \u2022 CVE-2026-41490 (8.3) \u2014 Dagster Orchestration Platform Vulnerable to SQL Injection\u2026\n  \u2022 CVE-2026-41422 (8.3) \u2014 Daptin Headless CMS SQLi Puts Data at High Risk\n  \u2022 CVE-2026-42284 (8.1) \u2014 CVE-2026-42284: GitPython Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-42214 (7.8) \u2014 NotepadNext CVE-2026-42214: Arbitrary Command Execution via\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:13.555421Z"}, {"uuid": "4a070186-4c13-4b19-b099-d3221342511d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41505", "type": "seen", "source": "https://t.me/shimiscyberworld/1280", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-07\n\n\ud83d\udcca 32 vulnerabilities detected today \u2014 8 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-6508 (9.8) \u2014 CVE-2026-6508: Liderahenk Origin Validation Error Allows\u2026\n  \u2022 CVE-2026-7414 (9.8) \u2014 Yarbo Firmware v2.3.9 Critical Hardcoded Credential\u2026\n  \u2022 CVE-2026-7415 (9.8) \u2014 CVE-2026-7415: Yarbo Robot Firmware Exposes Sensitive Data\u2026\n  \u2022 CVE-2026-37709 (9.8) \u2014 Snipe-IT CVE-2026-37709: Critical RCE via Insecure\u2026\n  \u2022 CVE-2026-5791 (9.6) \u2014 DivvyDrive Critical CSRF Vulnerability: CVE-2026-5791 Poses\u2026\n  \u2022 CVE-2026-41589 (9.6) \u2014 CVE-2026-41589: Critical Path Traversal in Wish SSH Server\u2026\n  \u2022 CVE-2026-6795 (9.6) \u2014 DivvyDrive Open Redirect Vulnerability CVE-2026-6795 Rated\u2026\n  \u2022 CVE-2026-41902 (9.1) \u2014 CVE-2026-41902: FreeScout Invite Hash Vulnerability Allows\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-3953 (8.8) \u2014 CVE-2026-3953: Gosoft Proticaret E-Commerce XSS\u2026\n  \u2022 CVE-2026-5784 (8.8) \u2014 DivvyDrive Stored XSS Vulnerability (CVE-2026-5784) Poses\u2026\n  \u2022 CVE-2026-6002 (8.8) \u2014 DivvyDrive XSS Vulnerability (CVE-2026-6002) Poses High Risk\n  \u2022 CVE-2026-42215 (8.8) \u2014 CVE-2026-42215: GitPython Arbitrary Command Execution\u2026\n  \u2022 CVE-2026-41505 (8.7) \u2014 CVE-2026-41505: RELATE Courseware Package Suffers\u2026\n  \u2022 CVE-2025-14341 (8.3) \u2014 CVE-2025-14341: DivvyDrive Vulnerability Allows Excessive\u2026\n  \u2022 CVE-2026-41490 (8.3) \u2014 Dagster Orchestration Platform Vulnerable to SQL Injection\u2026\n  \u2022 CVE-2026-41422 (8.3) \u2014 Daptin Headless CMS SQLi Puts Data at High Risk\n  \u2022 CVE-2026-42284 (8.1) \u2014 CVE-2026-42284: GitPython Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-42214 (7.8) \u2014 NotepadNext CVE-2026-42214: Arbitrary Command Execution via\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:37.458059Z"}, {"uuid": "6efdb633-5f40-41b7-9eca-f6996497d682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41501", "type": "seen", "source": "https://t.me/shimiscyberworld/1290", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-41501 \u2014 CVSS 9.8\nElecterm Critical Command Injection Flaw Patched (CVE-2026-41501)\n\nCVE-2026-41501 \u2014 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in githu\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-41501 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:39.026363Z"}, {"uuid": "28e2eba2-7ea2-4058-a769-89a1c9292d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41500", "type": "seen", "source": "https://t.me/shimiscyberworld/1289", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-41500 \u2014 CVSS 9.8\nelecterm CVE-2026-41500: Critical Command Injection in Terminal Client\n\nCVE-2026-41500 \u2014 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in githu\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-41500 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:39.061131Z"}, {"uuid": "b8f01492-400d-43f1-a27e-21f970a132e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41507", "type": "seen", "source": "https://t.me/shimiscyberworld/1306", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-41507 \u2014 CVSS 9.8\nCVE-2026-41507: math-codegen RCE Exposes Apps to Arbitrary Command Execution\n\nCVE-2026-41507 \u2014 math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim into a new Func\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-41507 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:39.093600Z"}, {"uuid": "f1fb1548-edfb-41c1-adbb-357b8c20eeb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41501", "type": "seen", "source": "https://t.me/shimiscyberworld/1317", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-08\n\n\ud83d\udcca 65 vulnerabilities detected today \u2014 16 \ud83d\udd34 Critical, 49 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42826 (10) \u2014 Azure DevOps Critical Info Disclosure: CVE-2026-42826\n  \u2022 CVE-2026-41070 (10) \u2014 CVE-2026-41070: openvpn-auth-oauth2 Critical Bypass in\u2026\n  \u2022 CVE-2026-33109 (9.9) \u2014 CVE-2026-33109: Critical RCE in Azure Managed Instance for\u2026\n  \u2022 CVE-2026-41512 (9.9) \u2014 ai-scanner RCE: Critical JavaScript Injection in\u2026\n  \u2022 CVE-2026-41500 (9.8) \u2014 electerm CVE-2026-41500: Critical Command Injection in\u2026\n  \u2022 CVE-2026-41501 (9.8) \u2014 Electerm Critical Command Injection Flaw Patched\u2026\n  \u2022 CVE-2026-8153 (9.8) \u2014 Universal Robots PolyScope Critical OS Command Injection\u2026\n  \u2022 CVE-2026-41497 (9.8) \u2014 CVE-2026-41497: PraisonAI Multi-Agent System Critical RCE\n  \u2026 and 8 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-32207 (8.8) \u2014 Azure Machine Learning XSS Exposes Data, Allows Spoofing\n  \u2022 CVE-2026-41900 (8.8) \u2014 CVE-2026-41900: OpenLearnX RCE Allows Sandbox Escape and\u2026\n  \u2022 CVE-2026-8137 (8.8) \u2014 Totolink X5000R Buffer Overflow (CVE-2026-8137) Exposed\n  \u2022 CVE-2026-8138 (8.8) \u2014 Tenda CX12L Stack Buffer Overflow (CVE-2026-8138) Risks\u2026\n  \u2022 CVE-2026-5127 (8.8) \u2014 WordPress Plugin Vulnerability: CVE-2026-5127 Allows Code\u2026\n  \u2022 CVE-2026-42275 (8.7) \u2014 zrok WebDAV Vulnerability (CVE-2026-42275) Allows Remote\u2026\n  \u2022 CVE-2026-41524 (8.7) \u2014 Brave CMS XSS Vulnerability: Editor Role Leads to\u2026\n  \u2022 CVE-2026-42047 (8.6) \u2014 CVE-2026-42047: Inngest Exposes Environment Variables via\u2026\n  \u2022 CVE-2026-35435 (8.6) \u2014 Azure AI Foundry M365 Flaw Allows Network Privilege\u2026\n  \u2022 CVE-2026-44339 (8.6) \u2014 PraisonAI Vulnerability Allows Undeclared Tool Invocation\u2026\n  \u2026 and 39 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:39.628808Z"}, {"uuid": "ce3e7a0b-ec5e-4bd8-adde-95b35c1d3941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41500", "type": "seen", "source": "https://t.me/shimiscyberworld/1317", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-08\n\n\ud83d\udcca 65 vulnerabilities detected today \u2014 16 \ud83d\udd34 Critical, 49 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42826 (10) \u2014 Azure DevOps Critical Info Disclosure: CVE-2026-42826\n  \u2022 CVE-2026-41070 (10) \u2014 CVE-2026-41070: openvpn-auth-oauth2 Critical Bypass in\u2026\n  \u2022 CVE-2026-33109 (9.9) \u2014 CVE-2026-33109: Critical RCE in Azure Managed Instance for\u2026\n  \u2022 CVE-2026-41512 (9.9) \u2014 ai-scanner RCE: Critical JavaScript Injection in\u2026\n  \u2022 CVE-2026-41500 (9.8) \u2014 electerm CVE-2026-41500: Critical Command Injection in\u2026\n  \u2022 CVE-2026-41501 (9.8) \u2014 Electerm Critical Command Injection Flaw Patched\u2026\n  \u2022 CVE-2026-8153 (9.8) \u2014 Universal Robots PolyScope Critical OS Command Injection\u2026\n  \u2022 CVE-2026-41497 (9.8) \u2014 CVE-2026-41497: PraisonAI Multi-Agent System Critical RCE\n  \u2026 and 8 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-32207 (8.8) \u2014 Azure Machine Learning XSS Exposes Data, Allows Spoofing\n  \u2022 CVE-2026-41900 (8.8) \u2014 CVE-2026-41900: OpenLearnX RCE Allows Sandbox Escape and\u2026\n  \u2022 CVE-2026-8137 (8.8) \u2014 Totolink X5000R Buffer Overflow (CVE-2026-8137) Exposed\n  \u2022 CVE-2026-8138 (8.8) \u2014 Tenda CX12L Stack Buffer Overflow (CVE-2026-8138) Risks\u2026\n  \u2022 CVE-2026-5127 (8.8) \u2014 WordPress Plugin Vulnerability: CVE-2026-5127 Allows Code\u2026\n  \u2022 CVE-2026-42275 (8.7) \u2014 zrok WebDAV Vulnerability (CVE-2026-42275) Allows Remote\u2026\n  \u2022 CVE-2026-41524 (8.7) \u2014 Brave CMS XSS Vulnerability: Editor Role Leads to\u2026\n  \u2022 CVE-2026-42047 (8.6) \u2014 CVE-2026-42047: Inngest Exposes Environment Variables via\u2026\n  \u2022 CVE-2026-35435 (8.6) \u2014 Azure AI Foundry M365 Flaw Allows Network Privilege\u2026\n  \u2022 CVE-2026-44339 (8.6) \u2014 PraisonAI Vulnerability Allows Undeclared Tool Invocation\u2026\n  \u2026 and 39 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:39.724277Z"}]}