{"vulnerability": "cve-2026-67399", "sightings": [{"uuid": "e4e5ce7d-ca3c-4548-9c82-a70c11d5a157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mun2rrmtsc2d", "content": "\u26a0\ufe0f PATCH NOW\n\nWHMCS, the billing platform many hosting firms run, has a critical flaw (CVE-2026-67399): a stranger with no login can run code on the server.\n\nAffects 9.x before 9.0.8 and 8.x before 8.13.7. No workaround.\n\nPatch now.", "creation_timestamp": "2026-09-03T18:19:00.756124Z"}, {"uuid": "22bb0b14-fc94-4ab8-b441-22f3f8573fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mup3vpdm4325", "content": "WHMCS CVE-2026-67399: if you cannot upgrade to 8.13.7 or 9.0.8 yet, we published a stopgap hook that blocks the payload types this bug most likely needs.\n\nNot a fix. Copy it, test it, delete it after you patch.", "creation_timestamp": "2026-09-04T13:44:24.721100Z"}, {"uuid": "5810d156-a8a2-4828-ad04-b644b4d3b43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muttwsd2f42t", "content": "CVE-2026-67399 is trending. Hype score 2, currently #10 on cvemon.\n\nCurrently trending CVE - Hype Score: 2\n\nhttps://cvemon.intruder.io/cves/CVE-2026-67399", "creation_timestamp": "2026-09-06T11:05:09.998361Z"}, {"uuid": "bba7cc3b-cbd6-4df2-91fd-8c538e355088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pilsb52b", "content": "CVE-2026-67399 - whmcs\nVersions of WHMCS prior to 9.0.8 and 8.13.7 can be tricked into loading malicious data, which may let an outsider execute commands on your server. This could lead to data theft, service\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#whmcs #webpros #CVE #infosec", "creation_timestamp": "2026-09-14T21:50:08.916671Z"}, {"uuid": "0736ee88-ac5b-4882-acbf-e1e6ff293cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67399", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4rczhxn2w", "content": "\ud83d\udea8 CVE-2026-67399 \u2014 CVSS 9.3 CRITICAL\n\nDeserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attacke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67399\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:09:03.991659Z"}]}