{"vulnerability": "cve-2026-7658", "sightings": [{"uuid": "1e932d80-372f-4bd1-b789-0d440990db31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "content": "Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n  CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in", "creation_timestamp": "2026-08-30T01:00:33.275003Z"}, {"uuid": "bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mubaoczury2g", "content": "\ud83e\udd16 Five critical WordPress plugin/theme flaws (WPMU DEV Dashboard, Avada, TranslatePress, Pods, GiveWP) lead to auth bypass, account takeover and RCE. CVE-2026-76581, CVSS 9.8.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T01:32:28.773582Z"}, {"uuid": "6297a776-7cf4-4aa6-bde3-5234cbfc5ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-02T01:00:15.299033Z"}, {"uuid": "6bfd1759-ec78-4890-a28a-595fccae0b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-29T21:00:04.140479Z"}, {"uuid": "531eec25-d9a6-4106-ba4f-541ba354e74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/0_ZePU3z1OawFEHN1iA2HBha57r29KdDO83DysbbQUG6xbo", "content": "", "creation_timestamp": "2026-09-02T01:00:17.438639Z"}, {"uuid": "1a2218ca-1f42-4a32-a409-ea0a79dbff93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-30T00:00:38.227906Z"}, {"uuid": "eaa6c6c2-91d7-43d5-a51e-18c3dcc33286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/M1tcQDXp0xt9SGNq1y4EHMMYm_mdZJtAONErVuHBShI8RHI", "content": "", "creation_timestamp": "2026-09-02T01:00:17.720760Z"}, {"uuid": "795ef4bc-56da-454f-9402-622d32a3cba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "content": "Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n  CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in", "creation_timestamp": "2026-08-29T19:00:38.027849Z"}, {"uuid": "0f30b82c-2566-4719-9504-ea456d36ce56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76589", "type": "published-proof-of-concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "content": "", "creation_timestamp": "2026-08-20T13:00:04.177196Z"}, {"uuid": "0036b76e-13d4-4cf2-b9c6-041012b82da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76584", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthq6vglus2r", "content": "\ud83d\udd34 CVE-2026-76584 - Critical (9.9)\n\nA security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76584/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T22:00:58.518322Z"}, {"uuid": "884f06f1-8cfc-453d-857b-80aae4d21c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76589", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3fyps7rs64drt", "content": "CVE-2026-76589 - TRENDnet TEW-755AP mycli FUN_401000 stack-based overflow\nCVE ID : CVE-2026-76589\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of t...", "creation_timestamp": "2026-08-19T22:48:47.979372Z"}, {"uuid": "ae583867-ed9e-443a-a829-f97df74fc7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76589", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjwdbfm2z", "content": "\ud83d\udd34 CVE-2026-76589 - Critical (9.9)\n\nA vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_4010...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76589/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:49.915561Z"}, {"uuid": "3f514a99-ac87-4d9f-9573-9ea645a54ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76583", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mti2peshry2p", "content": "CVE-2026-76583 - Command injection in TRENDnet TV-IP751WIC via set_time.cgi. CVSS 7.4. Exploit public, no patch. Disable remote access now. #CVE #TRENDnet #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-76583/", "creation_timestamp": "2026-08-20T01:09:08.269122Z"}, {"uuid": "868e7f0d-b528-48c4-a299-5ba52986e5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76583", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117125162450089157", "content": "CVE-2026-76583 - Command injection in TRENDnet TV-IP751WIC via set_time.cgi. CVSS 7.4. Exploit public, no patch. Disable remote access now. #CVE #TRENDnet #infosec\nhttps://www.valtersit.com/cve/CVE-2026-76583/", "creation_timestamp": "2026-08-20T01:09:11.705952Z"}, {"uuid": "fa470478-73fd-46d7-b0e8-5c40976471e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76584", "type": "published-proof-of-concept", "source": "Telegram/87w5sTCGBPeMw8h3c2UBbBkEJEq_eSW1iUUA_ENsR3qsz5w", "content": "", "creation_timestamp": "2026-08-21T00:00:08.043346Z"}, {"uuid": "f1da12e3-0c0f-4cb3-8e03-593d513dbc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76589", "type": "published-proof-of-concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "content": "", "creation_timestamp": "2026-08-21T00:00:09.693518Z"}, {"uuid": "318ba354-0c5c-491a-aa6a-1fa2c4dcadf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76589", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125954031231321", "content": "TRENDnet TEW-755AP is affected by CVE-2026-76589 (CRITICAL, CVSS 9.4): stack-based buffer overflow in /sbin/mycli, exploitable remotely. Public exploit; no patch yet. Restrict device access and monitor. https://radar.offseq.com/threat/cve-2026-76589-stack-based-buffer-overflow-in-trendnet-tew-755ap-b22775c9ba4ec937 #OffSeq #CVE202676589 #IoTSecurity", "creation_timestamp": "2026-08-20T04:30:26.993004Z"}, {"uuid": "d5c5368b-e7f6-4d3d-8bd6-ace4f5d8eed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76589", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtifxfhfmb2t", "content": "CRITICAL stack-based buffer overflow (CVE-2026-76589) in TRENDnet TEW-755AP. Remote code execution risk \u2014 public exploit, no patch. Restrict device access immediately. https://radar.offseq.com/threat/cve-2026-76589-stack-based-buffer-overflow-in-trendnet-tew-755ap-b22775c9ba4ec937 #OffSeq #CVE202...", "creation_timestamp": "2026-08-20T04:30:29.844928Z"}, {"uuid": "dcff4d86-81ff-46de-b74f-91bf42d1af19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/pphm_HackerNews/2924", "content": "\ud83d\udd34 Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover\n\nA critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin, which could allow unauthenticated attackers to gain administrator-level access to vulnerable sites configured with Hub Single Sign-On (SSO).\n\nThis vulnerability, tracked as CVE-2026-76581, has a CVSS score of 9.8 and affects WPMU DEV Dashboard versions 5.0.1 and earlier. The plugin has approximately 350,000 active installations. WPMU DEV released version 5.0.2 on August 24, 2026, to address this issue.", "creation_timestamp": "2026-08-28T21:00:04.318436Z"}, {"uuid": "68cdd855-84d1-4520-b8a3-d8aca38470fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/pphm_HackerNews/2924", "content": "\ud83d\udd34 Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover\n\nA critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin, which could allow unauthenticated attackers to gain administrator-level access to vulnerable sites configured with Hub Single Sign-On (SSO).\n\nThis vulnerability, tracked as CVE-2026-76581, has a CVSS score of 9.8 and affects WPMU DEV Dashboard versions 5.0.1 and earlier. The plugin has approximately 350,000 active installations. WPMU DEV released version 5.0.2 on August 24, 2026, to address this issue.", "creation_timestamp": "2026-08-29T00:00:07.351709Z"}, {"uuid": "dbfead8c-dad4-494f-a202-2d7492b2b690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6scogo2m2m", "content": "CVE-2026-76581\nWordPress sites that use the WPMU DEV Dashboard plugin version 5.0.1 or earlier are at risk. Because of a flaw in how the plugin validates login requests, someone without credentials can trick the system into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T02:10:06.021732Z"}, {"uuid": "af69113d-ecc8-4cf6-8f7a-87c9e05a0ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jfdzpzmenewmv", "content": "CVE-2026-76581 - WPMU DEV Dashboard\nCVE ID : CVE-2026-76581\n \n Published : Aug. 28, 2026, 8:16 a.m. | 19\u00a0minutes ago\n \n Description : The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to ...", "creation_timestamp": "2026-08-28T08:48:25.620186Z"}, {"uuid": "dbed10be-46c6-4ea9-b946-2ccf434a67e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu54iwtviv2y", "content": "\ud83d\udea8 CVE-2026-76581 \u2014 CVSS 9.8 CRITICAL\n\nThe WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76581\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T10:07:14.181808Z"}, {"uuid": "0bd71e06-e2b0-48c1-9c13-98a8c1827d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-30T03:00:04.578271Z"}, {"uuid": "a2a94bfe-83ba-4419-9047-09585573e943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76586", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mubmc4vcct2m", "content": "\ud83d\udfe0 CVE-2026-76586 - High (7.5)\n\nThe Appointment Booking Calendar Plugin and Scheduling Plugin  WordPress plugin before 1.6.3 does...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76586/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T05:00:26.085210Z"}, {"uuid": "15339f6e-2e23-46bb-b1a0-e4a2f4510d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mucjn27obl2y", "content": "\ud83e\udd16 CVE-2026-76581 (CVSS 9.8): auth bypass in WPMU DEV Dashboard; critical flaws also in Avada, TranslatePress, Pods, GiveWP \u2014 WordPress site takeover or RCE possible.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T13:45:29.602207Z"}, {"uuid": "73573059-7ba9-478a-9e69-448ee83f172b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-31T00:00:46.706306Z"}, {"uuid": "1e6f5016-9129-4996-9f07-3d602818b8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/mohamedation.com/post/3mukbugb7af2v", "content": "CVE-2026-15981 is the miniOrange/SAML authentication bypass (the openssl_verify -1 treated as true bug). The WPMU DEV Dashboard issue that Wordfence wrote about is actually CVE-2026-76581 \u2014 the Hub SSO HMAC canonicalization confusion in versions \u2264 5.0.1.", "creation_timestamp": "2026-09-02T15:47:44.704159Z"}, {"uuid": "385b251b-60d4-4ab1-8781-f86ad110442f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/M1tcQDXp0xt9SGNq1y4EHMMYm_mdZJtAONErVuHBShI8RHI", "content": "", "creation_timestamp": "2026-09-03T00:00:37.770619Z"}, {"uuid": "75fbf1c5-0ce4-4f67-9041-59bcf03e2597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-03T00:00:39.006744Z"}, {"uuid": "e4da3fe3-62af-470f-9bdb-b06f1b14c02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/0_ZePU3z1OawFEHN1iA2HBha57r29KdDO83DysbbQUG6xbo", "content": "", "creation_timestamp": "2026-09-03T00:00:38.553914Z"}]}