{"vulnerability": "cve-2026-77770", "sightings": [{"uuid": "cf952752-988f-4220-9f31-db2106f26ae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77770", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv65vpxz5s2r", "content": "CVE-2026-77770 - miniorange 2fa\nThe MiniOrange Two\u2011Factor Authentication plugin for WordPress (versions before 6.3.1 and before 19.3) can be tricked into removing important configuration entries\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#miniorange2fa #unknown #CVE #infosec", "creation_timestamp": "2026-09-10T13:30:09.020336Z"}, {"uuid": "6a58e83e-fec8-4fbe-949b-8efe811945cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77770", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvarilwsfk2r", "content": "\u3010\u7dca\u6025\u3011miniOrange 2FA\uff08WordPress\uff09\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-77770 / CVSS v3.1 10.0 CRITICAL\uff09\n\n\u672a\u8a8d\u8a3c\u306e\u8a2a\u554f\u8005\u304c\u30b5\u30a4\u30c8\u306e\u8a2d\u5b9a\u5024\uff08option\uff09\u3092\u4efb\u610f\u306b\u524a\u9664\u3067\u304d\u3001\u5168\u7ba1\u7406\u8005\u306e\u7de0\u3081\u51fa\u3057\u3084\u5168\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u7121\u52b9\u5316\u306b\u3064\u306a\u304c\u308a\u307e\u3059\u3002\u5b9f\u8a3c\u30b3\u30fc\u30c9\u306f10\u67088\u65e5\u306b\u516c\u958b\u4e88\u5b9a\u3002\n\u5bfe\u51e6: \u7121\u6599\u7248\u306f6.3.1\u3001Pro\u7248\u306f19.3\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/min...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-11T14:26:04.250451Z"}]}