{"vulnerability": "cve-2026-78286", "sightings": [{"uuid": "47dff433-3d7f-4ea4-99a6-b85364b55362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2srn2bca23", "content": "\ud83d\udea8 CVE-2026-78286 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78286\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:48.946331Z"}, {"uuid": "537acd15-9cde-4146-83f3-4ed60d253b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu2szcqw2h2p", "content": "CVE-2026-78286 - Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8. Potential RCE. CVSS 9.8. Audit systems & restrict access now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-78286/", "creation_timestamp": "2026-08-27T12:12:09.493945Z"}, {"uuid": "ab1f8247-20f6-4de5-bc8a-c373d0398cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117167405591936091", "content": "CVE-2026-78286 - Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8. Potential RCE. CVSS 9.8. Audit systems & restrict access now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-78286/", "creation_timestamp": "2026-08-27T12:12:09.794614Z"}, {"uuid": "3dcfd33b-7da3-4f6d-88ed-4478a9c6e580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2vt4j7rp2r", "content": "\ud83d\udd34 CVE-2026-78286 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78286/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T13:02:20.679993Z"}, {"uuid": "8eeb87dc-9368-4593-bafa-cdfc13422280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4o53gbml2t", "content": "CVE-2026-78286 - geo controller\nThe Geo Controller add\u2011on for WordPress (versions up to 8.9.8) lets anyone on the internet send specially crafted data that can make the server execute whatever\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#geocontroller #infinitumform #CVE #infosec", "creation_timestamp": "2026-08-28T05:50:04.088456Z"}]}