{"vulnerability": "cve-2026-8902", "sightings": [{"uuid": "53299747-449e-43a7-afb1-a4af65973b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntmuwjlr62h", "content": "CVE-2026-8902 - AJAX Report Comments\nCVE ID : CVE-2026-8902\n \n Published : June 9, 2026, 5:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The AJAX Report Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4. T...", "creation_timestamp": "2026-06-09T07:02:29.131748Z"}, {"uuid": "8f34d19d-3b09-496b-8030-5dd6a2c4d843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8902", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnzmqqeu5s2h", "content": "CVE-2026-8902 report-comments (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #report-comments", "creation_timestamp": "2026-06-11T16:16:06.840505Z"}, {"uuid": "212591db-4ad8-416c-85e6-e4e4968eb21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89023", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvivllr7222r", "content": "\ud83d\udfe0 CVE-2026-89023 - High (8.6)\n\nThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89023/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-14T20:00:36.691703Z"}, {"uuid": "478f4d01-a6b0-4862-a2d6-572d21f1cbb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89023", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5omofnt64v5up", "content": "CVE-2026-89023 - ThemeAtelier Domain For Sale\nCVE ID : CVE-2026-89023\n \n Published : Sept. 14, 2026, 7:17 p.m. | 42\u00a0minutes ago\n \n Description : ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoi...", "creation_timestamp": "2026-09-14T20:44:51.550961Z"}, {"uuid": "b8e55587-679c-4be4-91cc-f39223fda282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89025", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvkyofw5es2b", "content": "\ud83d\udfe0 CVE-2026-89025 - High (7.5)\n\nHirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89025/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T16:01:15.045151Z"}, {"uuid": "03874ce7-60b2-4374-afc9-ddcc37de528d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89022", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvl7spsncu2g", "content": "\ud83d\udea8 CVE-2026-89022 \u2014 CVSS 9.1 CRITICAL\n\nBookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89022\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T18:08:52.273256Z"}, {"uuid": "e741a3a1-33e6-4067-a00c-5cccf72334dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvl7sxnjy62j", "content": "\ud83d\udea8 CVE-2026-89026 \u2014 CVSS 9.3 CRITICAL\n\nThe Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89026\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T18:08:59.695095Z"}, {"uuid": "f8799d0e-22d6-4bcb-93ef-7d6fe3473cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvlagwcy572w", "content": "CVE-2026-89026 - issabel framework\nThe Issabel Framework that powers Issabel PBX includes a built-in secret that is the same on every installation. Because the secret is identical, anyone\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#issabelframework #issabelfoundation #CVE #infosec", "creation_timestamp": "2026-09-15T18:20:09.391633Z"}, {"uuid": "c662397d-d87f-49fb-b6a9-974ff58acdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89022", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvlc4i3dql2w", "content": "CVE-2026-89022 - bookstack\nBookStack versions before 26.05.5 let anyone use a social login to log in as any existing user without a password. The flaw occurs because the system does not check which\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bookstack #bookstackapp #CVE #infosec", "creation_timestamp": "2026-09-15T18:50:06.854229Z"}, {"uuid": "8657b274-a672-4a3f-afd8-16647bdfca88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvn7wjfsa32b", "content": "A hard-coded JWT key in Issabel PBX (CVE-2026-89026) enables unauthenticated OS command execution\u2014urgent patch needed. #SecurityNews #PBX #CVE2026 #JWT #Issabel #Vulnerability #Cybersecurity thedailytechfeed.com/critical-cve...", "creation_timestamp": "2026-09-16T13:16:18.870159Z"}, {"uuid": "980cc544-c1e8-4b44-b60b-082dd67e3fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mvnadwwqzs26", "content": "Kritieke kwetsbaarheid in Issabel Framework opent deuren voor systeemovername\n\nEen kritieke beveiligingskwetsbaarheid, met de identificatiecode CVE-2026-89026, is ontdekt in het Issabel Framework, dat gebruikt wordt voor Issabel PBX-implementaties. De kwetsbaarheid is door VulnCheck beoor...", "creation_timestamp": "2026-09-16T13:23:49.543484Z"}, {"uuid": "595f29de-e593-48f0-bef6-e7ff537aacb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvnl7mcrrr2u", "content": "\ud83e\udd16 CVE-2026-89026 (CVSS 9.8): unauthenticated OS command execution in the Issabel Framework PBX, actively exploited. Hard-coded flaw lets remote attackers run arbitrary commands.\n\nhttps://thehackernews.com/2026/09/attackers-exploit-issabel-framework.html", "creation_timestamp": "2026-09-16T16:38:14.924870Z"}, {"uuid": "3906ac8f-ee0e-4c1a-b7ba-29729ba35c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvnkyg6knd22", "content": "CVE-2026-89026 enables unauthenticated remote command execution in Issabel Framework via a hard-coded JWT signing key.\n", "creation_timestamp": "2026-09-16T16:34:14.542227Z"}, {"uuid": "c9ebc3c9-431e-4bc6-9a27-4a181b1c22a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvnlercf6y2c", "content": "Issabel Framework\u306e\u8106\u5f31\u6027(CVE-2026-89026)\u304c\u60aa\u7528\u3055\u308c\u3001\u8a8d\u8a3c\u306a\u3057\u3067OS\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3002", "creation_timestamp": "2026-09-16T16:41:09.283466Z"}, {"uuid": "e98c19ca-79d7-4acf-89ea-d30113424000", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c306c704-d4c2-42b1-9868-8974a4751715", "content": "", "creation_timestamp": "2026-09-16T17:00:34.422909Z"}, {"uuid": "7cb4ba6a-8909-45eb-9da3-2671d5505f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89026", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mvnmxyqcgm2h", "content": "CVE-2026-89026: Hard-Coded JWT Key Enables RCE on Issabel PBX", "creation_timestamp": "2026-09-16T17:09:47.962502Z"}]}