{"vulnerability": "cve-2026-8904", "sightings": [{"uuid": "d5013219-c7c2-4ef7-b3a1-0fdf0e47c217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8904", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntn5ysy4q2v", "content": "CVE-2026-8904 - FastPicker, an order picker and order management system (oms) for WooCommerce on steroids\nCVE ID : CVE-2026-8904\n \n Published : June 9, 2026, 5:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The FastPicker, an order picker and order management system (oms) f...", "creation_timestamp": "2026-06-09T07:07:33.710385Z"}, {"uuid": "ddebd76b-8e86-4550-8425-1d46271510d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8904", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mo225w5h2k26", "content": "CVE-2026-8904 fastpicker (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #fastpicker", "creation_timestamp": "2026-06-11T20:16:08.073579Z"}, {"uuid": "17e30a87-9e46-49e8-abf8-993c7a34e2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89042", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6o4awkmv25", "content": "CVE-2026-89042 - passport-saml-encrypted\nThe passport-saml-encrypted library used for single sign\u2011on can accept login messages that lack a valid digital signature. This means an attacker could send a fabricated\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#krakenjs #CVE #infosec", "creation_timestamp": "2026-09-10T18:20:08.138683Z"}, {"uuid": "a5ee9eed-4f15-4def-ab71-ad54851b8136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89046", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qffx5pc2s", "content": "\ud83d\udfe0 CVE-2026-89046 - High (8.2)\n\nzstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.ge...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89046/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-10T19:01:03.241160Z"}, {"uuid": "3b01ba31-b069-4610-9343-de229dedfdc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89042", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qfn47t62m", "content": "\ud83d\udd34 CVE-2026-89042 - Critical (9.1)\n\npassport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an option...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89042/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-10T19:01:11.504908Z"}, {"uuid": "e561ef30-620a-486c-afb1-4a9763484998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89043", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6qvntudj22", "content": "CVE-2026-89043 - passport-saml-encrypted\nThe passport-saml-encrypted sign\u2011in component, often used for single sign\u2011on, checks a digital signature and the user\u2019s identity in separate steps. This separation lets an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#krakenjs #CVE #infosec", "creation_timestamp": "2026-09-10T19:10:07.666838Z"}, {"uuid": "77b7a641-72dd-4578-8124-2be7539ed680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89049", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6rhjxnwz22", "content": "CVE-2026-89049 - amazon ssm agent\nThe Amazon Systems Manager Agent (SSM) on your servers could be tricked into connecting to internal network addresses that are supposed to be blocked. A user who already has access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aws #CVE #infosec", "creation_timestamp": "2026-09-10T19:20:07.430447Z"}, {"uuid": "6f630310-3738-4ba2-8295-cd0640195fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89042", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6u6qhqkr22", "content": "\ud83d\udea8 CVE-2026-89042 \u2014 CVSS 9.3 CRITICAL\n\npassport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert op...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89042\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T20:08:53.171889Z"}, {"uuid": "218735c7-dbc2-43c8-823c-018d4d10218d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89043", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6u6yq6fm2r", "content": "\ud83d\udea8 CVE-2026-89043 \u2014 CVSS 9.1 CRITICAL\n\npassport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89043\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T20:09:01.656084Z"}, {"uuid": "c6c542e1-362d-412d-9fca-48fb0d6ac14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89049", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mvigipepbk2a", "content": "Kritieke kwetsbaarheid in AWS SSM Agent maakt omzeilen van beveiligingsbeperking\n\nEen kritieke kwetsbaarheid, aangeduid als CVE-2026-89049, is ontdekt in de AWS Systems Manager Agent (SSM Agent) en treft versies ouder dan 3.3.4851.0. De fout is inmiddels verholpen in versie 3.3.4851.0. Deze ...", "creation_timestamp": "2026-09-14T15:30:32.977961Z"}, {"uuid": "d301902c-2c46-4f24-aa03-d4ff21aff022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89049", "type": "seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mvj7ygbjkx2x", "content": "AWS SSM Agent \u306e\u8106\u5f31\u6027(CVE-2026-89049) \u306e\u88ab\u5bb3\u304c\u3042\u3063\u305f\u304b\u3069\u3046\u304b\u3092 CloudTrail \u3067\u78ba\u8a8d\u3059\u308b\u65b9\u6cd5\nhttps://zenn.dev/cscloud_blog/articles/4d6e13b853109e", "creation_timestamp": "2026-09-14T23:06:45.189756Z"}, {"uuid": "e5aabcfe-2726-4432-b182-f38e2c9b2607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89040", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljglfa3n24", "content": "\ud83d\udd34 CVE-2026-89040 - Critical (9.8)\n\nTencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89040/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T21:01:03.326097Z"}, {"uuid": "623d5a4a-946b-4174-ab32-205da92ae5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89040", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvlzlkgw752n", "content": "CVE-2026-89040 - mass service engine in cluster (msec)\nThe Tencent Mass Service Engine in Cluster can be tricked by an unauthenticated attacker sending a specially crafted web request that includes\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tencent #CVE #infosec", "creation_timestamp": "2026-09-16T01:50:08.168634Z"}, {"uuid": "953ca7d3-4738-4fba-a5cf-9e3c336bb084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89049", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mvmfyqnxuc26", "content": "AWS Systems Manager Agent\u306b\u8106\u5f31\u6027 CVE-2026-89049\u3000Session Manager\u306e\u5236\u9650\u56de\u907f\u3067IAM\u4e00\u6642\u8a8d\u8a3c\u60c5\u5831\u3092\u53d6\u5f97\u3055\u308c\u308b\u53ef\u80fd\u6027 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-16T05:32:17.645658Z"}]}