{"vulnerability": "cve-2026-8906", "sightings": [{"uuid": "e1e7c50b-39f6-4643-96e9-412e507d19f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8906", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6zpts4t2i", "content": "CVE-2026-8906 - WP Promoter\nCVE ID : CVE-2026-8906\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The WP Promoter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or inc...", "creation_timestamp": "2026-05-27T09:29:25.774769Z"}, {"uuid": "ad01a661-b3d8-4f49-8820-4259ae5b7124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89060", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117250878720400223", "content": "Red Hat Advanced Cluster Management for Kubernetes 2 is affected by CVE-2026-89060 (HIGH, CVSS 7.7): managed-cluster identities may access hub Secrets outside their namespace due to authorization flaws. Monitor Red Hat and restrict permissions. https://radar.offseq.com/threat/cve-2026-89060-incorrect-behavior-order-authorization-before-parsing-and-canonicalization-in-red-hat-70cd9b74c8429f45 #OffSeq #Kubernetes #RedHat", "creation_timestamp": "2026-09-11T06:00:26.566190Z"}, {"uuid": "0b202561-26c1-4028-ab2b-2171c24b13ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89060", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv7vakxinq24", "content": "HIGH severity (CVSS 7.7): Red Hat Advanced Cluster Management for Kubernetes 2 allows cross-namespace Secret access due to flawed authorization order (CVE-2026-89060). Check https://radar.offseq.com/threat/cve-2026-89060-incorrect-behavior-order-authorization-before-parsing-and-canonicalization-i...", "creation_timestamp": "2026-09-11T06:00:28.398851Z"}, {"uuid": "113d1d6e-45e7-4427-8d2c-9c9331946c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89060", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvagrmdts52e", "content": "multicluster-observability-addon\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u7ba1\u7406\u5bfe\u8c61\u30af\u30e9\u30b9\u30bf\u306eID\u304c\u540d\u524d\u7a7a\u9593\u5916\u306e\u8a2d\u5b9a\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u53ef\u80fd\u306b\u306a\u308a\u3001\u6a5f\u5bc6\u60c5\u5831\uff08Hub Secrets\uff09\u304c\u653b\u6483\u8005\u5236\u5fa1\u306e\u30af\u30e9\u2026\nCVE-2026-89060 CVSS 7.7 | HIGH", "creation_timestamp": "2026-09-11T11:14:15.151947Z"}, {"uuid": "1b912bea-2677-4991-a0cd-554a2ecb3f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89066", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvb262jwf322", "content": "\ud83d\udfe0 CVE-2026-89066 - High (7.8)\n\nImproper neutralization of special elements used in an OS command in the task synthesis component...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89066/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T17:01:13.059639Z"}, {"uuid": "464c7ded-5833-4aaf-b247-31784caac957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89063", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5o7g3um6hi6cj", "content": "CVE-2026-89063 - Online Scheduling and Appointment Booking System\nCVE ID : CVE-2026-89063\n \n Published : Sept. 16, 2026, 5:16 a.m. | 52\u00a0minutes ago\n \n Description : The Online Scheduling and Appointment Booking System \u2013 Bookly plugin for WordPress is vulnerable to Insecure Dir...", "creation_timestamp": "2026-09-16T07:03:31.087005Z"}, {"uuid": "747cf428-c7dd-4287-99f5-fe65602712f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89063", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvmzzbemgh2c", "content": "WordPress\u306eBookly\u30d7\u30e9\u30b0\u30a4\u30f3\uff08v28.1\u307e\u3067\uff09\u306b\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u9867\u5ba2\u306eAI\u4e88\u7d04\u4f1a\u8a71\u5c65\u6b74\u3092\u95b2\u89a7\u30fb\u6539\u3056\u3093\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-89063 CVSS 7.5 | HIGH", "creation_timestamp": "2026-09-16T11:30:28.191423Z"}]}