{"vulnerability": "cve-2026-8917", "sightings": [{"uuid": "18a89b20-9a5f-43d9-a777-cba27c5845e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8917", "type": "seen", "source": "https://bsky.app/profile/gamerbase-nl.bsky.social/post/3msvcdvci7427", "content": "CVE-2026-8917 geeft aanvallers beheerdersrechten. Update Armoury Crate en GPU Tweak nu. #ASUS #ROGAlly #Beveiliging #PCGaming\n\ngamerbase.nl/nieuws/algem...", "creation_timestamp": "2026-08-12T14:05:18.259322Z"}, {"uuid": "fff95a5e-125f-416b-89be-dc00ae51dc48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8917", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gq4s6uzcwa454", "content": "CVE-2026-8917 - ASUS Software Arbitrary Memory Write Vulnerability\nCVE ID : CVE-2026-8917\n \n Published : Aug. 11, 2026, 2 a.m. | 30\u00a0minutes ago\n \n Description : Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allow...", "creation_timestamp": "2026-08-11T03:09:12.441940Z"}, {"uuid": "4e2304c2-6543-427b-971d-bc6a691a65f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8917", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117078422749026103", "content": "Asus posted an advisory today. Scroll down for the full list:\nCVE-2026-8917: Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin https://www.asus.com/security-advisory/\nPC Gamer: It's time to update Asus Armoury Crate and several other Asus software tools again, as another high severity security vulnerability has been discovered https://www.pcgamer.com/software/security/its-time-to-update-asus-armoury-crate-and-several-other-asus-software-tools-again-as-another-high-severity-security-vulnerability-has-been-discovered/ #infosec #vulnerability #Asus", "creation_timestamp": "2026-08-11T19:02:37.477664Z"}, {"uuid": "04e48353-313d-4bd2-9ddd-d49961340b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:23.450982Z"}, {"uuid": "329b06ad-5013-44c7-b5f5-9220a5a332d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:28.412756Z"}, {"uuid": "c2efbcc6-0d78-4a4c-b8be-96e28790e283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:30.612880Z"}, {"uuid": "ef47b048-4e58-4bb6-8e3c-0724f1817023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89175", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:15.947831Z"}, {"uuid": "7e44ae53-70a1-4796-9246-d9d6b0535350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89173", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:18.151301Z"}, {"uuid": "7a2d8072-9f85-45f7-a17e-49822939095f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:20.348338Z"}, {"uuid": "71b7e582-0f88-484a-958f-68e4b3b1a60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-89179", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html", "content": "", "creation_timestamp": "2026-09-11T08:45:25.675002Z"}, {"uuid": "a0815442-ad98-45b2-ba6d-c5f58d0fea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eye6iojklzlt4", "content": "CVE-2026-89178 - Howyar\uff5cWeenyGenius - Origin Validation Error\nCVE ID : CVE-2026-89178\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. ...", "creation_timestamp": "2026-09-11T09:39:57.477411Z"}, {"uuid": "33c0fa34-047d-48b2-a5a1-5a1c324bf7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bdqk3pzte55i2", "content": "CVE-2026-89177 - Howyar\uff5cWeenyGenius - Use of Insecure Protocol\nCVE ID : CVE-2026-89177\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability....", "creation_timestamp": "2026-09-11T09:45:57.673691Z"}, {"uuid": "2d6cc98f-ed9a-4af0-86ab-8c9558750d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m", "content": "CVE-2026-89176 - Howyar\uff5cWeenyGenius - Missing Authentication\nCVE ID : CVE-2026-89176\n \n Published : Sept. 11, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerab...", "creation_timestamp": "2026-09-11T09:51:57.264324Z"}, {"uuid": "662eb18c-8697-4081-850f-6054587dcb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89178", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvag3ckrxd2w", "content": "\ud83d\udfe0 CVE-2026-89178 - High (8.8)\n\nWeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Er...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89178/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:01:46.192329Z"}, {"uuid": "0f2d4bdb-91ce-4dce-b5bd-276b87579570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzfoddg2o", "content": "\ud83d\udfe0 CVE-2026-89174 - High (7.5)\n\nSmart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-for...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89174/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:42.066027Z"}, {"uuid": "b4335de4-9605-49f2-bef4-51b6bc2b2968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89176", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzmq4rs23", "content": "\ud83d\udfe0 CVE-2026-89176 - High (8.8)\n\nWeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Aut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89176/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:00:49.472211Z"}, {"uuid": "ce1f1d7f-e66e-4914-bfc4-8d94a3965e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89177", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvag33lpav24", "content": "\ud83d\udfe0 CVE-2026-89177 - High (8.8)\n\nWeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Proto...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89177/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T11:01:38.679473Z"}, {"uuid": "ead633a3-da4b-484c-918f-25513b8ff1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89174", "type": "seen", "source": "https://gist.github.com/ichintu/8790859bbfbdbc3eff56fbadf683426f", "content": "This threat intelligence digest covers critical vulnerabilities, emerging attack techniques, and enterprise security trends:\n\n* **Actively Exploited & High-Severity Vulnerabilities:** Mikrotik RouterOS and PaperCut face active exploitation requiring immediate patching. New CVEs reveal missing brute-force protection in Kingdom Communication intercoms (CVE-2026-89174) and SAML response tampering in HPE IceWall (CVE-2026-73784).\n* **Advanced Attack Techniques:** Threat actors are bypassing MFA using session/OAuth cookie replay and passkey-themed AiTM phishing to compromise Microsoft 365 accounts, often evading Entra ID detection. The Google Play Early Access program poses enterprise risks due to unvetted, potentially malicious apps that bypass public reviews.\n* **Enterprise & AI Shifts:** ServiceNow is transitioning to consumption-based pricing and integrating AI to unify ITSM and security, bolstered by its $7.75B Armis acquisition to fix flawed CMDBs and expand into OT/IoT.\n* **Research & Guidance:** Security researchers recommend parsing AD CS certificate flags bit-by-bit (rather than using static integers) to accurately identify ESC4\u2192ESC1 attack paths. The CSA also formalizes a continuous Zero Trust microsegmentation framework, emphasizing both topology-defined and connection-defined controls to reduce lateral movement and credential theft.\n\n**Bottom Line:** Immediate patching is critical for Mikrotik, PaperCut, Kingdom, and HPE products. Defenses should prioritize phishing-resistant MFA, strict app governance, and a hybrid segmentation model aligned with Zero Trust principles.", "creation_timestamp": "2026-09-11T12:01:56.694992Z"}]}