{"vulnerability": "cve-2026-9405", "sightings": [{"uuid": "bdcea061-7f76-427b-9016-84ea648f2984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9405", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116633333205979935", "content": "\ud83d\udea8 CVE-2026-9405: CRITICAL OS command injection in Totolink A8000RU (v7.1cu.643_b20200521). No auth needed \u2014 attackers can run remote commands. No patch yet. Restrict web UI access & monitor devices. https://radar.offseq.com/threat/cve-2026-9405-os-command-injection-in-totolink-a80-21e44130 #OffSeq #CVE20269405 #RouterSecurity #Infosec", "creation_timestamp": "2026-05-25T04:30:29.716341Z"}, {"uuid": "95deecfd-e2aa-4562-bb91-ec4420fa7b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9405", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmnnffdp462o", "content": "Critical OS command injection in Totolink A8000RU (v7.1cu.643_b20200521) lets unauthenticated attackers run remote commands. No patch yet \u2014 restrict web UI access & monitor activity. Details: https://radar.offseq.com/threat/cve-2026-9405-os-command-injection-in-totolink-a80-21e44130 #OffSeq #Rout...", "creation_timestamp": "2026-05-25T04:30:32.299936Z"}, {"uuid": "9717e000-323d-4f70-8942-73395252dc5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9405", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motvij2bon2s", "content": "\ud83d\udea8  ALERT: CVE-2026-9405\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable resu", "creation_timestamp": "2026-06-22T03:01:47.643129Z"}, {"uuid": "9b0f1700-2c42-4e15-83e5-d66b7dbee95e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94054", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117300281474870755", "content": "A new vulnerability with increased severity was disclosed for Exim (CVE-2026-94054) https://vuldb.com/vuln/407982", "creation_timestamp": "2026-09-19T23:24:12.411104Z"}, {"uuid": "3ddf474e-5e2e-449d-8155-06d91440c16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94056", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvvvf3lxwo2o", "content": "\ud83d\udfe0 CVE-2026-94056 - High (7.5)\n\nExim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attack...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94056/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T00:01:34.772752Z"}, {"uuid": "3db62d38-5411-4932-8b28-bf730d8dc6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94056", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117303044917613778", "content": "CVE-2026-94056 - Info disclosure in Exim allows attackers to read uninitialized stack memory via Proxy-Protocol. CVSS 7.5. Update to 4.100.1 or later now. #CVE #Exim #infosec\nhttps://www.valtersit.com/cve/CVE-2026-94056/", "creation_timestamp": "2026-09-20T11:06:59.880280Z"}]}