{"vulnerability": "cve-2026-9414", "sightings": [{"uuid": "f51f904f-f52a-4e5c-bf94-28dc7e48dbd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fzxp3dzmb4w2n", "content": "CVE-2026-94142 - BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where\nCVE ID : CVE-2026-94142\n \n Published : Sept. 21, 2026, 5:16 a.m. | 18\u00a0minutes ago\n \n Description : A security vulnerability has been detected in BioStar Temperature Monitor...", "creation_timestamp": "2026-09-21T05:57:40.282266Z"}, {"uuid": "d4f1f889-a01f-4166-a14e-065c52b8410c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94142", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvyzvrnydn24", "content": "BioStar Temp Monitor Utility 1.2.1806.2200 faces CRITICAL CVE-2026-94142: local attackers can perform arbitrary memory writes. No patch \u2014 limit local access. https://radar.offseq.com/threat/cve-2026-94142-write-what-where-condition-in-biostar-temperature-monitor-utility-b89c455f336372e0 #OffSeq #...", "creation_timestamp": "2026-09-21T06:00:28.663330Z"}, {"uuid": "9e18efeb-9b3c-45ca-a9eb-a082f3c2dd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94142", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvz243m65c2b", "content": "\ud83d\udfe0 CVE-2026-94142 - High (8.8)\n\nA security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94142/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-21T06:04:01.166561Z"}, {"uuid": "98661e5e-57e0-4640-a739-ce7d6e7f9b11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94146", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvz6woqklk2x", "content": "BioStar BIOS Update Utility 1.9.7.3 faces CRITICAL CVE-2026-94146: local write-what-where flaw with public exploit. No vendor fix. Restrict local access now. https://radar.offseq.com/threat/cve-2026-94146-write-what-where-condition-in-biostar-bios-update-utility-47de5318713632c6 #OffSeq #CVE20269...", "creation_timestamp": "2026-09-21T07:30:27.769140Z"}, {"uuid": "1cea4b98-de04-418a-a06e-ffda83e2379f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94142", "type": "seen", "source": "https://gist.github.com/ichintu/c888a270fbf834dd12a0076ed8bbb3e4", "content": "This daily threat intelligence briefing covers three key developments:\n\n\u2022 **Jade Sleet Breach:** North Korean threat group Jade Sleet compromised a small Indian IT firm by specifically targeting developers, deploying FLATROOF and ROOFDECK backdoors (reported by SentinelOne).\n\u2022 **CVE-2026-94142 (High/Local):** A write-what-where vulnerability in the BioStar Temperature Monitor Utility\u2019s driver is publicly exploitable. The vendor has not responded to early notifications.\n\u2022 **CVE-2026-94101 (Critical/Remote):** A buffer overflow in the Netcore NBR200V2 router is publicly available for exploitation, with the vendor also remaining unresponsive.\n\nBoth CVEs were published on September 21, 2026, and pose immediate risk due to publicly disclosed, functional exploits.", "creation_timestamp": "2026-09-21T08:02:32.453516Z"}, {"uuid": "90dbf165-1539-4d5b-b871-28821bc4832f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94146", "type": "seen", "source": "https://gist.github.com/ichintu/b0ff4b467c604a3012760cd37eb92671", "content": "This threat intelligence digest highlights critical vulnerabilities, advanced threats, and AI-driven industry shifts:\n\n**Vulnerabilities:** A severe Open VSX cache poisoning flaw (CVE-2025-12999) enables extension supply chain attacks via header injection. Godot reports three memory-safety bugs in its file parsers, though maintainers dispute the security impact. BioStar\u2019s BIOS utility contains a publicly exploited write-what-where IOCTL flaw (CVE-2026-94146) amid vendor silence.\n\n**Threat Actor Activity:** GraphWorm, a China-linked APT, uses cloud-hosted Microsoft Graph/OneDrive C2 with instant credential rotation, rendering standard token revocation ineffective; mitigation requires targeting app registrations and identity telemetry. ChainScript RAT is delivered via ClickFix lures impersonating legitimate software by the Blackpoint APG.\n\n**AI Security & Workforce Trends:** Rapid model drift makes one-time security testing obsolete, necessitating continuous, automated validation. Concurrently, AI is reshaping the cybersecurity job market by automating routine tasks, consolidating leadership roles, and widening skills gaps, while exposing foundational control deficiencies and shrinking entry-level talent pipelines.", "creation_timestamp": "2026-09-21T12:02:45.060235Z"}, {"uuid": "99212dcf-7651-4507-b0ec-c1987a513bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94142", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvzqgmbfzp2o", "content": "BioStar Temperature Monitor Utility 1.2.1806.2200\u3067\u3001IOCTL Handler\u306eBS_HWMIO64_W10.sys\u306b\u8106\u5f31\u6027\u3002\u30ed\u30fc\u30ab\u30eb\u304b\u3089\u3001Phys\u2026\nCVE-2026-94142 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-21T12:43:35.045780Z"}]}