{"vulnerability": "cve-2026-9733", "sightings": [{"uuid": "9aa35b0b-d132-4ecb-9abf-586cad4aaa66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9733", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mowwurvmxt2r", "content": "CVE-2026-9733: Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter", "creation_timestamp": "2026-06-23T08:04:32.550762Z"}, {"uuid": "ddcd68f7-a2f1-49ad-b4ca-3108e5e0718e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h2zf3rzuygpfi", "content": "CVE-2026-97335 - Incorrect authorization in LXD storage volume API allows reading volumes from other projects\nCVE ID : CVE-2026-97335\n \n Published : 28. September 2026 14:17 | 15\u00a0Minuten ago\n \n Description : Incorrect authorization in the custom storage volume creation endpoin...", "creation_timestamp": "2026-09-28T15:34:29.090626Z"}, {"uuid": "87cd5692-6833-4ebd-9688-7e674200b645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97337", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyb6jhje22k", "content": "\ud83d\udfe0 CVE-2026-97337 - High (7.5)\n\nThe Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-97337/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T16:03:10.624914Z"}, {"uuid": "9e1ab080-0056-42ad-9d7c-647bfceb2a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97332", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104595", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97332-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Kolya080808\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-07 20:49:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIndependent PoC and reproducible lab for CVE-2026-97332 \u2014 User Private Files < 2.2.0 unauthenticated private file disclosure on WordPress Multisite.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-07T21:00:06.000000Z"}, {"uuid": "8a691f6c-78f2-4af1-87be-6bd241f7ba08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97332", "type": "published-proof-of-concept", "source": "Telegram/A1FkH_jjc5ZdmoIatY_p78h7OpS-SxVymbU2qFBc27UcyiE", "content": "", "creation_timestamp": "2026-10-08T09:00:04.000000Z"}, {"uuid": "ffe161ac-45ab-44d3-848e-c6024202a9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97332", "type": "seen", "source": "Telegram/DqGjyRpHg2Op0XI-PNGhiDPnJAiBJEVMHvZZNXwUz3nJuWo", "content": "", "creation_timestamp": "2026-10-07T23:00:18.000000Z"}, {"uuid": "326f87a2-6c57-4e3a-a601-43d32c26d530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97332", "type": "published-proof-of-concept", "source": "Telegram/DqGjyRpHg2Op0XI-PNGhiDPnJAiBJEVMHvZZNXwUz3nJuWo", "content": "", "creation_timestamp": "2026-10-07T23:00:18.000000Z"}]}