{"vulnerability": "CVE-2026-1018", "sightings": [{"uuid": "1abbbfc3-be2d-4058-80c2-f218d9e690c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1018", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10638-0e44b-2.html", "content": "", "creation_timestamp": "2026-01-16T02:15:00.000000Z"}, {"uuid": "86d94aa3-e5c9-4bf2-ade4-9a5d75b2347d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1018", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcjdiyd5462c", "content": "", "creation_timestamp": "2026-01-16T05:10:59.519443Z"}, {"uuid": "babfe51f-8e0f-4cea-9e3e-b5cfae916698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1018", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mckelucilt27", "content": "", "creation_timestamp": "2026-01-16T15:03:09.922782Z"}, {"uuid": "e3b48f13-d4b7-476f-96f2-f156828c8ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10183", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116664502304851453", "content": "The severity is increased for this new vulnerability affecting TRENDnet TEW-432BRP (CVE-2026-10183) https://vuldb.com/vuln/367464", "creation_timestamp": "2026-05-30T16:37:24.585559Z"}, {"uuid": "9f9d938f-8fec-4052-b2df-d25295c450ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116664554927178804", "content": "A severe vulnerability was disclosed for Totolink N300RH (CVE-2026-10187) https://vuldb.com/vuln/367468", "creation_timestamp": "2026-05-30T16:50:35.356028Z"}, {"uuid": "686926ea-a3cd-459d-8ee4-1a6bd54c900d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10180", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn5nghutzq2i", "content": "CVE-2026-10180 - TRENDnet TEW-432BRP formSysCmd command injection\nCVE ID : CVE-2026-10180\n \n Published : May 31, 2026, 11:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the ...", "creation_timestamp": "2026-05-31T13:13:43.776404Z"}, {"uuid": "ec56349c-a806-4007-bf8e-43b6b7ade6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10183", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mn5wtvtac62j", "content": "TRENDnet TEW-432BRP 3.10B20\u306eformWlanSetup\u3067\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60aa\u7528\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308b\u3002\nCVE-2026-10183 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-31T16:02:18.696270Z"}, {"uuid": "ab2f6e6b-8ac6-455e-b997-2e6c4e229e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10184", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mn5wvghnqe25", "content": "SourceCodester HPRMS 1.0\u306e/classes/Users.php?f=delete\u306b\u304a\u3044\u3066SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60a3\u8005\u60c5\u5831\u3078\u306e\u4e0d\u6b63\u64cd\u4f5c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10184 CVSS 7.3 | HIGH", "creation_timestamp": "2026-05-31T16:03:09.031863Z"}, {"uuid": "7bf9621b-472b-430a-9a6d-66e36f747d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10181", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn5z7lyo5i2g", "content": "CVE-2026-10181 - TRENDnet TEW-432BRP formSysCmd stack-based overflow\nCVE ID : CVE-2026-10181\n \n Published : May 31, 2026, 1:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysC...", "creation_timestamp": "2026-05-31T16:44:38.018390Z"}, {"uuid": "26e598ee-f690-44aa-afb3-c7180a6b1020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10183", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn5zikk4gd27", "content": "CVE-2026-10183 - TRENDnet TEW-432BRP formWlanSetup stack-based overflow\nCVE ID : CVE-2026-10183\n \n Published : May 31, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlanSetup of th...", "creation_timestamp": "2026-05-31T16:49:38.598509Z"}, {"uuid": "9a7e185f-77d3-45b2-9ed0-5fbf1ea75522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10182", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn5zriywjl2e", "content": "CVE-2026-10182 - TRENDnet TEW-432BRP formWlanSetup command injection\nCVE ID : CVE-2026-10182\n \n Published : May 31, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSet...", "creation_timestamp": "2026-05-31T16:54:38.788243Z"}, {"uuid": "1770ffa3-b19b-4420-84da-bb72edcfb02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn622hlqpu2g", "content": "CVE-2026-10184 - SourceCodester Hospitals Patient Records Management System Users.php delete sql injection\nCVE ID : CVE-2026-10184\n \n Published : May 31, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : A security flaw has been discovered in SourceCodester Hospitals Patient R...", "creation_timestamp": "2026-05-31T16:59:39.306784Z"}, {"uuid": "20a4c11c-f6c5-4343-ba22-66a81b1aadaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn625ab7aw26", "content": "\ud83d\udd34 CVE-2026-10187 - Critical (9.8)\n\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10187/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-31T17:01:13.156210Z"}, {"uuid": "679be332-2195-4958-94ca-5b72f40a82e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10183", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn625herig2h", "content": "\ud83d\udfe0 CVE-2026-10183 - High (8.8)\n\nA vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlan...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10183/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-31T17:01:20.709433Z"}, {"uuid": "00c8baca-0011-4214-9ea8-ab0e8165a52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10181", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn627aozji23", "content": "\ud83d\udfe0 CVE-2026-10181 - High (8.8)\n\nA vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function fo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10181/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-31T17:02:20.826468Z"}, {"uuid": "e8ed035e-b0df-4553-9c3a-35b0e1812bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn62dg3u2v2x", "content": "CVE-2026-10185 - SourceCodester Hospitals Patient Records Management System Users.php save sql injection\nCVE ID : CVE-2026-10185\n \n Published : May 31, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : A weakness has been identified in SourceCodester Hospitals Patient Records ...", "creation_timestamp": "2026-05-31T17:04:40.003350Z"}, {"uuid": "603327d2-69c9-4f92-9970-e7e1534a6f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10186", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn62mejwmf2y", "content": "CVE-2026-10186 - code-projects Online Hospital Management System patient.php sql injection\nCVE ID : CVE-2026-10186\n \n Published : May 31, 2026, 2:16 p.m. | 15\u00a0minutes ago\n \n Description : A security vulnerability has been detected in code-projects Online Hospital Management Sy...", "creation_timestamp": "2026-05-31T17:09:40.075128Z"}, {"uuid": "6fc22285-711c-49e4-95a7-608207c9cfd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn64bzog7u2m", "content": "CVE-2026-10187 - Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow\nCVE ID : CVE-2026-10187\n \n Published : May 31, 2026, 3:16 p.m. | 1\u00a0hour, 56\u00a0minutes ago\n \n Description : A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Aff...", "creation_timestamp": "2026-05-31T17:39:40.737156Z"}, {"uuid": "8b1e6425-eb4c-462d-9b33-e1f4db5a98a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn64twk4vy2g", "content": "CVE-2026-10188 - Tenda W12 httpd cgistaKickOff stack-based overflow\nCVE ID : CVE-2026-10188\n \n Published : May 31, 2026, 3:16 p.m. | 1\u00a0hour, 56\u00a0minutes ago\n \n Description : A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /b...", "creation_timestamp": "2026-05-31T17:49:41.410396Z"}, {"uuid": "7b5434c3-529c-482c-9f53-674bd7d3a0b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10189", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn654uzzeu27", "content": "CVE-2026-10189 - Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow\nCVE ID : CVE-2026-10189\n \n Published : May 31, 2026, 4:16 p.m. | 56\u00a0minutes ago\n \n Description : A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTim...", "creation_timestamp": "2026-05-31T17:54:41.787646Z"}, {"uuid": "a3cccaac-1472-46a6-b9cf-21715a42356c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mn65zmzjvd25", "content": "CVE-2026-10187 - Critical stack buffer overflow in Totolink N300RH. Remote RCE via KeyStr argument. CVSS 9.8. Exploit public, no patch available. Disable remote management immediately. #CVE #IoT #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-10187/", "creation_timestamp": "2026-05-31T18:10:46.593612Z"}, {"uuid": "0375bd3a-4c27-4c19-ac8d-026180f9a5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10189", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mn6b52zenf2j", "content": "Tenda W12 3.0.0.7(4763) \u306e httpd \u3067\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u9060\u9694\u304b\u3089\u653b\u6483\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10189 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-31T19:06:23.330980Z"}, {"uuid": "f42d5c7d-820c-4296-af34-15790b19a240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10187", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116671908120912693", "content": "\u26a0\ufe0f CVE-2026-10187 CRITICAL: Totolink N300RH (6.1c.1353_B20190305) is exposed to a remote stack-based buffer overflow in setWiFiBasicConfig. Exploit is public, no patch yet \u2014 restrict Web Management access! https://radar.offseq.com/threat/cve-2026-10187-stack-based-buffer-overflow-in-toto-571e12d5 #OffSeq #IoT #Infosec #Vuln", "creation_timestamp": "2026-06-01T00:00:36.965328Z"}, {"uuid": "94a56039-01a9-42f6-8da9-dd193b4e112a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10187", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn6rl7xohh2r", "content": "CRITICAL: Totolink N300RH routers (6.1c.1353_B20190305) face remote stack overflow (CVE-2026-10187). Exploit is public! Restrict Web Management ASAP until patch arrives. https://radar.offseq.com/threat/cve-2026-10187-stack-based-buffer-overflow-in-toto-571e12d5 #OffSeq #IoTSecurity #Vulnerability", "creation_timestamp": "2026-06-01T00:00:38.122362Z"}, {"uuid": "3cd6a678-825c-4d05-96de-eba91697c287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10189", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn7kpk4yjd2n", "content": "HIGH severity: Tenda W12 (v3.0.0.7) buffer overflow lets remote attackers execute code. No patch yet \u2014 restrict exposure &amp; monitor vendor updates. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-10189-stack-based-buffer-overflow-in-tend-813ea883 #OffSeq #Vulnerability #RouterSecurity", "creation_timestamp": "2026-06-01T07:30:27.221780Z"}, {"uuid": "13a0d06d-0842-4d01-8470-e6218aa78635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10189", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116673676840471246", "content": "\u26a0\ufe0f CVE-2026-10189: HIGH severity stack-based buffer overflow in Tenda W12 (v3.0.0.7). Exploitable remotely, risk of code execution. No patch \u2014 restrict access &amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-10189-stack-based-buffer-overflow-in-tend-813ea883 #OffSeq #Vulnerability #Tenda #RouterSecurity", "creation_timestamp": "2026-06-01T07:30:32.617645Z"}, {"uuid": "de0a19e1-c2ac-479a-9a6a-a796c558d023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10188", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116674030951449755", "content": "\ud83d\udea8 CVE-2026-10188: HIGH severity stack-based buffer overflow in Tenda W12 (v3.0.0.7(4763)). Remote code execution possible; exploit published. No patch yet \u2014 restrict management access! More: https://radar.offseq.com/threat/cve-2026-10188-stack-based-buffer-overflow-in-tend-ffdd62ab #OffSeq #Vulnerability #Tenda #Infosec", "creation_timestamp": "2026-06-01T09:00:28.379900Z"}, {"uuid": "773d3411-5e24-4429-87df-dc365d85135b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10188", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn7pql5o2v2n", "content": "Tenda W12 (3.0.0.7(4763)) hit by HIGH severity stack buffer overflow (CVE-2026-10188). Remote code execution possible; no patch yet. Limit remote access &amp; monitor for updates. Full details: https://radar.offseq.com/threat/cve-2026-10188-stack-based-buffer-overflow-in-tend-ffdd62ab #OffSeq #Vulner...", "creation_timestamp": "2026-06-01T09:00:30.347791Z"}, {"uuid": "ebe4993b-592e-4e03-92fd-7713a319f8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10189", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mn7qf436gf2j", "content": "CVE-2026-10189 - Critical stack buffer overflow in Tenda W12 3.0.0.7(4763). Remote attack possible via /bin/httpd cgiSysTimeInfoSet. CVSS 8.8. Unpatched. Isolate affected devices immediately. #CVE #Tenda #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-10189/", "creation_timestamp": "2026-06-01T09:11:58.910432Z"}, {"uuid": "b4094d79-6f97-44fc-b7c5-f567e89cbd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10180", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mn7yn66p3l2f", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-10180\n\nA vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulatio...", "creation_timestamp": "2026-06-01T11:39:38.951348Z"}, {"uuid": "0cde025a-5786-4e3d-9246-9d05805604ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "Telegram/mH9Q0epJCMco7b4Phu2MaoIM6BdP5uO09lWAriMT8ef_Xxw", "content": "", "creation_timestamp": "2026-06-03T11:00:12.000000Z"}, {"uuid": "6c50d756-b1bf-41cc-a11d-1ff01c6efb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "Telegram/5KTwmA96Kj45TkZqBYLm7RQJ-3Dt3Yk-Ro8oNdfED5lawJI", "content": "", "creation_timestamp": "2026-06-03T15:00:06.000000Z"}, {"uuid": "693bd5fe-7d89-4953-a4a7-2712204e3d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10184", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mnr4g2svxh2v", "content": "\ud83d\udea8 CVE-2026-10184: SQL Injection w systemie danych medycznych\n\nPublicznie dost\u0119pny exploit pozwala na zdalne wstrzykni\u0119cie SQL w systemie do zarz\u0105dzania danymi pacjent\u00f3w. Analizujemy wektor i\n\nhttps://cyberowi.pl/cve-2026-10184-sql-injection-w-systemie-danych-medycznych/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-06-08T07:02:30.937518Z"}, {"uuid": "97fff232-8610-451a-83ce-6d56ed896029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hkmfejb2g", "content": "\ud83d\udea8 CRITICAL: CVE-2026-10187 \u2014 CVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nTotolink N300RH \u2014 Stack-based buffer overflow in setWiFiBasicConfig (wireless.so). Crafted KeyStr argument triggers overflow in web management interface. Full router compromise.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Totolink N300RH\n  \u2022 SOHO Routers\n\n\u2694\ufe0f HOW IT", "creation_timestamp": "2026-06-12T19:21:12.094116Z"}, {"uuid": "d5dabaf6-9497-4a55-b7ee-2480f630405b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hoksxsg2j", "content": "\ud83d\udea8 CRITICAL: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 enterprise systems\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: remotely over the ne", "creation_timestamp": "2026-06-12T19:23:24.422104Z"}, {"uuid": "2cab2bfa-3167-4f6a-b85d-8b85bc4474c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hqj7ezv2y", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-12T19:24:30.300956Z"}, {"uuid": "16f4f1d3-e88b-450e-bb50-f8003bdf92ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo6436u25f26", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-13T11:01:06.050334Z"}, {"uuid": "3af556ae-e27b-4845-9877-d4abc8114b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo75kymjtl2o", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-13T21:01:08.851537Z"}, {"uuid": "2d12b62f-588d-4c8c-b2db-e6ab17ef315a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobw3pqbxc2j", "content": "\ud83d\udea8  ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\n\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown vector\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  1. Check if you're running affected software NOW\n  2. Apply patches immediately ", "creation_timestamp": "2026-06-14T23:24:36.808402Z"}, {"uuid": "72b25472-2cbb-44b2-bfa0-5f268acbcf7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101894", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwltrgbz6p2g", "content": "\ud83d\udd34 CVE-2026-101894 - Critical (9.1)\n\nThe decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default dec...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101894/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T17:31:16.271754Z"}, {"uuid": "9655ca1d-2c58-46ab-92e5-3902a1320837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101898", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwltt3iwtr24", "content": "CVE-2026-101901: axios patched three flaws in its Node.js and browser HTTP client before 1.20.0: an HTTP/2 denial of service, an HTTP/2 proxy and DNS bypass (CVE-2026-101898), and fetch adapter header injection (CVE-2026-101900). Update to 1.20.0.", "creation_timestamp": "2026-09-28T17:32:10.255779Z"}, {"uuid": "bd41057b-53ae-49a1-94e8-5e5e272c8626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlut53lqq25", "content": "CVE-2026-101891 - watchguard ap\nThe internal API on WatchGuard Access Points can be reached without any login, so anyone who can reach the device on the network can obtain a valid API session. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#watchguardap #watchguard #CVE #infosec", "creation_timestamp": "2026-09-28T17:50:06.047284Z"}, {"uuid": "ff176199-e120-4508-bfb2-f5a870c519d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101891", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvuqf3zv2r", "content": "\ud83d\udea8 CVE-2026-101891 \u2014 CVSS 9.3 CRITICAL\n\nAn improper access control vulnerability in an internal API service on WatchGuard Access Points allows an u...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101891\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:08:53.048777Z"}, {"uuid": "ef4d7475-e9fc-4363-b2ca-73e963b3e19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101894", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvuycgos25", "content": "\ud83d\udea8 CVE-2026-101894 \u2014 CVSS 9.1 CRITICAL\n\nThe decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-101894\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:09:01.431713Z"}, {"uuid": "7b797351-b4ba-497b-8a6f-188d99cf6350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101894", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlvezkhfx2i", "content": "CVE-2026-101894 - decompress\nThe decompress library used in Node.js applications may let a specially crafted archive place files outside the intended extraction folder. This could let an attacker modify\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#decompress #xhmikosr #CVE #infosec", "creation_timestamp": "2026-09-28T18:00:06.169727Z"}, {"uuid": "1a6ca52f-3cd9-4cdc-b7b4-8cf2a3aac6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101891", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117350185114320818", "content": "Watch Guard APs with two sev:CRIT and one sev:HIGH CVE.\nhttps://psirt.watchguard.com/CVE-2026-101891\nhttps://psirt.watchguard.com/CVE-2026-86102\nhttps://psirt.watchguard.com/CVE-2026-87969/", "creation_timestamp": "2026-09-28T18:55:22.952080Z"}, {"uuid": "a79f1fe8-0897-407c-902a-e3246aea0508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101894", "type": "seen", "source": "Telegram/6_Oeq2CRJE8os8WHnCwXZbDEI0tCi0KqIlGVcCySNndfyQ4", "content": "", "creation_timestamp": "2026-09-29T03:00:11.000000Z"}, {"uuid": "85c10649-6564-4a1e-8178-239868dd30fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101895", "type": "published-proof-of-concept", "source": "https://github.com/angular/angular/security/advisories/GHSA-f67j-2jqw-jpq7", "content": "", "creation_timestamp": "2026-09-09T20:36:09.000000Z"}, {"uuid": "c6b9378c-5c14-4bd5-82f0-4e47ac0d5a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101860", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwmtp3rsr22c", "content": "\ud83d\udfe0 CVE-2026-101860 - High (8.8)\n\nA vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the func...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101860/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T03:02:37.431765Z"}, {"uuid": "b0358d85-73f7-40c9-ada0-fd707f7d2546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101878", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwmtpdj4ax25", "content": "\ud83d\udfe0 CVE-2026-101878 - High (7.5)\n\nBitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySs...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-101878/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T03:02:45.248844Z"}, {"uuid": "d0b19af9-8e5e-4738-9523-2561fc64501c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101894", "type": "seen", "source": "https://t.me/GithubRedTeam/103707", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-101894\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 00:50:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-101894 PoC: @xhmikosr/decompress symlink-chain archive path traversal (bypass CVE-2026-53486). Node lab + lockfile scan + mass evil.tar upload exploit. CVSS 9.1. https://pocbit.org/pocs/cve-2026-101894\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-29T01:00:07.000000Z"}, {"uuid": "e0258373-39d1-4309-b701-9764a0366b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101894", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103707", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-101894\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 00:50:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-101894 PoC: @xhmikosr/decompress symlink-chain archive path traversal (bypass CVE-2026-53486). Node lab + lockfile scan + mass evil.tar upload exploit. CVSS 9.1. https://pocbit.org/pocs/cve-2026-101894\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-29T01:00:07.000000Z"}, {"uuid": "d0843b88-6c61-4932-be84-cab2a27b4c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101894", "type": "published-proof-of-concept", "source": "Telegram/6_Oeq2CRJE8os8WHnCwXZbDEI0tCi0KqIlGVcCySNndfyQ4", "content": "", "creation_timestamp": "2026-09-29T03:00:11.000000Z"}, {"uuid": "3a603eec-462e-4e10-96b6-bf748c684261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101891", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-972", "content": "", "creation_timestamp": "2026-09-29T05:52:20.000000Z"}, {"uuid": "10ca2e23-ea4f-401a-9312-1aa858b58445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-7-vulnerabilita-in-prodotti-axios", "content": "", "creation_timestamp": "2026-09-29T07:31:20.000000Z"}, {"uuid": "e698ac91-98fa-41ad-ab0b-cb3dee8a0bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101894", "type": "seen", "source": "https://gist.github.com/alon710/c3b0d10c48acd055c898802fe5191eff", "content": "# CVE-2026-101894: CVE-2026-101894: Arbitrary File Read/Write via Symbolic Link Chaining in @xhmikosr/decompress\n\n&gt; **CVSS Score:** 9.1\n&gt; **Published:** 2026-09-29\n&gt; **Full Report:** https://cvereports.com/reports/CVE-2026-101894\n\n## Summary\nCVE-2026-101894 is a critical path traversal vulnerability in @xhmikosr/decompress before versions 10.2.2 and 11.1.4, stemming from an incomplete hardening bypass of CVE-2026-53486 where static lexical containment checks fail to detect kernel-level resolution of crafted symlink chains, allowing arbitrary local file modification and execution.\n\n## TL;DR\nA path traversal vulnerability in @xhmikosr/decompress allows attackers to write files outside the target directory via a crafted chain of symlink entries, bypassing lexical containment checks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 9.1\n- **EPSS Score**: 0.00814\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- @xhmikosr/decompress\n- decompress\n- **@xhmikosr/decompress**: &lt; 10.2.2 (Fixed in: `10.2.2`)\n- **@xhmikosr/decompress**: &lt; 11.1.4 (Fixed in: `11.1.4`)\n- **decompress**: &lt;= 4.2.1 (Fixed in: `None`)\n\n## Mitigation\n\n- Upgrade @xhmikosr/decompress to fixed versions\n- Replace legacy 'decompress' library with maintained fork\n- Run extraction processes in isolated, non-root sandbox environments\n\n**Remediation Steps:**\n1. Identify vulnerable packages using npm audit\n2. Update package.json dependencies to &gt;=10.2.2 or &gt;=11.1.4\n3. Replace any occurrences of 'decompress' with '@xhmikosr/decompress'\n4. Rebuild lockfiles and deploy patches\n\n## References\n\n- [Official Security Advisory](https://github.com/XhmikosR/decompress/security/advisories/GHSA-hrh2-vp3x-79xf)\n- [NVD Vulnerability Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-101894)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-101894)\n- [Release Version 10.2.2](https://github.com/XhmikosR/decompress/releases/tag/v10.2.2)\n- [Release Version 11.1.4](https://github.com/XhmikosR/decompress/releases/tag/v11.1.4)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-101894) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T03:30:30.000000Z"}, {"uuid": "0124a01b-28e5-4d40-8357-5660ab4f8b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101899", "type": "published-proof-of-concept", "source": "https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx", "content": "", "creation_timestamp": "2026-09-16T09:03:23.000000Z"}, {"uuid": "21fe740a-4a36-423c-ba22-bdbef5ff96b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-101898", "type": "published-proof-of-concept", "source": "https://github.com/axios/axios/security/advisories/GHSA-3pq3-5fj3-cg6v", "content": "", "creation_timestamp": "2026-09-16T08:58:16.000000Z"}]}