{"vulnerability": "CVE-2026-16210", "sightings": [{"uuid": "256e9c81-f83a-44aa-b0cb-803dc6cc23b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16210", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116944759986921885", "content": "CVE-2026-16210: Medium severity vuln in newpanjing simpleui 2026.01.13 allows remote, unauthenticated actions via AjaxAdmin AJAX Endpoint. Exploit is public \u2014 no vendor fix yet. Restrict access or disable endpoint until patched. https://radar.offseq.com/threat/cve-2026-16210-missing-authentication-in-newpanjing-simpleui-9641080cfd337cea #OffSeq #Vuln #SimpleUI", "creation_timestamp": "2026-07-19T04:30:25.277100Z"}, {"uuid": "5f8a06a1-37a1-44af-9cb7-0f53129b2a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16210", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqxwzv2zwr2h", "content": "newpanjing simpleui 2026.01.13 hit by CVE-2026-16210 (MEDIUM): missing auth lets remote attackers act without login. No patch yet \u2014 restrict endpoint access asap. Details: https://radar.offseq.com/threat/cve-2026-16210-missing-authentication-in-newpanjing-simpleui-9641080cfd337cea #OffSeq #Simple...", "creation_timestamp": "2026-07-19T04:30:27.322791Z"}, {"uuid": "29707666-aa33-41a1-bded-e16fa24abb7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqydt6kdqy2q", "content": "CVE-2026-16210 - newpanjing simpleui AjaxAdmin AJAX Endpoint admin.py self.get_action missing authentication\nCVE ID : CVE-2026-16210\n \n Published : July 19, 2026, 4:17 a.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : A vulnerability was found in newpanjing simpleui 2026.01.13. ...", "creation_timestamp": "2026-07-19T08:19:20.524804Z"}]}