{"vulnerability": "CVE-2026-1836", "sightings": [{"uuid": "d909eb18-e78e-4cdd-95de-2e317d1d7e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18360", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp", "content": "[SBA-ADV-20260126-01] CVE-2026-16969 CVE-2026-18360 CVE-2026-18361: DFIR-IRIS 2.4.26 and possibly others Stored XSS", "creation_timestamp": "2026-07-30T14:07:09.888565Z"}, {"uuid": "43f929b2-8bec-4f2a-b7f9-480a3a1e44ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18361", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp", "content": "[SBA-ADV-20260126-01] CVE-2026-16969 CVE-2026-18360 CVE-2026-18361: DFIR-IRIS 2.4.26 and possibly others Stored XSS", "creation_timestamp": "2026-07-30T14:07:09.939017Z"}, {"uuid": "861a701e-2cfd-49d0-9e7f-4b3fa76b790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18363", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24", "content": "osTicket CRITICAL vuln (CVE-2026-18363): Weak password reset logic lets attackers reuse valid reset tokens. Affects versions <1.17.8 & <1.18.4. Upgrade ASAP when patch is released; monitor reset activity. https://radar.offseq.com/threat/cve-2026-18363-cwe-640-weak-password-recovery-mechanism-for-...", "creation_timestamp": "2026-07-30T12:00:30.475999Z"}, {"uuid": "8e0ab2bd-5b26-4e09-b322-c92ad583f7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18362", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/f23y4hauoujpy", "content": "[SBA-ADV-20260128-02] CVE-2026-16971 CVE-2026-18362: DFIR-IRIS 2.4.26 and possibly others Missing Brute Force Protection", "creation_timestamp": "2026-07-30T14:13:10.572200Z"}, {"uuid": "edc9b60d-c1fc-4dfc-a61d-bda1c31f1910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18363", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrudbnnaaf2y", "content": "CVE-2026-18363 - osticket\nA security flaw in osTicket's password reset process allows attackers to reuse valid password reset tokens, potentially taking control of an account. This affects osTicket\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#osticket #enhancesoft #CVE #infosec", "creation_timestamp": "2026-07-30T11:24:04.859319Z"}, {"uuid": "27f7950f-fa26-4b96-a0fe-d95cdcc87ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18367", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mt2bm4yrhc2x", "content": "\ud83d\udd17 CVE : CVE-2026-18367", "creation_timestamp": "2026-08-14T13:35:19.062160Z"}, {"uuid": "8f245691-c9b1-49a2-bb80-ad4aa64106db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvxtxmlct2e", "content": "CVE-2026-18366 - events manager\nAn older version of the Events Manager WordPress plugin allows anyone to become an administrator or change/delete other users' accounts without logging in. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eventsmanager #unknown #CVE #infosec", "creation_timestamp": "2026-08-12T20:30:05.545066Z"}, {"uuid": "921262e1-f0ed-44f3-a4d0-741b02ce2795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/445", "content": "", "creation_timestamp": "2026-08-20T15:00:03.602013Z"}, {"uuid": "47c425d1-2b2d-4480-b885-ec03971ed6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "seen", "source": "https://t.me/captainsmok3r_official/444", "content": "\ud83d\udc47 CVE-2026-18366 - Events Manager (WordPress plugin) unauthenticated privilege escalation\nAffected: Events Manager 7.1 up to and including 7.4.0.1 (fixed in 7.4.1)\nType: Privilege escalation / broken access control (CWE-269)", "creation_timestamp": "2026-08-20T15:00:03.651764Z"}, {"uuid": "15994f2f-faf2-4654-833a-a66f5dcd779b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/446", "content": "another poc published in github:\nhttps://github.com/Nxploited/CVE-2026-18366", "creation_timestamp": "2026-08-20T15:00:03.700288Z"}, {"uuid": "10b4180c-e049-41b0-8643-fa7f9d66d832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "seen", "source": "Telegram/LIigd3GfevK05lOlQ8ysTsgmI95welYqQqmJ3U3Oo2WmXDM", "content": "", "creation_timestamp": "2026-08-17T18:00:04.512384Z"}, {"uuid": "64a703e3-a692-42eb-bcc9-26486ec45bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "seen", "source": "Telegram/hDDi_lD4Zf9-gI1Gn10sykTtiK4LT5_Zn07fv0DMntTOtvA", "content": "", "creation_timestamp": "2026-08-17T18:00:04.636744Z"}, {"uuid": "ad3e8064-0b92-42ad-8602-df18211a192e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "published-proof-of-concept", "source": "Telegram/LIigd3GfevK05lOlQ8ysTsgmI95welYqQqmJ3U3Oo2WmXDM", "content": "", "creation_timestamp": "2026-08-18T00:00:12.004027Z"}, {"uuid": "3caf1c44-8b4a-41dc-bb88-0fc22831aaf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "published-proof-of-concept", "source": "Telegram/hDDi_lD4Zf9-gI1Gn10sykTtiK4LT5_Zn07fv0DMntTOtvA", "content": "", "creation_timestamp": "2026-08-18T00:00:12.165534Z"}, {"uuid": "b68cbea9-f3da-4905-a889-6575c3c06157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "published-proof-of-concept", "source": "Telegram/oR7NLMKFgb1yCNvTgcBxelfsbAhPDwgeIo74_-eUOYy4JNw", "content": "", "creation_timestamp": "2026-08-21T00:00:08.303250Z"}, {"uuid": "d7060d83-1d15-4993-bf07-9199816a36ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/445", "content": "", "creation_timestamp": "2026-08-21T00:00:09.359138Z"}, {"uuid": "a4da5131-75d5-4d04-bb9a-84b9f475f365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "seen", "source": "https://t.me/captainsmok3r_official/444", "content": "\ud83d\udc47 CVE-2026-18366 - Events Manager (WordPress plugin) unauthenticated privilege escalation\nAffected: Events Manager 7.1 up to and including 7.4.0.1 (fixed in 7.4.1)\nType: Privilege escalation / broken access control (CWE-269)", "creation_timestamp": "2026-08-21T00:00:09.408732Z"}, {"uuid": "05f430bc-1182-4a17-98ee-85b9b3acd2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/446", "content": "another poc published in github:\nhttps://github.com/Nxploited/CVE-2026-18366", "creation_timestamp": "2026-08-21T00:00:09.464051Z"}, {"uuid": "ad879c1b-5dd9-4023-b4c0-d13a3764c3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "seen", "source": "https://t.me/GithubRedTeam/98968", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18366\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 18:50:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-18366: Events Manager < 7.4.1 \u2014 Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc.py).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.620213Z"}, {"uuid": "36afae4e-51aa-4ec5-9b3b-e3e61853e067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18366", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98968", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18366\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 18:50:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-18366: Events Manager < 7.4.1 \u2014 Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc.py).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:30.700295Z"}]}