{"vulnerability": "CVE-2026-1840", "sightings": [{"uuid": "804b6fa7-2cc4-4076-9334-b5f2c6785071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18402", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt7ljjutkx2g", "content": "CVE-2026-18402 suredash (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T16:16:08.036403Z"}, {"uuid": "38272406-2a46-452d-a430-35b56d36afa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18409", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtl6srglq42j", "content": "WPForms Pro\u30d7\u30e9\u30b0\u30a4\u30f3\uff08v2.0.0.2\u307e\u3067\uff09\u3067\u3001\u60aa\u610f\u306e\u3042\u308b\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u6ce8\u5165\u3055\u308c\u308b\u8106\u5f31\u6027\u3002\u6295\u7a3f\u8005\u304ciframe\u8981\u7d20\u306bjavascript URI\u3092\u57cb\u3081\u8fbc\u3080\u3053\u3068\u304c\u53ef\u80fd\u3002\nCVE-2026-18409 CVSS 7.2 | HIGH", "creation_timestamp": "2026-08-21T07:00:36.116084Z"}, {"uuid": "0e648237-367c-4a8d-980b-d975171157f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18408", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtjeitsof52b", "content": "\ud83d\udccc CVE-2026-18408 - Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time executio... https://www.cyberhub.blog/cves/CVE-2026-18408", "creation_timestamp": "2026-08-20T13:37:06.340035Z"}, {"uuid": "0a9ef6d0-3b4e-48ac-ba8c-4a974bc76522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1840", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-174-07", "content": "", "creation_timestamp": "2026-06-23T05:00:00.000000Z"}, {"uuid": "434d1ec2-8ccc-462e-b6c6-b7dabefa7d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2vm73eqp2p", "content": "CVE-2026-1840 - Missing authentication for critical function in Hubbell Aclara Metrum Cellular Web Interface\nCVE ID : CVE-2026-1840\n \n Published : June 24, 2026, 7:47 p.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : The Aclara Metrum Cellular Web Interface is vulnerable to unaut...", "creation_timestamp": "2026-06-24T21:52:29.816943Z"}, {"uuid": "a9b2d785-7b83-4db3-85ff-29305c0c73f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1840", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mp3njgbpdj2v", "content": "CVE-2026-1840 - Critical unauthorized access in Aclara Metrum Cellular Web Interface. No authentication on system functions. CVSS 7.5. Unpatched. Urgent action needed. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-1840/", "creation_timestamp": "2026-06-25T05:00:26.635102Z"}, {"uuid": "578884f1-f49f-43e1-b2e5-2f9065853391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1840", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpfips5jdj2g", "content": "CVE-2026-1840: The 93 CVSS Critical Infrastructure Nightmare\u2014Unauthenticated OT Device Reboots Expose Energy Sector +\u00a0Video\n\nIntroduction The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent industrial control systems (ICS) advisory on June 23, 2026, for a critical\u2026", "creation_timestamp": "2026-06-29T03:01:09.817129Z"}, {"uuid": "307e8fe0-9f84-4f5c-8c89-3c4648bfafa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18402", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt6jymynhb2s", "content": "CVE-2026-18402 suredash (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T06:16:08.210334Z"}, {"uuid": "3e9c416c-af58-4a5b-b8fa-cd45072598bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18402", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mt6jyp3mca2c", "content": "CVE-2026-18402 suredash (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #mashing #wpsecurity #atomicedge #potatosecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T06:16:09.671232Z"}, {"uuid": "54543b8c-a0f8-44d2-b464-e6fca6e30dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18401", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-72hv-8253-57qq", "content": "", "creation_timestamp": "2026-09-01T20:35:07.551200Z"}]}