{"vulnerability": "CVE-2026-18452", "sightings": [{"uuid": "ba99080b-3732-4ec8-8310-d96146bdd44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18452", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwg4aowwe2k", "content": "CVE-2026-18452\nDMS+ devices from Rich Source have a security issue where a fixed API key can be exploited by attackers to gain full control over the devices. This means that anyone with the API key can potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T07:20:04.258578Z"}, {"uuid": "80d6b26e-f45d-4eee-9a57-46a315d8a86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6elztljrmbc4t", "content": "CVE-2026-18452 - Rich Source\uff5cDMS+ (Non-Mobile) - Use of Hard-coded Credentials\nCVE ID : CVE-2026-18452\n \n Published : July 31, 2026, 7:16 a.m. | 25\u00a0minutes ago\n \n Description : DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauth...", "creation_timestamp": "2026-07-31T08:09:17.995427Z"}]}