{"vulnerability": "CVE-2026-6510", "sightings": [{"uuid": "3dcc6a11-5eae-468b-b8f6-2dc9f888e2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6510", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116571755456657860", "content": "\ud83d\udea8 CVE-2026-6510: InfusedWoo Pro \u22645.1.2 has a CRITICAL vuln (CVSS 9.8). Missing auth checks in iwar_save_recipe() lets attackers bypass auth & escalate to admin. No patch yet \u2014 disable plugin or restrict access now! https://radar.offseq.com/threat/cve-2026-6510-cwe-862-missing-authorization-in-inf-3dc63846 #OffSeq #WordPress #Vuln #CVE20266510", "creation_timestamp": "2026-05-14T07:30:28.231316Z"}, {"uuid": "b3f51a39-30ca-4c5b-8396-6202d272da0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6510", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlscd2v3gu2p", "content": "CRITICAL: InfusedWoo Pro \u22645.1.2 for WordPress has a severe auth bypass (CVE-2026-6510). Attackers can escalate privileges \u2014 no patch yet. Restrict access or disable plugin now. https://radar.offseq.com/threat/cve-2026-6510-cwe-862-missing-authorization-in-inf-3dc63846 #OffSeq #WordPress #Security", "creation_timestamp": "2026-05-14T07:31:03.013053Z"}, {"uuid": "d0ca3c03-f1fb-4ae7-b60e-ef5d3c30a667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6510", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116572109414166733", "content": "\ud83d\udea8 CVE-2026-6510 (CRITICAL, CVSS 9.8) in InfusedWoo Pro \u22645.1.2: Missing authorization in iwar_save_recipe() lets attackers escalate privileges & gain admin access via crafted URLs. No patch yet \u2014 restrict/disable plugin. https://radar.offseq.com/threat/cve-2026-6510-cwe-862-missing-authorization-in-inf-3dc63846 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-05-14T09:00:29.444451Z"}, {"uuid": "e2569c2e-df01-4d95-8d7c-fc6392ad5ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlshfwl7yr2p", "content": "CVE-2026-6510 - InfusedWoo Pro\nCVE ID : CVE-2026-6510\n \n Published : May 14, 2026, 7:16 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, 5...", "creation_timestamp": "2026-05-14T09:01:34.178806Z"}, {"uuid": "30c66a9a-f532-4185-8f24-29b17027acd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlsjvzgx452o", "content": "CVE-2026-6510 - InfusedWoo Pro\nCVE ID : CVE-2026-6510\n \n Published : May 14, 2026, 7:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, ...", "creation_timestamp": "2026-05-14T09:46:22.164040Z"}, {"uuid": "79759b8d-6b6d-46d0-be3f-8ef34a5f58e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65105", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3mtwasvuzv72y", "content": "NVIDIA NemoClaw has a critical flaw: one visit to a malicious site can hijack your local AI agent. CVE-2026-65105 allows unauthenticated access to the Ollama server via DNS rebinding. Check your network bindings now.", "creation_timestamp": "2026-08-25T16:35:46.426145Z"}, {"uuid": "89ce3174-a40d-4371-8603-204b8ff635f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6joco6yxvm4xi", "content": "CVE-2026-65105 - NVIDIA NemoClaw Inference Server Authentication Bypass\nCVE ID : CVE-2026-65105\n \n Published : Aug. 25, 2026, 8:15 p.m. | 19\u00a0minutes ago\n \n Description : NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker m...", "creation_timestamp": "2026-08-25T20:57:50.335317Z"}, {"uuid": "a6c8f638-cd23-49c6-8b42-4a7e0258865e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65105", "type": "seen", "source": "https://bsky.app/profile/digitalmatters.bsky.social/post/3mtza6ecegq2u", "content": "Local AI Agent Security: What CVE-2026-65105 Says About Every Self-Hosted\u00a0Model\n\nLocal ai agent security has a founding assumption that almost nobody states out loud, and CVE-2026-65105 is what\u2026\n\nhttps://digitalmatters.me/security/local-ai-agent-security/\n\n#AI_Security #Cyber_Security #Local_AI", "creation_timestamp": "2026-08-26T21:02:15.543766Z"}, {"uuid": "b665a7ba-c1e4-4393-b0b3-b80b4932f3a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65105", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mu5lgvew2s24", "content": "\ud83c\udf10 Vulnerabilidad cr\u00edtica en Nvidia NemoClaw permite hackear agentes de IA al visitar webs | CVE-2026-65105 (+MITIGACI\u00d3N) www.newstecnicas.com/2026/08/vuln...", "creation_timestamp": "2026-08-28T14:34:33.264703Z"}, {"uuid": "f0d19e61-d5b7-485e-a474-f394c93e5910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mty3bapcjb26", "content": "\ud83d\udfe0 CVE-2026-65105 - High (8.1)\n\nNVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T10:01:48.701275Z"}, {"uuid": "8eed175c-9afd-4842-ab44-c0e9d2f6407a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrrrskq74q27", "content": "CVE-2026-65100 - Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode\nCVE ID : CVE-2026-65100\n \n Published : July 29, 2026, 9:06 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Apache Traffic Server updates the HTTP/2 HPACK dynamic t...", "creation_timestamp": "2026-07-29T11:06:06.663393Z"}, {"uuid": "d4540c1c-8b15-4cba-a3b8-3e7ed84fa842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65105", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mu4zxtyuf22l", "content": "\ud83c\udf10 #Vulnerabilidad cr\u00edtica en #Nvidia #NemoClaw permite hackear agentes de IA al visitar webs | CVE-2026-65105 (+MITIGACI\u00d3N) \nDescubre c\u00f3mo afecta a los agentes de IA locales y c\u00f3mo actualizar tu entorno.\n\nwww.newstecnicas.com/2026/08/vuln...", "creation_timestamp": "2026-08-28T09:21:56.884924Z"}]}