{"vulnerability": "CVE-2026-7195", "sightings": [{"uuid": "a2e46a2b-7b8f-43b5-bdae-7b5346a37e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71958", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mteeyqeg6y2d", "content": "D-Link fixes 15 flaws in the DWR-M961 router, including D-Link router command injection and buffer overflow bugs like CVE-2026-71958. Update firmware now.\n\n#DLink #DWRM961 #CommandInjection #BufferOverflow #RouterSecurity #CVE #InfoSec #CyberSecurity", "creation_timestamp": "2026-08-18T14:02:40.961669Z"}, {"uuid": "22aa3e40-7344-4728-adf0-16cf2e48cc03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mncxos2hkz2j", "content": "CVE-2026-7195 - CWE-20: Improper Input Validation in web services in Progress Sitefinity\nCVE ID : CVE-2026-7195\n \n Published : June 2, 2026, 2:17 p.m. | 56\u00a0minutes ago\n \n Description : CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3...", "creation_timestamp": "2026-06-02T16:00:38.936956Z"}, {"uuid": "1f6580d3-bb23-41fd-9bf4-5ab4d7acc9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7195", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndvu3euez2q", "content": "\ud83d\udfe0 CVE-2026-7195 - High (8.8)\n\nCWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7195/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-03T01:00:29.609172Z"}, {"uuid": "d258d412-618f-49a6-ba0a-85454c395df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7195", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mni5z46bcg2h", "content": "\ud83d\udccc CVE-2026-7195 - CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1... https://www.cyberhub.blog/cves/CVE-2026-7195", "creation_timestamp": "2026-06-04T17:37:06.328515Z"}, {"uuid": "a2867a6c-2f6c-4483-a522-581a2ab0af33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71950", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mslkw755qg2u", "content": "CVE-2026-71950 - dwr-m961\nD-Link DWR-M961 devices with older firmware are vulnerable to a remote attack. An attacker could inject malicious commands, potentially gaining control of the device. Update to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dwrm961 #CVE #infosec", "creation_timestamp": "2026-08-08T17:12:04.779185Z"}, {"uuid": "114856e9-ab6b-41b7-955b-2b78b22885d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71951", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mslkwaehef2b", "content": "CVE-2026-71951 - dwr-m961\nD-Link DWR-M961 devices are at risk of being controlled by hackers. This is because a hacker can inject malicious commands into the device, which can then be executed with full control. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dwrm961 #CVE #infosec", "creation_timestamp": "2026-08-08T17:12:05.896166Z"}, {"uuid": "0d5ec46f-5c6e-44c5-a610-3f8a567b5bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71952", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mslkzripjp27", "content": "CVE-2026-71952 - dwr-m961\nD-Link DWR-M961 devices with outdated firmware are at risk of being taken over by unauthorized users. This is because a malicious person can trick the device into executing commands with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dwrm961 #CVE #infosec", "creation_timestamp": "2026-08-08T17:14:04.442725Z"}, {"uuid": "daa5fb9e-e139-4fd2-90f3-c584f9ac78ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71953", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mslkzt3iao2u", "content": "CVE-2026-71953 - dwr-m961\nD-Link DWR-M961 devices with outdated firmware are at risk of remote attacks. An attacker can inject malicious commands into the device, potentially taking control of it. Update the firmware\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dwrm961 #CVE #infosec", "creation_timestamp": "2026-08-08T17:16:16.521699Z"}, {"uuid": "92451010-11c0-40a7-961f-8e83413655bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71957", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mslnwrthta2v", "content": "CVE-2026-71957 - dwr-m961\nD-Link DWR-M961 devices with specific hardware and software versions are at risk of a buffer overflow vulnerability. This could allow an attacker to crash the device or execute unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dwrm961 #CVE #infosec", "creation_timestamp": "2026-08-08T18:08:15.481767Z"}, {"uuid": "101d6fb2-dfb7-44f2-ae6d-ddcc05956c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71952", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jyuesx3qptyww", "content": "CVE-2026-71952 - D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup\nCVE ID : CVE-2026-71952\n \n Published : Aug. 8, 2026, 5:16 p.m. | 42\u00a0minutes ago\n \n Description : D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108...", "creation_timestamp": "2026-08-08T18:13:37.523981Z"}, {"uuid": "e43588d2-191d-4bc4-be20-5441ddbc9ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7195", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-552", "content": "", "creation_timestamp": "2026-06-05T10:19:13.000000Z"}, {"uuid": "e5b5fc10-3133-49f7-a934-d2e75996e17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71951", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msmsjvhu462m", "content": "\ud83d\udd34 CVE-2026-71951 - Critical (9.8)\n\nD-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_20260707110...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71951/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T05:01:02.180421Z"}, {"uuid": "f2110bd5-ecd2-4c89-9aa4-5cdbe7b39d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71953", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msmskczots25", "content": "\ud83d\udd34 CVE-2026-71953 - Critical (9.8)\n\nD-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_20260707110...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71953/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T05:02:47.099277Z"}, {"uuid": "7b276705-eea0-47da-bdd7-7f1be2cb7194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71952", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msmsk4d3lm2u", "content": "\ud83d\udd34 CVE-2026-71952 - Critical (9.8)\n\nD-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_20260707110...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71952/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T05:01:17.668373Z"}, {"uuid": "d2ec6b30-24b1-40d0-9341-3f6fb2661a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71950", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msopbp563r2t", "content": "CVE-2026-71950 - Critical RCE in D-Link DWR-M961. Command injection in formSmsManage, root access. CVSS 9.8. Unpatched. Disable remote access immediately. #CVE #DLink #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-71950/", "creation_timestamp": "2026-08-09T23:08:04.764658Z"}, {"uuid": "c855e037-f229-451b-ab0a-97e704928fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71950", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117068063354430072", "content": "CVE-2026-71950 - Critical RCE in D-Link DWR-M961. Command injection in formSmsManage, root access. CVSS 9.8. Unpatched. Disable remote access immediately. #CVE #DLink #infosec\nhttps://www.valtersit.com/cve/CVE-2026-71950/", "creation_timestamp": "2026-08-09T23:08:06.247655Z"}, {"uuid": "a51e1592-2424-4990-8bd5-32eabba6427d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71950", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msosf3ujii2i", "content": "Unpatched D-Link Router Turns Into Root Shell With A Brand Label\nPANIC 92% | Lag 0.0h | CVE-2026-71950 is a critical command injection flaw in the D-Link DWR-M961 affecting the formSmsMana\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-10T00:03:39.914644Z"}, {"uuid": "f09ea72e-f494-47ce-aa59-71fb7cf3ef92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2fohbmglkugmk", "content": "CVE-2026-71959 - Bitwarden Server\nCVE ID : CVE-2026-71959\n \n Published : Aug. 10, 2026, 2:17 p.m. | 13\u00a0minutes ago\n \n Description : Bitwarden Server before 2026.7.2 does not verify that the caller is a member of the organization identified in a POST /collect request body, allo...", "creation_timestamp": "2026-08-10T15:01:47.687964Z"}]}