{"vulnerability": "CVE-2026-7509", "sightings": [{"uuid": "e2f56bd2-aeba-47ba-bca8-dfb79f2fd1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmgeamfjm22k", "content": "CVE-2026-7509 - KIA Subtitle\nCVE ID : CVE-2026-7509\n \n Published : May 22, 2026, 5:16 a.m. | 34\u00a0minutes ago\n \n Description : The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `the-subtitle` shortcode `before` and `after` attrib...", "creation_timestamp": "2026-05-22T06:58:09.362335Z"}, {"uuid": "f649552f-5833-4727-acde-cf8ff226ef15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7509", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnn56cp2o2s", "content": "CVE-2026-7509: Stored XSS en KIA Subtitle WordPress\n\n\u00bfUs\u00e1s KIA Subtitle en tu WordPress? CVE-2026-7509 permite inyectar scripts maliciosos v\u00eda shortcode. Verific\u00e1 tu versi\u00f3n y actualiz\u00e1 a 4.0.2 ahora.\n\n#cve20267509 #kiasubtitle #storedxss #wordpressplugins #shortcodevulnerabilidad", "creation_timestamp": "2026-05-25T04:25:55.900703Z"}, {"uuid": "dd921f3b-400d-461c-ac1c-fdec2de067c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75093", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtd6kp3nzr2t", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-75093](https://github.com/sonos/tract/)\nA security vulnerability has been detected in s...\nhttps://github.com/sonos/tract/ #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-18T02:34:47.571019Z"}, {"uuid": "61073d62-1995-44bc-a5df-fc78e5b780ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75094", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gh7s7jj7f6qin", "content": "CVE-2026-75094 - COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection\nCVE ID : CVE-2026-75094\n \n Published : Aug. 18, 2026, 2:17 a.m. | 18\u00a0minutes ago\n \n Description : A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file...", "creation_timestamp": "2026-08-18T02:57:57.395963Z"}, {"uuid": "e362f5e2-044e-4f0e-8505-28137615afa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75094", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtd7y6ye542z", "content": "\ud83d\udd34 CVE-2026-75094 - Critical (9.1)\n\nA flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the fil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75094/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T03:00:15.111750Z"}, {"uuid": "11b9af96-a977-45b0-9ece-ff79a505c508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75094", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtd7ylsuk52w", "content": "COMFAST CF-N1-S v2.6.0.1 faces CRITICAL OS command injection (CVE-2026-75094) \ud83d\udea8. Exploit is public, no patch yet. Restrict vulnerable CGI endpoints immediately. https://radar.offseq.com/threat/cve-2026-75094-os-command-injection-in-comfast-cf-n1-s-07737fa4c8cac0ee #OffSeq #CVE #IoTSecurity", "creation_timestamp": "2026-08-18T03:00:28.099974Z"}, {"uuid": "fd4b4b69-3894-4a57-9499-9f3aa158c5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75093", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/e3c5nopvw4xuw", "content": "CVE-2026-75093 - sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size\nCVE ID : CVE-2026-75093\n \n Published : Aug. 18, 2026, 2:17 a.m. | 18\u00a0minutes ago\n \n Description : A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts t...", "creation_timestamp": "2026-08-18T03:03:58.012220Z"}, {"uuid": "49c0266c-d362-4c37-8c84-6d392f5aefd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fg7l6gkmguaes", "content": "CVE-2026-75090 - EricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs convert_gguf_to_hf_tokenizer out-of-bounds\nCVE ID : CVE-2026-75090\n \n Published : Aug. 18, 2026, 2:17 a.m. | 18\u00a0minutes ago\n \n Description : A vulnerability was detected in EricLBuehler Mistral.rs up to ...", "creation_timestamp": "2026-08-18T03:05:57.321634Z"}, {"uuid": "a0628629-091c-433f-9cf9-52f30b109ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75094", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtdcs4z6hi2r", "content": "COMFAST CF-N1-S 2.6.0.1\u306eCGI\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3067OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u653b\u6483\u8005\u306f\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60aa\u7528\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-75094 CVSS 9.1 | CRITICAL", "creation_timestamp": "2026-08-18T03:50:32.024891Z"}, {"uuid": "24f4f454-7e96-4d08-8dfa-5321d03fced4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4dtenj2r3pepg", "content": "CVE-2026-75091 - Quill Forms\nCVE ID : CVE-2026-75091\n \n Published : Aug. 18, 2026, 6:16 a.m. | 19\u00a0minutes ago\n \n Description : The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all vers...", "creation_timestamp": "2026-08-18T06:48:06.345830Z"}, {"uuid": "1f685c85-f602-4af8-92dd-3a25828ef526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75091", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtdnf72ajw2i", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3Quill Forms\u3067Stored XSS\u8106\u5f31\u6027\u3002\u5168\u30d0\u30fc\u30b8\u30e7\u30f35.7.1\u307e\u3067\u304c\u5bfe\u8c61\u3002\u653b\u6483\u8005\u306f\u60aa\u610f\u306e\u3042\u308b\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u57cb\u3081\u8fbc\u307f\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u5b9f\u884c\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u2026\nCVE-2026-75091 CVSS 7.2 | HIGH", "creation_timestamp": "2026-08-18T07:00:08.981403Z"}]}