{"vulnerability": "CVE-2026-75937", "sightings": [{"uuid": "08c835e1-be2e-4cd8-96f4-3ec5aa13c596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6isehgai3ro7y", "content": "CVE-2026-75937 - OS Command Injection in Digi Accelerated Linux (DAL OS)\nCVE ID : CVE-2026-75937\n \n Published : Oct. 2, 2026, 8:33 p.m. | 28\u00a0minutes ago\n \n Description : A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacke...", "creation_timestamp": "2026-10-02T21:40:15.381657Z"}, {"uuid": "77fdf8a0-0be5-4bbb-a2b1-1c3ba6fff4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwweo5phq222", "content": "Digi DAL OS vulnerability CVE-2026-75937 (CVSS 9.4) lets attackers run root commands on Digi Accelerated Linux devices. Patch now.\n\n#Digi #DALOS #CVE202675937 #CommandInjection #IoTSecurity #OTSecurity #Vulnerability", "creation_timestamp": "2026-10-02T22:00:16.819180Z"}, {"uuid": "e601b1d6-86d2-499b-b376-81ec94e9c1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75937", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwf3n2nqa2h", "content": "\ud83d\udea8 CVE-2026-75937 \u2014 CVSS 9.4 CRITICAL\n\nA specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75937\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T22:07:47.995543Z"}, {"uuid": "5fd103af-7c2a-4b31-9871-e606be695ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75937", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117375095480797763", "content": "Digi IX Family devices hit by CRITICAL OS command injection (CVE-2026-75937, CVSS 9.4). Unauthenticated remote attackers can execute root commands via HTTP POST. Disable web admin interface to reduce risk. https://radar.offseq.com/threat/cve-2026-75937-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-deedd882034e65bf #OffSeq #Vulnerability #IoT #Infosec", "creation_timestamp": "2026-10-03T04:30:23.899361Z"}, {"uuid": "74760fd3-0f10-45e9-86b2-e9389e58f460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75937", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwx2hsq6pv2j", "content": "CRITICAL: CVE-2026-75937 in Digi IX Family enables unauthenticated root command execution via web admin. Disable web server if not in use. Patch not yet available. https://radar.offseq.com/threat/cve-2026-75937-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-de...", "creation_timestamp": "2026-10-03T04:30:25.977827Z"}]}