{"vulnerability": "CVE-2026-7615", "sightings": [{"uuid": "2a606791-099c-445f-9e70-1c48cbdb95c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7615", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmgziwo6cv2i", "content": "CVE-2026-7615 - Widget Context\nCVE ID : CVE-2026-7615\n \n Published : May 22, 2026, 9:16 a.m. | 3\u00a0hours, 3\u00a0minutes ago\n \n Description : The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3. This is due t...", "creation_timestamp": "2026-05-22T13:18:37.047325Z"}, {"uuid": "08c5cbfe-f2d7-47ef-a703-f8bbf22bcd6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76155", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkqauzhtj2t", "content": "CVE-2026-76155 - data management center\nThe management console for Datiphy Data Management Center (versions 8.3.0 to 8.5.1) still accepts its factory default administrator password. Anyone who discovers this can sign\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#datiphy #CVE #infosec", "creation_timestamp": "2026-08-21T02:40:03.661859Z"}, {"uuid": "dd6d32e5-6094-4b9d-8766-5f9ae8675e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76156", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkqawfe3o2e", "content": "CVE-2026-76156 - data management center\nVersions of Datiphy Data Management Center from 8.3.0 to 8.5.1 let a signed\u2011in administrator run any command on the server, giving them full control over the machine. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#datiphy #CVE #infosec", "creation_timestamp": "2026-08-21T02:40:04.969680Z"}, {"uuid": "c4107ddc-a58d-4463-bbb5-3c32cbad64da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76158", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117131262323183747", "content": "CVE-2026-76158: Datiphy Data Management Center 8.3.0 faces CRITICAL vuln (CVSS 9.3) \u2014 upload API allows unauthenticated file writes anywhere via path traversal \ud83d\uddc2\ufe0f. Restrict access & monitor uploads until patch. https://radar.offseq.com/threat/cve-2026-76158-cwe-73-external-control-of-file-name-or-path-in-datiphy-inc-data-management-center-6c6f4960c6201d48 #OffSeq #Vuln #Datiphy #CVE202676158", "creation_timestamp": "2026-08-21T03:00:25.137508Z"}, {"uuid": "43466339-74c5-41b0-91b3-79d0762f7677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76158", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtkrfdbwjx2w", "content": "CRITICAL: Datiphy Data Management Center 8.3.0 vulnerable (CVE-2026-76158). Unauthenticated attackers can write files anywhere via upload API. Restrict access & monitor uploads now. https://radar.offseq.com/threat/cve-2026-76158-cwe-73-external-control-of-file-name-or-path-in-datiphy-inc-data-man...", "creation_timestamp": "2026-08-21T03:00:27.505892Z"}, {"uuid": "59168aa5-c217-427e-a10e-6b6605f45901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtku63r6uh2u", "content": "CVE-2026-76158 - data management center\nThe upload feature in Datiphy Data Management Center versions 8.3.0 through 8.5.1 can be tricked into writing files to locations you didn't intend. This could let a remote\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#datiphy #CVE #infosec", "creation_timestamp": "2026-08-21T03:50:05.223047Z"}, {"uuid": "d9cb51eb-648a-4c87-be89-ab8563f5e0ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkvb3a6zq2j", "content": "\ud83d\udea8 CVE-2026-76158 \u2014 CVSS 9.3 CRITICAL\n\nExternal Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76158\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T04:09:38.675547Z"}, {"uuid": "2d6e254c-591a-4802-9e74-21696c4121a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4gox73pk2mqpr", "content": "CVE-2026-76158 - Datiphy Data Management Center - External Control of File Name or Path\nCVE ID : CVE-2026-76158\n \n Published : Aug. 21, 2026, 3:16 a.m. | 39\u00a0minutes ago\n \n Description : External Control of File Name or Path in the upload API endpoint of Datiphy Data Management...", "creation_timestamp": "2026-08-21T04:07:24.771008Z"}, {"uuid": "8eaa5041-4fdf-4bb7-a722-bed431156579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76155", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkvakr3tq2j", "content": "\ud83d\udea8 CVE-2026-76155 \u2014 CVSS 9.3 CRITICAL\n\nUse of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76155\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T04:09:21.898273Z"}, {"uuid": "fc964656-4e32-4ca5-859b-bde880516734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76156", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkvasxp5y2j", "content": "\ud83d\udea8 CVE-2026-76156 \u2014 CVSS 9.4 CRITICAL\n\nOS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76156\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T04:09:30.479450Z"}, {"uuid": "8e2bb490-2b7f-4978-b736-e9645674fc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76156", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117131616384373023", "content": "CVE-2026-76156: CRITICAL OS command injection in Datiphy Data Management Center (8.3.0 \u2013 8.5.1). Authenticated admins can run root OS commands via API. No patch yet \u2014 restrict admin access, monitor activity. https://radar.offseq.com/threat/cve-2026-76156-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-af474791202edb0c #OffSeq #CVE202676156 #Vuln #Infosec", "creation_timestamp": "2026-08-21T04:30:27.689789Z"}, {"uuid": "40878b59-2d0c-4e5e-9332-497dc3e75d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76156", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtkwgdj3rd2y", "content": "Datiphy Data Management Center (v8.3.0 \u2013 8.5.1) faces a CRITICAL OS command injection flaw (CVE-2026-76156). No patch \u2014 restrict admin access, monitor closely. https://radar.offseq.com/threat/cve-2026-76156-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-af4747...", "creation_timestamp": "2026-08-21T04:30:29.785691Z"}, {"uuid": "2df50311-f450-4b1c-bf92-11230b4ffa0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76155", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117131970094272349", "content": "Datiphy Data Management Center 8.3.0 hit by CRITICAL vuln (CVE-2026-76155) due to default admin creds. Remote attackers can gain full access. No patch yet \u2014 change credentials & limit access ASAP. https://radar.offseq.com/threat/cve-2026-76155-cwe-1392-use-of-default-credentials-in-datiphy-inc-data-management-center-6739f6ae6f5ecf78 #OffSeq #CVE #Vuln #Datiphy", "creation_timestamp": "2026-08-21T06:00:24.911600Z"}, {"uuid": "a11125a9-6b7e-45bf-9bcd-210eb0299f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76155", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtl3h6sm5j2x", "content": "Datiphy Data Management Center 8.3.0 faces CRITICAL vuln (CVE-2026-76155): default admin creds allow remote access. No patch \u2014 change creds & restrict access immediately. https://radar.offseq.com/threat/cve-2026-76155-cwe-1392-use-of-default-credentials-in-datiphy-inc-data-management-center-6739f...", "creation_timestamp": "2026-08-21T06:00:27.134282Z"}]}