{"vulnerability": "CVE-2026-7644", "sightings": [{"uuid": "cd6fa522-8574-4d6f-801c-d42f6d908cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7644", "type": "seen", "source": "https://t.me/shimiscyberworld/1137", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7644 \u2014 CVSS 7.3\nChatGPTNextWeb NextChat Improper Authorization Vulnerability (CVE-2026-7644)\n\nCVE-2026-7644 \u2014 A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #cwe_266\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7644 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:18.778752Z"}, {"uuid": "262049fa-0cf9-4de3-9c32-9d268fc8ab36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76440", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117270391382884208", "content": "Welcome to Monday and two new advisories from Cisco.\nCRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm\nCRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX\nTwo more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability \n@cR0w", "creation_timestamp": "2026-09-14T16:42:48.515436Z"}, {"uuid": "bb6797c4-23fd-4f38-878b-711876000dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76441", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117270391382884208", "content": "Welcome to Monday and two new advisories from Cisco.\nCRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm\nCRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX\nTwo more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability \n@cR0w", "creation_timestamp": "2026-09-14T16:42:48.563265Z"}, {"uuid": "d055e203-032a-465b-97d1-e756c91e2fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76440", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvinqdlk6z2b", "content": "CVE-2026-76440\nThe Cisco Secure Email Gateway and Cisco Secure Email and Web Manager contain a flaw that could allow an attacker to view files they shouldn't access. This could expose sensitive information stored on the email\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-14T17:40:17.864058Z"}, {"uuid": "11dd6e18-a6d9-45ac-9013-56524e27fcb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76441", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvinqftse52r", "content": "CVE-2026-76441\nThe Cisco Secure Email Gateway and Cisco Secure Email and Web Manager have been found to have access control weaknesses that might let users without proper rights perform restricted actions. This could expose\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-14T17:40:21.410337Z"}, {"uuid": "71c2ab04-0d0f-4513-a460-03074c970890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76443", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mviocanazr2f", "content": "CVE-2026-76443\nThe Cisco Secure Email Gateway and Cisco Secure Email and Web Manager contain flaws that could allow specially crafted email content to evade security checks. This could let harmful content reach users or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-14T17:50:05.849302Z"}, {"uuid": "cb8e0282-31b9-4ef9-b4bb-59ab58b0cfa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76440", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipdmw6lj2n", "content": "\ud83d\udea8 CVE-2026-76440 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76440\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:08:48.419025Z"}, {"uuid": "036781ab-26c2-467b-83c0-7bfd519e4d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76441", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipdver5x2j", "content": "\ud83d\udea8 CVE-2026-76441 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76441\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:08:56.867936Z"}, {"uuid": "175fdbc5-6d6f-4d92-a87c-e5ce96f564dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76441", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvipdvrig62y", "content": "\ud83d\udea8 CVE-2026-76441 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76441\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:08:57.551877Z"}, {"uuid": "48c2bc2c-43e2-4825-8c9e-e24303100109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76443", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipe5mx322g", "content": "\ud83d\udea8 CVE-2026-76443 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76443\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:09:03.545187Z"}, {"uuid": "3d39db8c-2db5-4065-8639-a295d56c5bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76443", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mviqofgqhq2t", "content": "\ud83d\udea8 CVE-2026-76443 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76443\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:32:41.951921Z"}, {"uuid": "4e0d376d-279b-443f-9fe2-80cf4157f582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76441", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway", "content": "", "creation_timestamp": "2026-09-14T20:45:05.978189Z"}, {"uuid": "58d613ef-bae7-4104-bbfc-2b49ad85fc42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76443", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway", "content": "", "creation_timestamp": "2026-09-14T20:45:07.863274Z"}, {"uuid": "97bf5322-1b8c-419d-9085-7817e996f164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76440", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway", "content": "", "creation_timestamp": "2026-09-14T20:45:11.657822Z"}, {"uuid": "4aa57df5-41f5-4309-8096-eaf0561e4dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76442", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway", "content": "", "creation_timestamp": "2026-09-14T20:45:13.571437Z"}, {"uuid": "b5eba58c-fe15-4799-ad58-ec9705d63888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76440", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23", "content": "\ud83d\udd17 CVE : CVE-2026-20353, CVE-2026-76440, CVE-2026-76441, CVE-2026-76442, CVE-2026-76443, CVE-2026-76461", "creation_timestamp": "2026-09-15T12:05:06.876878Z"}, {"uuid": "f90b378a-1a1e-45d6-8b4d-59c6fbe31187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76441", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23", "content": "\ud83d\udd17 CVE : CVE-2026-20353, CVE-2026-76440, CVE-2026-76441, CVE-2026-76442, CVE-2026-76443, CVE-2026-76461", "creation_timestamp": "2026-09-15T12:05:06.927561Z"}, {"uuid": "7aa2edfb-e104-4324-9497-d76e189038c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76442", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23", "content": "\ud83d\udd17 CVE : CVE-2026-20353, CVE-2026-76440, CVE-2026-76441, CVE-2026-76442, CVE-2026-76443, CVE-2026-76461", "creation_timestamp": "2026-09-15T12:05:06.972434Z"}, {"uuid": "a5e0c277-6cca-498d-956d-ea24f46269b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76443", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23", "content": "\ud83d\udd17 CVE : CVE-2026-20353, CVE-2026-76440, CVE-2026-76441, CVE-2026-76442, CVE-2026-76443, CVE-2026-76461", "creation_timestamp": "2026-09-15T12:05:07.018516Z"}]}