{"vulnerability": "CVE-2026-7857", "sightings": [{"uuid": "3b6e0e8e-b4a1-479c-9393-aeb270c0e6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml56snv3fo2h", "content": "CVE-2026-7857 - D-Link DI-8100 CGI user_group.asp sprintf buffer overflow\nCVE ID : CVE-2026-7857\n \n Published : May 5, 2026, 8:16 p.m. | 22\u00a0minutes ago\n \n Description : A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf...", "creation_timestamp": "2026-05-05T22:01:43.161890Z"}, {"uuid": "44755d13-887a-42f9-86c8-08f58b13b2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwrbaj4ti24", "content": "CVE-2026-78570 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into gaining full admin rights on your site. This means an attacker could change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T21:30:06.195529Z"}, {"uuid": "09815151-aaf8-4a16-8617-c0aa79f08662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155680980822160", "content": "KlbTheme Total Donations <=2.0.5 has a CRITICAL privilege escalation vuln (CVE-2026-78570, CVSS 9.8). Unauthenticated attackers can gain admin access. No patch yet \u2014 disable/remove plugin & monitor for advisories. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 #OffSeq #WordPress #CVE #Vuln", "creation_timestamp": "2026-08-25T10:30:24.560245Z"}, {"uuid": "5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvmfnixbs2y", "content": "CRITICAL: KlbTheme Total Donations <=2.0.5 allows unauthenticated privilege escalation (CVE-2026-78570). No patch available \u2014 remove or disable plugin to reduce risk. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 ...", "creation_timestamp": "2026-08-25T10:30:26.797323Z"}, {"uuid": "2872c671-969c-43df-b226-3666bb91d0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvrt57gtb2j", "content": "\ud83d\udea8 CVE-2026-78570 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78570\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T12:07:27.164270Z"}, {"uuid": "438917db-5dd2-431c-a09f-68c27ed23c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78573", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv76crcczs2p", "content": "CVE-2026-78573 - contextforge mcp gateway\nVersions 1.0.0 to 1.0.7 of IBM ContextForge MCP Gateway come with a built\u2011in username and password that are not changed after installation. Because the default login works, a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-09-10T23:10:05.612920Z"}, {"uuid": "e2ce6a83-915d-4459-bd76-e759094780f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78573", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7bk7xutw25", "content": "\ud83d\udea8 CVE-2026-78573 \u2014 CVSS 9.8 CRITICAL\n\nIBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative acces...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78573\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T00:07:56.971937Z"}, {"uuid": "6afad71e-9ab5-4b82-81d7-b0c286275f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78573", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvotf2udz32v", "content": "\ud83d\udccc CVE-2026-78573 - IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials. https://www.cyberhub.blog/cves/CVE-2026-78573", "creation_timestamp": "2026-09-17T04:37:08.213585Z"}]}