{"vulnerability": "CVE-2026-8610", "sightings": [{"uuid": "9722c745-a87b-491a-8398-0e4dd78cefb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8610", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmbvxx73b22a", "content": "CVE-2026-8610 ts-webfonts-for-conoha (CVSS Score 4.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-20T12:32:20.536226Z"}, {"uuid": "55b25b7c-d933-4c7f-bbf5-6718dc26531e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86100", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvfczfl2qt2x", "content": "CVE-2026-86100: Camaleon CMS SSRF via media upload redirect bypass. Versions 2.7.5-2.9.1 expose internal services to authenticated attackers. CVSS 6.4. Unpatched\u2014act now. Details: https://www.valtersit.com/cve/CVE-2026-86100/ #CVE #infosec", "creation_timestamp": "2026-09-13T09:50:18.475131Z"}, {"uuid": "eb2180db-a15e-4722-93ea-8b4db0a64cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86100", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117263107159202125", "content": "CVE-2026-86100: Camaleon CMS SSRF via media upload redirect bypass. Versions 2.7.5-2.9.1 expose internal services to authenticated attackers. CVSS 6.4. Unpatched\u2014act now. Details: https://www.valtersit.com/cve/CVE-2026-86100/ #CVE #infosec", "creation_timestamp": "2026-09-13T09:50:19.633822Z"}, {"uuid": "d76d0882-0c1a-4d85-a4ef-ded95c25b853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86108", "type": "seen", "source": "https://gist.github.com/ichintu/267a83b424137af67bec5f39bcd35594", "content": "This daily threat intelligence digest highlights four critical security updates from September 2026:\n\n\u2022 **Arista EOS (CVE-2026-73447):** Critical (9.4) OS command injection in gNSI Certz/Bootz services allows authenticated users to escalate privileges and fully compromise devices.\n\u2022 **WSO2 API Manager (CVE-2026-5430):** Critical (9.8) JWT signature verification flaw enables forged admin tokens for account takeover; actively exploited in the wild.\n\u2022 **Oracle September 2026 CSPU:** Major patch release addressing 673 vulnerabilities, including several rated CVSS 10.0.\n\u2022 **VeloCloud Edge (CVE-2026-86108):** High (8.0) input validation weakness in management workflows can be abused for elevated OS command execution.\n\n**Recommendation:** Organizations should prioritize immediate patching and threat monitoring for these critical flaws to prevent privilege escalation, account compromise, and active exploitation.", "creation_timestamp": "2026-09-16T08:02:29.882244Z"}, {"uuid": "549e1717-ddcb-41f2-a640-394432fb392f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86106", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmyuslcf224", "content": "CVE-2026-86106 - velocloud edge\nAnyone on the same network as the private HA link between Edge devices can trigger privileged actions without proving their identity. This can give them the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velocloudedge #aristanetworks #CVE #infosec", "creation_timestamp": "2026-09-16T11:10:05.351783Z"}, {"uuid": "9d9c334f-6944-4869-b3e4-3c802a613fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/43buss76asevk", "content": "CVE-2026-86106 - Security Advisory 0179\nCVE ID : CVE-2026-86106\n \n Published : Sept. 16, 2026, 10:12 a.m. | 32\u00a0minutes ago\n \n Description : An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification....", "creation_timestamp": "2026-09-16T11:11:52.504300Z"}]}