{"vulnerability": "CVE-2026-9100", "sightings": [{"uuid": "7b4cadad-1a03-43c7-8973-453780f7ece1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcm33ekbk2v", "content": "CVE-2026-9100 - Heap memory out of bounds read and crash in C Driver legacy GridFS file reader\nCVE ID : CVE-2026-9100\n \n Published : May 20, 2026, 5:16 p.m. | 59\u00a0minutes ago\n \n Description : The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the data...", "creation_timestamp": "2026-05-20T19:08:06.508866Z"}, {"uuid": "611f8483-64d7-4777-9cce-5ae9581f3f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91001", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117270181306657011", "content": "A new vulnerability with increased severity was disclosed for D-Link DI-8400 (CVE-2026-91001) https://vuldb.com/vuln/403582", "creation_timestamp": "2026-09-14T15:49:20.360833Z"}, {"uuid": "bb33d17e-56ee-4e8f-9224-28a84c942687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91003", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117270235343636544", "content": "There is a new vulnerability with elevated criticality in D-Link DI-8300 (CVE-2026-91003) https://vuldb.com/vuln/403586", "creation_timestamp": "2026-09-14T16:03:04.825370Z"}, {"uuid": "efe5703e-1349-47d3-a792-eceb75b69ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91001", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117273527976059635", "content": "Stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) in D-Link DI-8400 (16.07) exposes devices to RCE. Exploit code is public. Restrict management access until fix. Details: https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202691001 #IoTSecurity #Vulnerability", "creation_timestamp": "2026-09-15T06:00:26.778058Z"}, {"uuid": "a1428b2c-2098-45a8-a893-2ea948ef4933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91001", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjx4b43rz2z", "content": "D-Link DI-8400 routers (fw 16.07) hit by CRITICAL stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) \ud83d\udea8. Public exploit code available \u2014 restrict management access now. https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202...", "creation_timestamp": "2026-09-15T06:00:29.307492Z"}, {"uuid": "cbf6bb29-22ce-4ece-92ed-83260300112c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91001", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvjy7cuxaa2f", "content": "CVE-2026-91001 - di-8400\nThe DDNS configuration page on D-Link DI-8400 routers (firmware 16.07) can be tricked into overwriting its memory, allowing a remote attacker to run their own programs on the device.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#di8400 #dlink #CVE #infosec", "creation_timestamp": "2026-09-15T06:20:09.184164Z"}, {"uuid": "f0deb48d-6688-428e-8e3e-eba73d591041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91003", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvk5tuq5ja2e", "content": "\ud83d\udd34 CVE-2026-91003 - Critical (9.1)\n\nA flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-91003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T08:01:04.082046Z"}, {"uuid": "ab4c48c8-8d2a-437a-b4c0-6ed59a7c1b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvkeqrnpau22", "content": "\ud83d\udd34 CVE-2026-91001 - Critical (9.9)\n\nA security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-91001/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T10:04:36.177713Z"}, {"uuid": "75cacc2d-b921-4534-b8ea-8af0d6849d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91001", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvkvy5jliv27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-91001: A security flaw has been discovered in D-Link DI-8400 16.07\nCVSS 9.9 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-91001\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T15:12:56.517511Z"}, {"uuid": "d7f985d9-941e-4c76-bec8-7eafdb146c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91003", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvkvy7a5gs2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-91003: A flaw has been found in D-Link DI-8300 16.07\nCVSS 9.1 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-91003\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T15:12:57.887821Z"}, {"uuid": "0c257e18-5f37-483c-aa8e-b756c5db80f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91003", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvrfbdbiac2y", "content": "Daily IT Security Digest \u2014 2026-09-18\ninput in $dataType, $part, and $unit parameters.\n- **D-Link DI-8300 RCE** (CVE-2026-91003): Stack buffer overflow in /rzgl.asp enables remote code execution; public exploit code is available.\n- **Azure AI Foundry Privilege Escalation** (CVE-2026-85889): Missing", "creation_timestamp": "2026-09-18T05:02:28.918033Z"}]}