{"vulnerability": "CVE-2026-9101", "sightings": [{"uuid": "2cb9c403-3895-4468-9016-250e85fc777e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91017", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvp4ehrfvs2f", "content": "CVE-2026-91017: The Robokassa payment gateway for WooCommerce plugin before 1.8.9 does not verify payment notifications when its non-default deferred-payment feature is enabled, letting unauthenticated attackers mark orders paid without payment. Fixed in 1.8.9.", "creation_timestamp": "2026-09-17T07:17:52.507040Z"}, {"uuid": "b3caec79-bf4e-4bf8-a2a8-3b85c8023d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91017", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ifwcnqt24gcht", "content": "CVE-2026-91017 - Robokassa payment gateway for Woocommerce\nCVE ID : CVE-2026-91017\n \n Published : Sept. 17, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incomin...", "creation_timestamp": "2026-09-17T09:02:06.241213Z"}, {"uuid": "8f4dace4-6a7d-439a-8584-3bdf403e7eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91018", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw4mg67zwe2j", "content": "~Cisa~\nDouble-free in lwIP 2.0.1\u20132.2.1 may enable crashes, DoS, memory corruption, or code execution.\n-\nIOCs: cgit[.]git[.]savannah[.]gnu[.]org\n-\n#CVE-2026-91018 #ICS #ThreatIntel", "creation_timestamp": "2026-09-22T16:09:45.425319Z"}, {"uuid": "c4af1b59-54ac-41a5-b276-e323667f1eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91018", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-02", "content": "", "creation_timestamp": "2026-09-22T16:15:26.743291Z"}, {"uuid": "bd7321b7-0df5-4ad3-ba25-f6978f707b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91018", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwaao34hkk24", "content": "CVE-2026-91018 - lwip api\nThe lightweight IP library (lwIP) can free the same memory twice, which can cause the program to stop working, become unresponsive, or let an attacker run their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lwipapi #lwip #UbuntuPro2004LTS #CVE #infosec", "creation_timestamp": "2026-09-24T02:50:04.436592Z"}]}