{"vulnerability": "CVE-2026-9334", "sightings": [{"uuid": "f565ecf1-e45e-4d5a-aeb7-4ff2d4c76cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9334", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mne4fdfgs223", "content": "CVE-2026-9334 - Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled\nCVE ID : CVE-2026-9334\n \n Published : June 3, 2026, 1:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Cpanel::JSON::XS versions b...", "creation_timestamp": "2026-06-03T02:57:29.939989Z"}, {"uuid": "82de8ec1-d5eb-4590-8dc0-da38fc43f4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93345", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw4w72zthj2k", "content": "\ud83d\udfe0 CVE-2026-93345 - High (7.5)\n\nMikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the lab...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93345/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-22T19:04:44.448157Z"}, {"uuid": "d2f1af2e-e0cd-43a4-887d-29cb3ebcc466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93349", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwcxtldunj2r", "content": "CVE-2026-93349 - frictionless-py\nThe Python library Frictionless\u2011py (versions up to 5.20.0rc1) can run any operating\u2011system command when a user explores a data package that contains specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#frictionlesspy #frictionlessdata #CVE #infosec", "creation_timestamp": "2026-09-25T04:50:04.350696Z"}, {"uuid": "aa826efb-3884-430a-ab19-91848d64ddaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93349", "type": "seen", "source": "Telegram/casOb_urBwXkBUZvllR9Y1soseAr2u2g5tENUUxRQxBEAPw", "content": "", "creation_timestamp": "2026-09-24T03:00:06.000000Z"}, {"uuid": "50cda662-7094-4229-9917-6b26616dce7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eyybvfanmucry", "content": "CVE-2026-93348 - Unsloth Zoo Code Injection via model_type in config.json\nCVE ID : CVE-2026-93348\n \n Published : Sept. 28, 2026, 4:17 p.m. | 15\u00a0minutes ago\n \n Description : Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, co...", "creation_timestamp": "2026-09-28T17:12:33.129235Z"}, {"uuid": "417e897c-25db-4481-a5fb-f4662365bde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93340", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117352602123172368", "content": "CVE-2026-93340 Gladys Assistant before 5.1.0: password reset link poisoning lets unauthenticated attackers steal reset tokens and take over accounts. CVSS 6.8. Patch under review, update as soon as it lands. https://www.valtersit.com/cve/CVE-2026-93340/ #CVE #infosec", "creation_timestamp": "2026-09-29T05:10:03.027856Z"}, {"uuid": "f8864cff-4ac9-42cb-a4f3-9163e42f0ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93340", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwn3wqpu5p25", "content": "CVE-2026-93340 Gladys Assistant before 5.1.0: password reset link poisoning lets unauthenticated attackers steal reset tokens and take over accounts. CVSS 6.8. Patch under review, update as soon as it lands. https://www.valtersit.com/cve/CVE-2026-93340/ #CVE #infosec", "creation_timestamp": "2026-09-29T05:30:03.861305Z"}, {"uuid": "b73c283a-1484-4024-bac4-fdff2576ec15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93348", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwpk66sxmv25", "content": "CVE-2026-93348 - unsloth-zoo\nIf you load a model into Unsloth Zoo or Unsloth, a specially crafted configuration file can cause the program to run any code the attacker includes. This happens because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unslothzoo #unslothai #CVE #infosec", "creation_timestamp": "2026-09-30T04:50:04.366169Z"}]}