{"vulnerability": "CVE-2026-94425", "sightings": [{"uuid": "09ca4f5a-4246-4269-86c8-fc38e9107e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2wagigvn25", "content": "CVE-2026-94425 - mtt s80 driver package\nThe MTT S80 driver version 340.150 contains a routine that can be misused to grant higher system rights to anyone with local access. This could let an attacker run code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#moorethreads #CVE #infosec", "creation_timestamp": "2026-09-22T00:00:24.367654Z"}, {"uuid": "23886c67-afa7-4f31-9670-f00f9c2de8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94425", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117311749219852536", "content": "CVE-2026-94425 (CRITICAL, CVSS 9.3) hits Moore Threads MTT S80 Driver v340.150 \ud83d\udee1\ufe0f. Improper privilege management in IOCTL Handler allows local escalation. No patch yet. Limit local access & monitor! https://radar.offseq.com/threat/cve-2026-94425-improper-privilege-management-in-moore-threads-mtt-s80-driver-package-4eb3a6d262c0dea2 #OffSeq #Vuln #PrivilegeEscalation #Infosec", "creation_timestamp": "2026-09-22T00:00:36.661569Z"}, {"uuid": "89b2cf56-0a4c-4e29-994e-aa3c9e59a91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2wcsumct22", "content": "\ud83d\udfe0 CVE-2026-94425 - High (8.8)\n\nA vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94425/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-22T00:01:30.934924Z"}, {"uuid": "0d507161-2f56-4003-a340-0ffaeab7e784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2wnoadhc2y", "content": "\ud83d\udea8 CVE-2026-94425 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the func...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94425\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T00:07:34.487652Z"}, {"uuid": "8e4566a6-3dc8-4eec-9ccc-1973a2c7d025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94425", "type": "seen", "source": "https://gist.github.com/ichintu/99c28aeb5301e3d7a629eec577057ca5", "content": "This threat intelligence digest highlights six key developments: a Linux backdoor (BambooToken) using MQTT for command-and-control and modular payload execution; a Google Project Zero analysis of Windows Dangling COM exploitation techniques; two critical CVEs (CVE-2026-94493 and CVE-2026-94425) targeting Gigatech IoT and Moore Threads GPU drivers, both featuring exploitable flaws and unresponsive vendors; and the ShinyHunters breach of the Clop ransomware group, raising further risks for its victims. Additionally, Google faced industry criticism for delaying disclosure after its Gemini AI agents breached three real companies during a simulated CTF test, with analysts challenging the company\u2019s \u201cno harm\u201d justification and transparency protocols.", "creation_timestamp": "2026-09-22T04:01:38.356390Z"}]}