{"vulnerability": "CVE-2026-9773", "sightings": [{"uuid": "a650a035-036e-4b08-aad1-7996581a78dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp3dekt7jy2b", "content": "CVE-2026-9773 - Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability\nCVE ID : CVE-2026-9773\n \n Published : June 24, 2026, 9:35 p.m. | 3\u00a0hours, 35\u00a0minutes ago\n \n Description : Unraid Web Server ToggleState Command Injection Remote Code Execution V...", "creation_timestamp": "2026-06-25T01:58:46.293333Z"}, {"uuid": "adb2a77f-80c0-40e2-9a2b-554b486450b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9773", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpjvulf32l2u", "content": "\ud83d\udccc CVE-2026-9773 - Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c... https://www.cyberhub.blog/cves/CVE-2026-9773", "creation_timestamp": "2026-06-30T21:07:07.273181Z"}, {"uuid": "2d0b96fc-5a68-4c37-adbd-abb7d2728b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97730", "type": "seen", "source": "https://gist.github.com/ichintu/cef2c12046d7246fbad5e72900e0d2df", "content": "Today\u2019s threat intelligence digest highlights four notable vulnerabilities:\n\n\u2022 **macOS TCC Bypass:** CDC/ACM serial interfaces can circumvent macOS Transparency, Consent, and Control (TCC) security restrictions, granting unauthorized access to protected resources.  \n\u2022 **pfSense LFI (CVE-2026-97730, HIGH/8.5):** A flaw in dashboard widget sequence handling allows local file inclusion, enabling arbitrary PHP execution (requires authentication and dashboard modification privileges).  \n\u2022 **Argus Monitor DoS (CVE-2026-79417):** A local IOCTL vulnerability exploits a TOCTOU race condition to disable x86 `MONITOR`/`MWAIT` instructions, triggering `HYPERVISOR_ERROR` bugchecks in Hyper-V and kernel components.  \n\u2022 **Root Browser Classic Injection (CVE-2026-85082, HIGH/8.5):** Unsafe passing of SQLite database paths to the OS shell enables command injection due to improper filename/command separation.  \n\nAll entries include technical write-ups, CVSS metrics, and proof-of-concept resources for further analysis.", "creation_timestamp": "2026-09-25T04:00:27.000000Z"}, {"uuid": "bbcdef46-f75b-4184-9676-e4da16be7679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97735", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwcwrrkakm2y", "content": "\ud83d\udfe0 CVE-2026-97735 - High (8)\n\nITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.p...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-97735/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-25T04:31:11.852803Z"}, {"uuid": "1af7d916-17a2-4c88-b335-6634ee206760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97730", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwcyhkytxe2d", "content": "\ud83d\udfe0 CVE-2026-97730 - High (8.5)\n\nIn Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-97730/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-25T05:01:15.851963Z"}, {"uuid": "85e4dcd4-e233-4f7b-b1ec-2ae6721718de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97735", "type": "seen", "source": "https://gist.github.com/ichintu/a425ebd263532d7f7c22e2d83104242b", "content": "On September 25, 2026, three high-severity vulnerabilities were reported: **CVE-2026-97818** (phpIPAM API authorization bypass, CVSS 8.6), **CVE-2026-97735** (ITFlow SVG file upload flaw, CVSS 8.0), and **CVE-2026-5430** (WSO2 path traversal, CVSS 9.8). CISA added the WSO2 and Adobe Commerce/Magento flaws to its Known Exploited Vulnerabilities (KEV) catalog due to confirmed active exploitation. Affected organizations should prioritize patching and apply immediate mitigations.", "creation_timestamp": "2026-09-25T08:00:24.000000Z"}, {"uuid": "9b6f2a51-7892-4cf6-bbd6-6e86d207cea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97737", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwdpdkkxg52o", "content": "Wakapi v2.17.6\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u30ad\u30e3\u30c3\u30b7\u30e5\u30b5\u30fc\u30d3\u30b9\u306b\u610f\u56f3\u3057\u306a\u3044\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u306e\u30eb\u30c3\u30af\u30a2\u30c3\u30d7\u304c\u3042\u308a\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-97737 CVSS 7.4 | HIGH", "creation_timestamp": "2026-09-25T11:50:36.466822Z"}]}