{"vulnerability": "cve-2026-10083", "sightings": [{"uuid": "f66ef6d2-8b41-4217-84f8-747ec4b76579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10083", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116832221707811519", "content": "Stored XSS (CVE-2026-10083, HIGH) found in APCu Manager <4.5.0 for WordPress. Persistent object caching lets attackers inject JS via crafted cache keys, compromising admin sessions. Disable object caching or update plugin. https://radar.offseq.com/threat/cve-2026-10083-cwe-79-cross-site-scripting-xss-in--afabaed8bda5d811 #OffSeq #XSS #WordPress #Infosec", "creation_timestamp": "2026-06-29T07:30:27.798638Z"}, {"uuid": "eede594b-b8e9-41a6-ae26-3958ea4009d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10083", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpfxrflfcf2b", "content": "HIGH severity stored XSS in APCu Manager <4.5.0 (WordPress). Persistent object caching can enable JS injection in admin sessions. Disable caching or update plugin until a fix is confirmed. https://radar.offseq.com/threat/cve-2026-10083-cwe-79-cross-site-scripting-xss-in--afabaed8bda5d811 #OffSeq ...", "creation_timestamp": "2026-06-29T07:30:29.195603Z"}, {"uuid": "ea85f997-86df-4bc5-b0f9-d283b4d269dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10083", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpfz3jjltm2a", "content": "CVE-2026-10083 - APCu Manager\nCVE ID : CVE-2026-10083\n \n Published : June 29, 2026, 6 a.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before rendering them in an admin-area page, leading to a ...", "creation_timestamp": "2026-06-29T07:54:05.160809Z"}, {"uuid": "5d3c569e-4324-4ba4-b800-1b2ac6693502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10083", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgckpanrv2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10083 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 APCu Manager \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5AD8050D-B385-4D4B-A62D-432210DA059E", "creation_timestamp": "2026-06-29T10:43:35.614714Z"}, {"uuid": "34b0f9ff-6ee1-420b-a09b-e617633759c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10083", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphebs3jgz22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10083 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 APCu Manager \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A2594716-0CF4-4863-A4EB-5F96486582AD", "creation_timestamp": "2026-06-29T20:47:03.392406Z"}, {"uuid": "12cc644a-0046-4227-8944-23941957866e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhrwo5qdt24", "content": "\ud83d\udfe0 CVE-2026-100838 - High (8.1)\n\nContrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100838/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:47:45.671966Z"}, {"uuid": "5aa0c2ad-cc02-4fef-9b68-199e2e0bfc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100839", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhrwvt3rz2c", "content": "\ud83d\udfe0 CVE-2026-100839 - High (8.4)\n\nContrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100839/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-27T02:47:53.242633Z"}, {"uuid": "cda3d8a7-8d73-4407-9696-159e407fd619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhtqjwgvk2u", "content": "CVE-2026-100835 - contrast\nVersions of Contrast earlier than 1.16.0 can be tricked into accepting identity proofs that come from a different machine. This means someone who can watch the network traffic\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#contrast #edgelesssys #CVE #infosec", "creation_timestamp": "2026-09-27T03:20:06.000103Z"}, {"uuid": "0ef3933b-b06d-4ad2-b6ae-7a1222b28731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwhweuwfex2i", "content": "\ud83d\udea8 CVE-2026-100835 \u2014 CVSS 9.1 CRITICAL\n\nContrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attest...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-27T04:07:15.689882Z"}, {"uuid": "455e8527-ba42-4330-a187-e6bd6db49391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100835", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117341121683608469", "content": "CVE-2026-100835: Contrast <1.16.0 faces CRITICAL remote attestation relay attacks. Any valid TEE attestation report is accepted, risking trust bypass. Upgrade ASAP. https://radar.offseq.com/threat/contrast-before-1160-is-susceptible-to-remote-attestation-relay-attacks-cve-2026-100835-3833ee713219f7e3 #OffSeq #CVE2026100835 #infosec #security", "creation_timestamp": "2026-09-27T04:30:24.846907Z"}, {"uuid": "f603028e-ce6e-4941-9d73-da93ee95e499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100835", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhxocy6sz2j", "content": "CRITICAL: Contrast <1.16.0 vulnerable to attestation relay attacks. Unbound TEE reports can let attackers impersonate trusted workloads. Patch now. https://radar.offseq.com/threat/contrast-before-1160-is-susceptible-to-remote-attestation-relay-attacks-cve-2026-100835-3833ee713219f7e3 #OffSeq #CVE...", "creation_timestamp": "2026-09-27T04:30:27.073345Z"}, {"uuid": "c6064a54-0f1e-41d1-b963-1d9c7d80e3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103520", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100835\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 10:54:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100835 PoC: Edgeless Contrast <1.16.0 remote attestation relay (aTLS / CWE-295). Manifest audit (AllowedChipIDs/AllowedPIIDs), version & coordinator probe. https://pocbit.org/pocs/cve-2026-100835\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T11:00:08.000000Z"}, {"uuid": "6424639c-cdc0-4f67-b5de-0edfb88a7781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4grsumi2c", "content": "\ud83d\udfe0 CVE-2026-100833 - High (8.2)\n\nContrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100833/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T01:01:03.053256Z"}, {"uuid": "123a297f-ad43-4f0d-9318-4aefccc290db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "seen", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}, {"uuid": "192396c8-9fd7-46aa-889c-4415e43e3ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "seen", "source": "Telegram/WkCWq67CgLBcm_hEcvrpJWcHwwDb7nvZdSlCBdaLX915QMo", "content": "", "creation_timestamp": "2026-09-27T15:00:39.000000Z"}, {"uuid": "2df789e6-f0dd-42f7-bf1e-bc2deb6629d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "published-proof-of-concept", "source": "Telegram/WkCWq67CgLBcm_hEcvrpJWcHwwDb7nvZdSlCBdaLX915QMo", "content": "", "creation_timestamp": "2026-09-27T15:00:39.000000Z"}, {"uuid": "fd855f58-dff7-4095-9fed-d3b02dd4f2ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100835", "type": "published-proof-of-concept", "source": "Telegram/3c9srXY8de1OJkBnfqEEqOhTsR2WGThzUoLs-q4hUEIXmM0", "content": "", "creation_timestamp": "2026-09-27T21:00:04.000000Z"}, {"uuid": "462a9e4a-26f4-4793-9f2d-4f20fb52f28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100831", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnzlsztt52m", "content": "\ud83d\udfe0 CVE-2026-100831 - High (8.8)\n\nUse-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100831/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T14:20:49.798670Z"}, {"uuid": "30fda8f5-a4f6-42ae-8d2f-b1554850d5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnzm2e5zv27", "content": "\ud83d\udfe0 CVE-2026-100832 - High (8.8)\n\nUse-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100832/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T14:20:57.072710Z"}, {"uuid": "855502b7-64f3-41ba-9535-a4882b74d2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/az7g3klrcwflr", "content": "CVE-2026-100832 - Use-after-free in the Graphics: Canvas2D component\nCVE ID : CVE-2026-100832\n \n Published : Sept. 29, 2026, 1:17 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153....", "creation_timestamp": "2026-09-29T15:07:25.466973Z"}, {"uuid": "4bd6fcba-2835-4a13-96c1-af1f5298759a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6mzue2wbgxumb", "content": "CVE-2026-100831 - Use-after-free in the DOM: UI Events & Focus Handling component\nCVE ID : CVE-2026-100831\n \n Published : Sept. 29, 2026, 1:17 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability...", "creation_timestamp": "2026-09-29T15:13:25.434266Z"}, {"uuid": "83a0ceb1-0dac-4817-b81d-7237f77977e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100831", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "74819078-749d-4cfd-9e6e-7a9ab02f83c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100830", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "382b4a69-5998-4373-84bf-7d921984ea03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-firefox-multiple-vulnerabilities_20260930", "content": "", "creation_timestamp": "2026-09-29T20:00:00.000000Z"}, {"uuid": "e762c63a-a829-48be-9e86-a362339d393e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100831", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "5e7d7560-7537-4b6f-902a-6c8d3ca89282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "6e12cb95-e3a8-4d93-a824-09a1cff287ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-100830", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-thunderbird-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T20:00:00.000000Z"}, {"uuid": "54ad8c8a-00bd-45d0-b9e9-a67403891145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100832", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx74yyfbyq2u", "content": "\ud83d\udccc CVE-2026-100832 - Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ... https://www.cyberhub.blog/cves/CVE-2026-100832", "creation_timestamp": "2026-10-06T09:37:07.188409Z"}]}