{"vulnerability": "cve-2026-1490", "sightings": [{"uuid": "9f481703-97f8-4dad-a965-caa0006b2dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1490", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mewvncr5xu26", "content": "", "creation_timestamp": "2026-02-16T01:30:32.236540Z"}, {"uuid": "8cb55048-041b-441f-9818-283e6ecb8ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1490", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116077719048703864", "content": "", "creation_timestamp": "2026-02-16T01:30:42.631845Z"}, {"uuid": "4510e667-eeb4-407b-a69e-87df3eafe5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1490", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mexosz3l4s2t", "content": "", "creation_timestamp": "2026-02-16T09:01:20.140521Z"}, {"uuid": "a3d0db63-2f04-45cc-87e8-66a3564917e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1490", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mexot3krck2t", "content": "", "creation_timestamp": "2026-02-16T09:01:20.747086Z"}, {"uuid": "94571eab-5454-4ef3-ac9c-8f203fcf38cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1490", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mexotairx22t", "content": "", "creation_timestamp": "2026-02-16T09:01:21.266428Z"}, {"uuid": "d4774111-f019-443f-b4e6-903d2cdab5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1490", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meunknidmb2h", "content": "", "creation_timestamp": "2026-02-15T04:00:33.598587Z"}, {"uuid": "e12f8702-0fe0-45ae-9f7c-2bd9a22a6e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1490", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116072646640752529", "content": "", "creation_timestamp": "2026-02-15T04:01:02.906682Z"}, {"uuid": "aae3e1c3-02d5-4b13-833f-e663485a33cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1490", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mez5xkbz262n", "content": "", "creation_timestamp": "2026-02-16T23:04:45.356865Z"}, {"uuid": "2562f1b1-584f-4e85-88fa-638c3b65286c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1490", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mf3cxgnpgr2b", "content": "", "creation_timestamp": "2026-02-17T19:39:29.486713Z"}, {"uuid": "294532cb-1cbf-46c4-8596-eb09c6d0f6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-21T23:00:09.159974Z"}, {"uuid": "f75e6bfc-c425-474c-a8e9-5b67a6ceaf50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-21T23:00:08.854828Z"}, {"uuid": "d4342b6f-46ce-428f-bc40-b35da850af44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-22T00:00:12.338336Z"}, {"uuid": "e2fd0619-dac2-4ea0-9c63-5c7dfbca64c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-22T00:00:12.668405Z"}, {"uuid": "d67b2844-2a6f-40f2-9fd9-fd86efd390cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14906", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxppzjb7s23", "content": "iOS\u7248\u300cFirefox\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u60aa\u610f\u3042\u308b\u30da\u30fc\u30b8\u306ePDF\u4fdd\u5b58\u6642\u306b\u5f71\u97ff\n\nMozilla Foundation\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670813\u65e5\u3001\u300cFirefox for iOS\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u30a6\u30a7\u30d6\u30da\u30fc\u30b8\u3092PDF\u3068\u3057\u3066\u4fdd\u5b58\u3059\u308b\u969b\u3001\u30da\u30fc\u30b8\u30bf\u30a4\u30c8\u30eb\u306e\u51e6\u7406\u306b\u8106\u5f31\u6027\u300cCVE-2026-14906\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002\u60aa\u610f\u3042\u308b\u30bf\u30a4\u30c8\u30eb\u304c\u8a2d\u5b9a\u3055\u308c\u305f\u30a6\u30a7\u30d6\u30da\u30fc\u30b8\u3092PDF\u3068\u3057\u3066\u4fdd\u5b58\u3057\u305f\u5834\u5408\u306b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002\n\n\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u751f\u6210\u3057\u305fPDF\u306e\u5185\u5bb9\u306b\u3088\u3063\u3066\u3001\u300cFirefox for iOS\u300d\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u5185\u306b\u3042\u308bPDF\u30d5\u30a1\u30a4\u30eb\u3084\u3001\u540c\u68b1\u3055\u308c\u305f\u30b3...", "creation_timestamp": "2026-08-13T13:10:03.060327Z"}, {"uuid": "717a1be1-6d79-4889-bd97-ff5d02df273d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14904", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mqagjdixno2e", "content": "CVE-2026-14904 - Improper Link Resolution in Auth.GetUserPrivateKey in AWS Research and Engineering Studio #patchmanagement", "creation_timestamp": "2026-07-09T20:03:40.427543Z"}, {"uuid": "0f7d2919-7a40-4fd1-b865-c04e58c60ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14906", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqkhap3uhf2c", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-14906](https://bugzilla.mozilla.org/show_bug.cgi?id=2045842)\nPages with malicious title...\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=2045842 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-13T19:43:18.822560Z"}, {"uuid": "55569d9b-43fd-4696-9c80-8a62e0f002e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkl6x6la25", "content": "CVE-2026-14902 - Ivanti Xtraction Open Redirect Vulnerability\nCVE ID : CVE-2026-14902\n \n Published : July 14, 2026, 3:16 p.m. | 13\u00a0minutes ago\n \n Description : An open redirect in Ivanti\u00a0Xtraction\u00a0before\u00a0version\u00a02026.2.1\u00a0allows a remote\u00a0unauthenticated attacker to redirect use...", "creation_timestamp": "2026-07-14T15:48:11.605171Z"}, {"uuid": "57570284-25f9-4f1e-94f5-31b1b973f126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkoeal2u2x", "content": "CVE-2026-14903 - Ivanti Xtraction Path Traversal Vulnerability\nCVE ID : CVE-2026-14903\n \n Published : July 14, 2026, 3:16 p.m. | 13\u00a0minutes ago\n \n Description : Path traversal in\u00a0Ivanti\u00a0\u00a0Xtraction\u00a0before\u00a0version\u00a02026.2.1\u00a0allows a remote authenticated attacker to read arbitrary...", "creation_timestamp": "2026-07-14T15:49:58.052939Z"}, {"uuid": "11416113-9265-4ab0-95a6-6b5053d153a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-696", "content": "", "creation_timestamp": "2026-07-14T21:19:53.864484Z"}, {"uuid": "d95cf53d-49f3-4727-b151-e9a93f69c57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-696", "content": "", "creation_timestamp": "2026-07-14T21:19:56.090413Z"}, {"uuid": "987655d5-c53b-4b01-81ba-6b1bbf2c83fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14906", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqovtojixm2h", "content": "\ud83d\udd17 CVE : CVE-2026-14906, CVE-2026-15718, CVE-2026-15719", "creation_timestamp": "2026-07-15T14:15:07.112638Z"}, {"uuid": "b42e9b69-55c0-4a91-92df-d101de5093ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-23T00:00:43.986144Z"}, {"uuid": "b0090069-4a30-461c-a560-423b217645a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-23T00:00:44.061595Z"}, {"uuid": "827558c8-df8a-4a37-bd4c-ee2202a9b9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7koee5ct2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14903 \u0432 Ivanti Xtraction: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/88797F90-DF94-496C-8AFD-C314E802A6C7", "creation_timestamp": "2026-07-22T05:10:33.496378Z"}, {"uuid": "745f1ffa-fc77-4939-8b1c-0ed5f67701cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrrwpx4qxr2a", "content": "CVE-2026-14900\nThe Cost Calculator Builder PRO plugin for WordPress contains a security flaw that could allow hackers to execute code on the server without a password. This is a serious issue because it could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T12:34:06.340193Z"}, {"uuid": "d79f3ed4-5f1a-4de4-a1d9-f5c9f0d9a5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsbldl7nl2q", "content": "CVE-2026-14900 - Cost Calculator Builder PRO\nCVE ID : CVE-2026-14900\n \n Published : July 29, 2026, 11:16 a.m. | 2\u00a0hours, 27\u00a0minutes ago\n \n Description : The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and inclu...", "creation_timestamp": "2026-07-29T15:48:23.141391Z"}]}