{"vulnerability": "cve-2026-1627", "sightings": [{"uuid": "f1103c9c-a0da-4c23-b881-21655896964b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16277", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116953907325387577", "content": "A severe vulnerability was disclosed for Red Hat Enterprise Linux 8 and other products (CVE-2026-16277) https://vuldb.com/vuln/380608", "creation_timestamp": "2026-07-20T19:16:42.444284Z"}, {"uuid": "d7e0fe53-8921-4612-80b7-2c165e2a5226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mraiehdrvc2i", "content": "CVE-2026-16270 - ReDoS in Open Mercato\nCVE ID : CVE-2026-16270\n \n Published : July 22, 2026, 1:16 p.m. | 29\u00a0minutes ago\n \n Description : Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When so...", "creation_timestamp": "2026-07-22T14:01:52.752324Z"}, {"uuid": "4b6ff080-5fe1-47b6-8dd7-1f99154d0771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-16270", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-16270", "content": "", "creation_timestamp": "2026-07-22T16:15:03.927955Z"}, {"uuid": "e4efcaee-1e2b-4036-8bea-df099c6aabe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16270", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116967966066260426", "content": "A lot of offensive activities were identified targeting Open Mercato (CVE-2026-16270) https://vuldb.com/vuln/382311/cti", "creation_timestamp": "2026-07-23T06:52:01.646663Z"}, {"uuid": "9758f9c4-05a1-43b5-8232-029a0fb74fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16277", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdvfulvbi24", "content": "CVE-2026-16277 & CVE-2026-16461: buffer overflows in rpcinfo", "creation_timestamp": "2026-07-23T22:33:18.245942Z"}, {"uuid": "47b357b9-b253-487d-a00c-a66bba78fe08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16279", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4ubs6ipz2t", "content": "CVE-2026-16279 - 3dswymer\nThe 3DPassport feature in 3DSwymer (versions from 2023x to 2026x) does not properly check who is allowed to use certain functions. This could let an unauthorized person log into some user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#3dswymer #CVE #infosec", "creation_timestamp": "2026-08-28T07:40:05.579737Z"}, {"uuid": "2f0bf10f-b527-4611-91aa-ca83109e1f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16272", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv36ekenpx2x", "content": "PayTR Virtual Pos iFrame API (v9x) WHMCS Module v9.0.0 faces a CRITICAL vuln (CVE-2026-16272, CVSS 9.1) impacting confidentiality & integrity. No patch yet \u2014 restrict access & watch for updates. https://radar.offseq.com/threat/cve-2026-16272-cwe-348-use-of-less-trusted-source-in-paytr-payment-and...", "creation_timestamp": "2026-09-09T09:00:28.168109Z"}, {"uuid": "4f19d0a7-7482-43f3-997d-06a7c51ec5e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16272", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117240261799525810", "content": "CVE-2026-16272 (CVSS 9.1, CRITICAL) in PayTR Virtual Pos iFrame API (v9x) WHMCS Module v9.0.0: Use of less trusted source can compromise confidentiality and integrity. No patch yet \u2014 restrict access and monitor vendor updates. https://radar.offseq.com/threat/cve-2026-16272-cwe-348-use-of-less-trusted-source-in-paytr-payment-and-electronic-money-institution-04a905be1a132f6a #OffSeq #CVE2026_16272 #infosec", "creation_timestamp": "2026-09-09T09:00:32.072295Z"}, {"uuid": "35a5292f-31d2-4579-80a8-3cbaac34acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16272", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3c46q45h2f", "content": "\ud83d\udea8 CVE-2026-16272 \u2014 CVSS 9.1 CRITICAL\n\nUse of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-16272\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T10:07:20.748038Z"}, {"uuid": "53cc0955-b16e-4bd4-a6ca-f72241f8e68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16272", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4lmbiovl2w", "content": "CVE-2026-16272 - paytr virtual pos iframe api (v9x) whmcs module\nThe PayTR Virtual POS iFrame plug\u2011in for the WHMCS billing system, versions 9.0.0 through 9.0.2, can be tricked into accepting forged identifiers. An attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-09T22:30:04.104153Z"}]}