{"vulnerability": "cve-2026-1897", "sightings": [{"uuid": "2b7f854c-fb49-440a-8fba-3fd851030e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18970", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msfva7xipf2t", "content": "CVE-2026-18970 - SQLi in Command Dispatch Platform. Remote exploit via /dm/dispatch/user/findAll, CVSS 7.3. Unpatched, vendor unresponsive. Mitigate now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-18970/", "creation_timestamp": "2026-08-06T11:00:40.140974Z"}, {"uuid": "a318878e-5723-4e05-ae94-d0d12d394532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18970", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117048216095721886", "content": "CVE-2026-18970 - SQLi in Command Dispatch Platform. Remote exploit via /dm/dispatch/user/findAll, CVSS 7.3. Unpatched, vendor unresponsive. Mitigate now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-18970/", "creation_timestamp": "2026-08-06T11:00:40.942796Z"}, {"uuid": "efa9107f-7ca8-48bb-a955-fe360d85f0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18973", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msg7cjkbv426", "content": "CVE-2026-18973 - SSRF in heshengtao super-agent-party \u22640.4.1. Unpatched, exploit public. CVSS 7.3. Update/block immediately. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-18973/", "creation_timestamp": "2026-08-06T14:00:54.625392Z"}, {"uuid": "d2e7328d-356f-4ba9-9c31-73fb8d83e98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18973", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117048924886717524", "content": "CVE-2026-18973 - SSRF in heshengtao super-agent-party \u22640.4.1. Unpatched, exploit public. CVSS 7.3. Update/block immediately. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-18973/", "creation_timestamp": "2026-08-06T14:01:32.651577Z"}, {"uuid": "e0842eef-a665-450e-8ffe-9cef031c4662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18972", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msspwvfmu422", "content": "Rapid7 Velociraptor <0.77.2 hit by CRITICAL CVE-2026-18972 \u2014 auth bypass lets low-priv users spoof admins for account takeover. No patch yet: restrict access, monitor logs. https://radar.offseq.com/threat/cve-2026-18972-cwe-290-authentication-bypass-by-spoofing-in-rapid7-velociraptor-72ecf6c68bed...", "creation_timestamp": "2026-08-11T13:30:35.974206Z"}, {"uuid": "003d8141-19e6-4e68-b9fb-db04da7a9507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18972", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117077117025006386", "content": "CVE-2026-18972 (CRITICAL): Rapid7 Velociraptor <0.77.2 lets low-priv users escalate to admin by spoofing 'Grpc-Metadata-USER' header \u2014 full account takeover. No patch yet. Restrict GUI access, monitor requests. https://radar.offseq.com/threat/cve-2026-18972-cwe-290-authentication-bypass-by-spoofing-in-rapid7-velociraptor-72ecf6c68bed741e #OffSeq #Velociraptor #CVE202618972", "creation_timestamp": "2026-08-11T13:30:33.437241Z"}, {"uuid": "0e8c2636-2170-4bd7-b901-88dade79e8a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18972", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mssqhudt462q", "content": "CVE-2026-18972 - velociraptor\nAn attacker can take over a low-privilege user's account by sending fake login information. This is a concern because it allows a malicious user to gain administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velociraptor #rapid7 #CVE #infosec", "creation_timestamp": "2026-08-11T13:40:04.208914Z"}, {"uuid": "ad135c3f-8636-4713-ab9e-a8aff79d4732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18972", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/rapid7-security-advisory-av26-801", "content": "", "creation_timestamp": "2026-08-11T20:15:25.099761Z"}, {"uuid": "32a9bf00-a6bb-4f1a-a1c7-56f0f2708294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18978", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mu4my2wpd22p", "content": "LiteSpeed Cache, a WordPress plugin on millions of sites, has a stored cross-site scripting flaw (CVE-2026-18978).\n\nA planted comment can run scripts for anyone viewing the page, but only where comments are left open a certain way.\n\nAffects up to 7.8.1. Update to 7.9.", "creation_timestamp": "2026-08-28T05:29:22.590892Z"}]}