{"vulnerability": "cve-2026-19586", "sightings": [{"uuid": "51102c3d-1f11-4df4-a171-180bca58ccd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkqajzw6i2k", "content": "CVE-2026-19586 (CVSS 9.3) is a pre-authentication OS command injection flaw in Omada gateways. TP-Link has released fixed firmware.\n\n#Omada #TPLink #CVE202619586 #CommandInjection #OpenVPN #NetworkSecurity", "creation_timestamp": "2026-08-21T02:39:52.841658Z"}, {"uuid": "b1839c09-1f69-4550-8fe5-7650295fee5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2ezjnaj2p", "content": "\ud83d\udea8 CVE-2026-19586 \u2014 CVSS 9.3 CRITICAL\n\nA pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19586\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:40.163874Z"}, {"uuid": "e92b4866-7e51-4f87-95a0-c39cc948c143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtk2hjjoud2u", "content": "CVE-2026-19586 - er7212pc v2\nIf your Omada gateway is set up as an OpenVPN server, an attacker on the internet can send specially crafted connection requests that run commands on the device before logging\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#er7212pcv2 #tplink #CVE #infosec", "creation_timestamp": "2026-08-20T20:10:05.159646Z"}]}