{"vulnerability": "cve-2026-42417", "sightings": [{"uuid": "9a3d9795-3e40-4be7-b3e1-b115fd3a865a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393144240761553", "content": "CVE-2026-42417 (CRITICAL): ARMember Premium <= 7.8 is vulnerable to unauthenticated SQL Injection (CWE-89). No mitigation yet \u2014 review deployments & monitor databases closely. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21ef978d1d38 #OffSeq #Vulnerability #SQLInjection #WordPress", "creation_timestamp": "2026-10-06T09:00:26.167471Z"}, {"uuid": "3491f6ca-a2ed-4d44-93a1-794feff6e0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx72xgtcgb2j", "content": "CRITICAL SQL Injection in ARMember Premium <= 7.8 (CVE-2026-42417) allows unauthenticated exploitation. No fix yet \u2014 audit your sites and restrict access. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21e...", "creation_timestamp": "2026-10-06T09:00:28.304797Z"}, {"uuid": "ffa7e3c9-4aae-4802-b6ed-ce4bc335b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tvfzxs2l", "content": "\ud83d\udea8 CVE-2026-42417 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in ARMember Premium <= 7.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42417\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:10:03.575295Z"}, {"uuid": "e7552608-5ef9-4285-a957-aab5cf3a7ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcwgjgtyj24", "content": "CVE-2026-42417 - armember premium\nThe ARMember Premium add\u2011on for WordPress can be accessed by anyone on the internet without logging in, allowing them to send specially crafted requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#armemberpremium #reputeinfosystems #CVE #infosec", "creation_timestamp": "2026-10-07T21:50:04.309591Z"}]}