{"vulnerability": "cve-2026-7823", "sightings": [{"uuid": "35734f90-6532-412b-a835-b25830741ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7823", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116520440829606859", "content": "\ud83d\udea8 CRITICAL: OS command injection (CVE-2026-7823) in Totolink A8000RU v7.1cu.643_b20200521. Remote attackers can execute OS cmds \u2014 no auth needed. No patch yet; restrict access & monitor updates. https://radar.offseq.com/threat/cve-2026-7823-os-command-injection-in-totolink-a80-8f67ff3e #OffSeq #Vulnerability #RouterSecurity", "creation_timestamp": "2026-05-05T06:00:30.222046Z"}, {"uuid": "a1340ba9-47de-4ffb-8181-03d3e2ce98ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7823", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ml3j3upp6r26", "content": "Totolink A8000RU routers face CRITICAL OS command injection (CVE-2026-7823). No patch yet \u2014 restrict device access & monitor for fixes. Remote attackers can fully compromise devices. https://radar.offseq.com/threat/cve-2026-7823-os-command-injection-in-totolink-a80-8f67ff3e #OffSeq #IoTSecurity", "creation_timestamp": "2026-05-05T06:00:30.568616Z"}, {"uuid": "9e25aed4-cb01-4d85-9826-5356a22e0b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml3mrgdozp2n", "content": "CVE-2026-7823 - Totolink A8000RU cstecgi.cgi setAppFilterCfg os command injection\nCVE ID : CVE-2026-7823\n \n Published : May 5, 2026, 5:16 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the ...", "creation_timestamp": "2026-05-05T07:06:14.842951Z"}, {"uuid": "119de2d5-a383-48e3-9ae5-bd428bdf61cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7823", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vq4ccht2c", "content": "\ud83d\udd34 CVE-2026-7823 - Critical (9.8)\n\nA security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the func...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7823/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:19:14.924931Z"}, {"uuid": "bcd2d436-ee7f-416a-a92a-4509ed9f42c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7823", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ml4wu2nw742p", "content": "\ud83d\udd34 CVE-2026-7823 - Critical (9.8)\n\nA security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the func...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-7823/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:39:20.807085Z"}, {"uuid": "8d07f63f-ad85-4dc1-897d-a62141ae46e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7823", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116560266207488199", "content": "Our CTI team identified a lot of activities targeting Totolink A8000RU (CVE-2026-7823) https://vuldb.com/vuln/361075/cti", "creation_timestamp": "2026-05-12T06:48:36.116206Z"}, {"uuid": "faddd1ac-44f8-43b4-8fb1-da4f868560d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78239", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xirxzad2v", "content": "~Cisa~\nThree flaws enable unauthenticated access, authentication bypass, and command execution; update to 2.1.240.\n-\nIOCs: CVE-2026-78239, CVE-2026-76943, CVE-2026-78037\n-\n#CVE #ICS #ThreatIntel", "creation_timestamp": "2026-08-29T13:15:39.928592Z"}, {"uuid": "75cf9379-39f7-49f7-b050-3004d1a14871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78239", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01", "content": "", "creation_timestamp": "2026-08-27T16:15:12.587479Z"}, {"uuid": "c666cfcf-7b79-4d91-ad7a-d8ddabd7f3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fkri2bux5ijjh", "content": "CVE-2026-78239 - Xiiaozet LK100W Missing Authentication for Critical Function\nCVE ID : CVE-2026-78239\n \n Published : Aug. 28, 2026, 12:18 a.m. | 17\u00a0minutes ago\n \n Description : Xiiaozet LK100W exposes a critical management function that can be \ninvoked without authentication, ...", "creation_timestamp": "2026-08-28T00:58:19.904049Z"}, {"uuid": "0c580b3d-7c83-4d3e-b646-9af5a6512539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78239", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7zgddh2m23", "content": "CVE-2026-78239\nThe Xiiaozet LK100W device includes a management feature that can be triggered without any login, letting a remote user enable control functions that should be locked down. This could allow an attacker to gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T13:50:04.670015Z"}, {"uuid": "5213b2d1-21ad-427f-8b5f-0ac848436ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78239", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4bdc6u7d2m", "content": "\ud83d\udd34 CVE-2026-78239 - Critical (9.8)\n\nXiiaozet LK100W exposes a critical management function that can be \ninvoked without authenticatio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78239/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T02:00:54.467089Z"}, {"uuid": "13c57b2b-3cef-4ecc-810e-36b6a53f78e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78239", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4bku5rio2u", "content": "CISA warns that Xiiaozet LK100W vulnerabilities, including CVE-2026-78239, allow attackers to take full control of affected devices. Update now.\n\n#Xiiaozet #LK100W #CISA #Vulnerability #Cybersecurity #CVE202678239", "creation_timestamp": "2026-08-28T02:05:08.112153Z"}, {"uuid": "712a0c60-aa24-4eeb-a758-7feb0f7bbe10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78239", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4brepx542m", "content": "\ud83d\udea8 CVE-2026-78239 \u2014 CVSS 9.3 CRITICAL\n\nXiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78239\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T02:08:46.026315Z"}, {"uuid": "05b772e5-575a-44a0-9277-f85c43d5456c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78238", "type": "seen", "source": "https://jvn.jp/en/jp/JVN04485476", "content": "", "creation_timestamp": "2026-08-28T04:45:12.755051Z"}, {"uuid": "6f726d5a-bb13-4cef-ae47-f95981327a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78237", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2ap6lpuc33ilq", "content": "CVE-2026-78237 - Insufficient input validation in Admin By Request (ABR)\nCVE ID : CVE-2026-78237\n \n Published : Aug. 26, 2026, 7:24 a.m. | 43\u00a0minutes ago\n \n Description : Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sud...", "creation_timestamp": "2026-08-26T08:21:02.420480Z"}, {"uuid": "538de836-e5d3-4e23-a297-72141ead11a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78236", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mty7qnz2xi2b", "content": "In what is becoming standard practice, Admin By Request for macOS version 5.2.2 and below lets basic users elevate themselves to full administrators. Thanks to insecure PIN derivation over XPC in CVE-2026-78236 and sloppy sudoers injection in CVE-2026-78237, anyone on the endpoin...\n\nRead full story", "creation_timestamp": "2026-08-26T11:21:55.934540Z"}, {"uuid": "03f0779b-50ab-4b06-97b9-f513eb524e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78237", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mty7qnz2xi2b", "content": "In what is becoming standard practice, Admin By Request for macOS version 5.2.2 and below lets basic users elevate themselves to full administrators. Thanks to insecure PIN derivation over XPC in CVE-2026-78236 and sloppy sudoers injection in CVE-2026-78237, anyone on the endpoin...\n\nRead full story", "creation_timestamp": "2026-08-26T11:21:55.980343Z"}, {"uuid": "0b13c31d-a309-443f-9013-6be8f23574c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78234", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzpfvebzn2f", "content": "CVE-2026-78234 - red hat build of apache camel - hawtio 4\nThe Hawtio Operator on OpenShift lets anyone with edit rights in a project create a signed client certificate using any name they choose. That certificate can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-09-08T19:00:05.977384Z"}, {"uuid": "87b2da34-132f-4ac7-8fc4-1c7078e12abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78234", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muz72wcipj2j", "content": "\ud83d\udea8 CVE-2026-78234 \u2014 CVSS 9.9 CRITICAL\n\nA flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78234\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T14:07:37.836734Z"}, {"uuid": "5ccc071a-2dfb-49bb-9e83-05ab206f32af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78234", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117235307505120412", "content": "CRITICAL (CVSS 9.9): CVE-2026-78234 in Red Hat build of Apache Camel - HawtIO 4 allows users with edit access to mint Service-CA-signed certs, enabling service impersonation & RCE. Restrict HawtIO CR access, audit certs. Details: https://radar.offseq.com/threat/cve-2026-78234-improper-certificate-validation-in-red-hat-red-hat-build-of-apache-camel-hawtio-4-903d3c886e0b139e #OffSeq #CVE202678234 #RedHat", "creation_timestamp": "2026-09-08T12:00:28.597219Z"}, {"uuid": "05ba6ffe-4335-4616-8cb9-2060708e11eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78234", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muyxxlx3bk2z", "content": "Red Hat build of Apache Camel - HawtIO 4 hit by CRITICAL vuln (CVE-2026-78234). Edit users can mint Service-CA-signed certs, risking service impersonation & RCE. Restrict HawtIO CR access, review certs. https://radar.offseq.com/threat/cve-2026-78234-improper-certificate-validation-in-red-hat-red-...", "creation_timestamp": "2026-09-08T12:00:30.390298Z"}, {"uuid": "46d2e4bc-ed56-48a1-ae1e-67d1feb09e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78234", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2bxdmo7v2x", "content": "A critical Hawtio Operator vulnerability, tracked as CVE-2026-78234, allows in-cluster service impersonation. Discover the impact and mitigation steps.\n\n#HawtioOperator #CVE202678234 #Kubernetes #OpenShift #Vulnerability", "creation_timestamp": "2026-09-09T00:31:59.104471Z"}, {"uuid": "a28fc5c2-ce49-45a7-a7d0-f74084fcd062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7823", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:15.895036Z"}, {"uuid": "c58e98ff-f959-4f03-84c4-0d1cf4c2cd56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7823", "type": "seen", "source": "https://t.me/shimiscyberworld/1205", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7823 \u2014 CVSS 9.8\nCVE-2026-7823: Critical Command Injection in Totolink A8000RU Routers\n\nCVE-2026-7823 \u2014 A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipula\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7823 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.704986Z"}, {"uuid": "7a666119-a957-4b33-95b6-93a57e767fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7823", "type": "seen", "source": "https://t.me/shimiscyberworld/1205", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7823 \u2014 CVSS 9.8\nCVE-2026-7823: Critical Command Injection in Totolink A8000RU Routers\n\nCVE-2026-7823 \u2014 A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipula\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7823 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:34.062595Z"}, {"uuid": "29507abe-6947-44c3-b551-322a0403effe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7823", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:34.844442Z"}]}