{"vulnerability": "cve-2026-7833", "sightings": [{"uuid": "d537b9f2-1093-4b60-9660-bc685a4a5d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4hkubzz52p", "content": "CVE-2026-7833 - EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection\nCVE ID : CVE-2026-7833\n \n Published : May 5, 2026, 1:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerabilit...", "creation_timestamp": "2026-05-05T15:05:45.400341Z"}, {"uuid": "725ccb3c-a3e2-4a64-9db3-507bf5a53584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7833", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-7833", "content": "", "creation_timestamp": "2026-05-05T04:16:31.000000Z"}, {"uuid": "204174d5-74f7-4938-bf9d-73a0a6e8f89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78331", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4hnchb7mbb6ai", "content": "CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer", "creation_timestamp": "2026-08-24T16:26:23.086839Z"}, {"uuid": "e34bebbf-00af-4e47-a800-60609f35522f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78332", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4hnchb7mbb6ai", "content": "CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer", "creation_timestamp": "2026-08-24T16:26:23.141736Z"}, {"uuid": "a811a5b1-f97c-47c8-9ff6-2e40f2493aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78330", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvituzizet2t", "content": "CVE-2026-78330 - apache syncope\nVersions of Apache Syncope from 3.0.0\u2011M0 up to 3.0.16, and from 4.0.0\u2011M0 through 4.1.2, may let an attacker who has a normal user\u2019s login token obtain full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-14T19:30:20.357485Z"}, {"uuid": "87d18b01-19b3-41c6-ae4b-b6f787fd2504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78330", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117273174374332264", "content": "CVE-2026-78330 | CRITICAL: Apache Syncope vuln allows admin escalation if JWKS is exposed and JWT auth used. Affects 3.0.0-M0 \u2013 3.0.16, 4.0.0-M0 \u2013 4.0.7, 4.1.0-M0 \u2013 4.1.2. Upgrade to 4.0.8/4.1.3 to mitigate. Details: https://radar.offseq.com/threat/incorrect-privilege-assignment-vulnerability-in-apache-syncope-cve-2026-78330-b2c023a1d947f76b #OffSeq #Vulnerability #ApacheSyncope", "creation_timestamp": "2026-09-15T04:30:31.231363Z"}, {"uuid": "4554399e-ca6a-42be-8d42-381264c1fab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78330", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjs3hr62f2e", "content": "Apache Syncope faces a CRITICAL privilege escalation flaw (CVE-2026-78330) when JWKS is exposed. Versions 3.0.0-M0 \u2013 3.0.16, 4.0.0-M0 \u2013 4.0.7, 4.1.0-M0 \u2013 4.1.2 affected. Upgrade to 4.0.8/4.1.3 ASAP. https://radar.offseq.com/threat/incorrect-privilege-assignment-vulnerability-in-apache-syncope-cve...", "creation_timestamp": "2026-09-15T04:30:33.743973Z"}, {"uuid": "bd60572a-ba9a-4e53-a80d-74afc1455c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78330", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvjtvawti425", "content": "Daily IT Security Digest \u2014 2026-09-15\nof 230 fixes. Chrome users should update to the latest version immediately. Source: @offseq@infosec.exchange \u2014 https://infosec.exchange/@offseq/117239907946637236\n\n## 6. Apache Syncope Admin Escalation via JWKS (CRITICAL)\n\nCVE-2026-78330 is a critical", "creation_timestamp": "2026-09-15T05:02:51.908670Z"}]}