{"vulnerability": "cve-2026-7841", "sightings": [{"uuid": "3e85baf0-f965-4174-aa82-3d2a37aa2273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7841", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml6gseenn52p", "content": "CVE-2026-7841 - GV-ASWeb Remote Code Execution (RCE) vulnerability\nCVE ID : CVE-2026-7841\n \n Published : May 6, 2026, 6:47 a.m. | 1\u00a0hour, 51\u00a0minutes ago\n \n Description : A remote code execution vulnerability\nexists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authe...", "creation_timestamp": "2026-05-06T09:57:22.834593Z"}, {"uuid": "4c625af7-544a-4dc1-b4d4-4b0f38daba1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7841", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml6hel52bm2k", "content": "CVE-2026-7841 - GV-ASWeb Remote Code Execution (RCE) vulnerability\nCVE ID : CVE-2026-7841\n \n Published : 6 mai 2026 06:47 | 1\u00a0heure, 51\u00a0minutes ago\n \n Description : A remote code execution vulnerability\nexists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authentica...", "creation_timestamp": "2026-05-06T10:07:34.160408Z"}, {"uuid": "ecd1b14c-74d8-4f18-8c6d-a37c361012ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7841", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7f4dzqiz2e", "content": "\ud83d\udfe0 CVE-2026-7841 - High (8.8)\n\nA remote code execution vulnerability\nexists in Notification Settings on GeoVision GV-ASWeb 6.2.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7841/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T18:59:50.922409Z"}, {"uuid": "a71d46af-dc90-42dc-ac98-1cfb5f673fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78416", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dwnqgjb7vot5l", "content": "CVE-2026-78416 - Authenticated RCE via `condition.config` JSON cleanse bypass\nCVE ID : CVE-2026-78416\n \n Published : Aug. 24, 2026, 4:17 p.m. | 17\u00a0minutes ago\n \n Description : Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authentic...", "creation_timestamp": "2026-08-24T17:04:17.073131Z"}, {"uuid": "66f351e9-e056-499a-942a-abfc5dc2fc6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78416", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv3mklvvi24", "content": "CVE-2026-78416\nVersions of Craft CMS released before the latest updates (4.18.2 and 5.10.6) contain a flaw that lets anyone who can log into the admin area cause the server to run their own commands. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:30:04.630678Z"}, {"uuid": "6de529bc-6e66-46ea-bb56-2f4a13a10505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78410", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3muvfz7thww2s", "content": "2/6\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-76642\n    https://www.cve.org/CVERecord?id=CVE-2026-78410\n    https://www.cve.org/CVERecord?id=CVE-2026-78409\n    https://www.cve.org/CVERecord?id=CVE-2026-78408\n    https://www.cve.org/CVERecord?id=CVE-2024-28085\n  (* Security fix *)", "creation_timestamp": "2026-09-07T02:01:20.359536Z"}, {"uuid": "c351cad3-4da6-4b62-a5dd-b9b0817b5717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78416", "type": "seen", "source": "https://bsky.app/profile/fortrabbit.com/post/3muwwfckc672y", "content": "Patch week. Craft CMS: two authenticated RCEs, CVE-2026-78416 and CVE-2026-79988, fixed in 5.10.14 and 4.18.7. Phalcon: critical Volt injection, fixed in 5.16.0. Winter CMS: six advisories, fixed in 1.2.14. github.com/advisories?q...", "creation_timestamp": "2026-09-07T16:27:03.770939Z"}, {"uuid": "0fdbf7bd-6696-4617-afbb-5c682ec3b189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7841", "type": "seen", "source": "https://t.me/shimiscyberworld/1249", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-06\n\n\ud83d\udcca 25 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-41930 (9.8) \u2014 CVE-2026-41930: Vvveb Docker Hard-Coded Credentials Lead to\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-7841 (8.8) \u2014 GeoVision GV-ASWeb RCE: High-Severity Flaw Affects\u2026\n  \u2022 CVE-2025-31951 (8.8) \u2014 HCL BigFix RunBookAI Vulnerability Allows Command Smuggling\n  \u2022 CVE-2026-20034 (8.8) \u2014 Cisco Unity Connection: Authenticated RCE Via Web\u2026\n  \u2022 CVE-2026-42503 (8.8) \u2014 CVE-2026-42503: gopls Vulnerability Exposes Dev\u2026\n  \u2022 CVE-2026-7875 (8.8) \u2014 NanoClaw Container Vulnerability Allows Arbitrary File\u2026\n  \u2022 CVE-2026-41934 (8.8) \u2014 Vvveb RCE: Authenticated Users Can Achieve Unauthenticated\u2026\n  \u2022 CVE-2026-41938 (8.8) \u2014 CVE-2026-41938: Vvveb Unrestricted File Upload Leads to RCE\n  \u2022 CVE-2024-30151 (8.3) \u2014 HCL BigFix Service Management Privilege Escalation\u2026\n  \u2022 CVE-2026-41936 (8.1) \u2014 CVE-2026-41936: Vvveb XXE Allows File Disclosure, Privilege\u2026\n  \u2022 CVE-2026-6691 (7.8) \u2014 CVE-2026-6691: MongoDB C Driver Heap Overflow via GSSAPI\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:15.361594Z"}, {"uuid": "45c3b468-8fd7-4a0b-9bd1-36ece27b0e3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7841", "type": "seen", "source": "https://t.me/shimiscyberworld/1249", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-06\n\n\ud83d\udcca 25 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-41930 (9.8) \u2014 CVE-2026-41930: Vvveb Docker Hard-Coded Credentials Lead to\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-7841 (8.8) \u2014 GeoVision GV-ASWeb RCE: High-Severity Flaw Affects\u2026\n  \u2022 CVE-2025-31951 (8.8) \u2014 HCL BigFix RunBookAI Vulnerability Allows Command Smuggling\n  \u2022 CVE-2026-20034 (8.8) \u2014 Cisco Unity Connection: Authenticated RCE Via Web\u2026\n  \u2022 CVE-2026-42503 (8.8) \u2014 CVE-2026-42503: gopls Vulnerability Exposes Dev\u2026\n  \u2022 CVE-2026-7875 (8.8) \u2014 NanoClaw Container Vulnerability Allows Arbitrary File\u2026\n  \u2022 CVE-2026-41934 (8.8) \u2014 Vvveb RCE: Authenticated Users Can Achieve Unauthenticated\u2026\n  \u2022 CVE-2026-41938 (8.8) \u2014 CVE-2026-41938: Vvveb Unrestricted File Upload Leads to RCE\n  \u2022 CVE-2024-30151 (8.3) \u2014 HCL BigFix Service Management Privilege Escalation\u2026\n  \u2022 CVE-2026-41936 (8.1) \u2014 CVE-2026-41936: Vvveb XXE Allows File Disclosure, Privilege\u2026\n  \u2022 CVE-2026-6691 (7.8) \u2014 CVE-2026-6691: MongoDB C Driver Heap Overflow via GSSAPI\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:35.316725Z"}]}