{"vulnerability": "cve-2026-8189", "sightings": [{"uuid": "f5927feb-4178-43f8-a1fc-c71076cffc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8189", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlgv5ccmxt2r", "content": "CVE-2026-8189 - Wavlink NU516U1 adm.cgi wzdrepeater os command injection\nCVE ID : CVE-2026-8189\n \n Published : May 9, 2026, 4:15 p.m. | 30\u00a0minutes ago\n \n Description : A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wz...", "creation_timestamp": "2026-05-09T18:35:20.174566Z"}, {"uuid": "ccc27cb4-7e2f-4298-bc0b-4db4642a9463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81891", "type": "published-proof-of-concept", "source": "https://github.com/Studio-42/elFinder/security/advisories/GHSA-gxmj-r5rf-ggwq", "content": "", "creation_timestamp": "2026-09-02T16:35:35.911580Z"}, {"uuid": "81572d82-5507-4cbc-a9c5-c26cef2b26a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81890", "type": "published-proof-of-concept", "source": "https://github.com/Studio-42/elFinder/security/advisories/GHSA-9hjf-w35w-6vx2", "content": "", "creation_timestamp": "2026-09-02T16:35:38.062171Z"}, {"uuid": "25d88f93-2a13-45e9-b3d1-bc64d826f6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81891", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3muno52zkqz23", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-81891) elFinder Remote Code Execution via ZIP Extraction MIME Bypass\" and \"ASM Has a Silent C, and It Stands for Change Management\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-09-04T00:05:19.137244Z"}, {"uuid": "88c4e0f6-7e7f-46a9-910f-20e321f9952a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81891", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3muy4abx4ob24", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-67281) MikroTik RouterOS Unauthenticated File Read via WebFig\" and \"Emerging Threat: (CVE-2026-81891) elFinder Remote Code Execution via ZIP Extraction MIME Bypass\".\n \n#cybersecurity https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-09-08T03:44:17.305700Z"}, {"uuid": "3fc33760-0f13-4efa-b121-ed352ec2f8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gmhvygrxjesmj", "content": "CVE-2026-81899 - Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboard\nCVE ID : CVE-2026-81899\n \n Published : Sept. 15, 2026, 5:54 p.m. | 10\u00a0minutes ago\n \n Description : Concrete CMS 9.0.0 to 9.5.2 stored group folder nam...", "creation_timestamp": "2026-09-15T19:29:36.713247Z"}, {"uuid": "52330b82-cd70-4e49-bb7f-8aba963acdc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81894", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmggqjoqc2t", "content": "CVE-2026-81894\nIf you use Concrete CMS version 9.5.2 or earlier, a person who can edit a page can place malicious code in an image caption within a Gallery block. When a visitor opens that image, the code runs in their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T05:40:05.723737Z"}, {"uuid": "ea28be37-416f-4496-b303-213b049b7801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81895", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmgyoq42t2w", "content": "CVE-2026-81895 - concrete cms\nVersions of Concrete CMS up to 9.5.2 allow a user who can edit a Document Library block to store malicious data that is later executed when the page displays. This can let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concretecms #CVE #infosec", "creation_timestamp": "2026-09-16T05:50:08.493370Z"}, {"uuid": "ad4bd858-034a-475e-8f4b-37913e5da220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmhkk6tel22", "content": "CVE-2026-81897 - concrete cms\nIf an administrator of a site using Concrete CMS older than version 9.5.3 views a specially crafted form, malicious code that an attacker injected can execute in their browser. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concretecms #CVE #infosec", "creation_timestamp": "2026-09-16T06:00:06.875872Z"}, {"uuid": "08ac950d-f107-443f-9822-c19b9151df87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81898", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmi4fbkuf2w", "content": "CVE-2026-81898 - concrete cms\nIf you use Concrete CMS older than version 9.5.3, a specially crafted address entry can store malicious code. When an administrator opens the related dashboard page, the code runs in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concretecms #CVE #infosec", "creation_timestamp": "2026-09-16T06:10:05.832890Z"}, {"uuid": "022b2598-00a5-469e-a58a-065b16de5f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81899", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmioblaxp2r", "content": "CVE-2026-81899 - concrete cms\nIn Concrete CMS versions 9.0 through 9.5.2, the names of group folders are saved without being cleaned and are shown directly on the Groups dashboard. A user who can add a group\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concretecms #CVE #infosec", "creation_timestamp": "2026-09-16T06:20:06.487470Z"}]}