{"vulnerability": "cve-2026-84434", "sightings": [{"uuid": "46a590b9-7bc0-4f5f-81b5-e50d020a3bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvtsnjwiun2j", "content": "\ud83d\udea8 CVE-2026-84434 \u2014 CVSS 9.8 CRITICAL\n\nThe Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84434\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T04:07:16.551427Z"}, {"uuid": "ed2914ad-c797-496f-86a9-2d04c5f39aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvttwcl4zk2b", "content": "CVE-2026-84434\nAll versions of the Gravity Forms plug\u2011in for WordPress up to 3.1.0.4 allow anyone on the internet to place a hidden file\u2011upload field on a public form and bypass the checks that normally block dangerous files.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-19T04:30:04.840522Z"}, {"uuid": "ee3960dc-d25c-435d-b60f-d76ac60859d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4ky3oiv2p", "content": "\ud83d\udd34 CVE-2026-84434 - Critical (9.8)\n\nThe Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:49.888889Z"}, {"uuid": "55fdf1db-6b22-43d5-8b72-0c136fb9e0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://gist.github.com/ichintu/3891ce0c6380cb100014a71d3f634404", "content": "This daily threat intelligence briefing highlights three critical security developments:\n\n- **Supply Chain Breach & Credential Theft:** CrowdSec reported that a May supply chain attack on TanStack npm packages compromised employee credentials. An unrevoked GitHub account belonging to a departed employee was exploited to copy ~170 private repositories.\n- **CISA KEV Catalog Updates:** CISA added three actively exploited Linux kernel vulnerabilities, plus flaws in Acronis Backup and Google Pixel, to its Known Exploited Vulnerabilities catalog.\n- **Critical Public Vulnerabilities:**\n  \u2022 **Totolink Routers:** CVE-2026-93741 (CVSS 10.0) is a publicly exploitable remote buffer overflow in A3002MU firmware.\n  \u2022 **Docker Desktop:** CVE-2026-77179 details a hypervisor escape vulnerability affecting macOS environments.\n  \u2022 **WordPress Gravity Forms:** CVE-2026-84434 (CVSS 9.8) allows unauthenticated attackers to bypass file validation and achieve remote code execution.\n\n**Recommendation:** Organizations should immediately patch affected software, revoke unused or departed-employee credentials, and monitor CISA alerts for active exploitation indicators.", "creation_timestamp": "2026-09-19T08:02:12.227980Z"}]}