{"vulnerability": "cve-2026-92931", "sightings": [{"uuid": "8b1120f4-50e2-4ef1-a2b8-a36111e31464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92931", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx4zlf7pnx2y", "content": "CRITICAL SSRF vulnerability in Progress @progress/sitefinity-nextjs-sdk (15.1.8326 \u2013 15.4.8637). Remote attackers may access sensitive data. Monitor for updates and restrict server egress. https://radar.offseq.com/threat/cve-2026-92931-cwe-918-server-side-request-forgery-in-progress-software-prog...", "creation_timestamp": "2026-10-05T13:30:31.841541Z"}, {"uuid": "8bea9832-b1fa-497b-afb6-e3f334e96267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92931", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117388543776064293", "content": "CVE-2026-92931 (CRITICAL): SSRF in Progress @progress/sitefinity-nextjs-sdk (15.1.8326 \u2013 15.4.8637). Remote attackers may access internal resources. Monitor for patches & restrict egress where possible. https://radar.offseq.com/threat/cve-2026-92931-cwe-918-server-side-request-forgery-in-progress-software-progresssitefinity-nextjs-sdk-6c11605d160820a3 #OffSeq #CVE #SSRF #Vuln", "creation_timestamp": "2026-10-05T13:31:02.963077Z"}, {"uuid": "c0084f01-3ef4-48b4-9852-0def25da72c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92931", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx4znnsrig27", "content": "CVE-2026-92931: Progress Software reports a server-side request forgery flaw in its Sitefinity Next.js SDK npm package. Versions 15.1.8326 through 15.4.8637 are affected. Upgrade to 15.4.8638. No exploitation confirmed.", "creation_timestamp": "2026-10-05T13:31:46.274711Z"}, {"uuid": "9accab30-1e39-463b-9e77-0c693e7ecf71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92931", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117388558959517478", "content": "Yet another perfect 10 this morning. This one from a company that knows its way around perfect 10s. \ud83e\udd73 \nhttps://www.cve.org/CVERecord?id=CVE-2026-92931\nsev:CRIT 10.0 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\n\nCWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information.", "creation_timestamp": "2026-10-05T13:34:21.688367Z"}, {"uuid": "d542ba3e-3628-4b4b-9f25-896bf1c0b889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92931", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx57jkyh5v24", "content": "\ud83d\udfe0 CVE-2026-92931 - High (8.8)\n\nCWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92931/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T15:16:52.783580Z"}, {"uuid": "3425bcb1-db42-4a48-981c-24b8dac3d7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2tl5aggxtihcr", "content": "CVE-2026-92931 - CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK\nCVE ID : CVE-2026-92931\n \n Published : Oct. 5, 2026, 2:17 p.m. | 53\u00a0minutes ago\n \n Description : CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-next...", "creation_timestamp": "2026-10-05T15:53:31.627700Z"}]}