{"vulnerability": "cve-2026-9390", "sightings": [{"uuid": "8f0b2714-ef90-4c0c-b319-f6b9f1e4dbde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9390", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7fde7bch2o", "content": "CVE-2026-9390 - xml::sig\nXML::Sig for Perl versions before 0.71 have a security flaw that could allow an attacker to manipulate the verification process. This could lead to incorrect or unintended results,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xmlsig #timlegge #CVE #infosec", "creation_timestamp": "2026-08-03T21:00:06.553727Z"}, {"uuid": "62d97c31-fe10-4d40-85ff-e8a43f95852f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9390", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfsahehei2n", "content": "\ud83d\udccc CVE-2026-9390 - XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup.\n\nverify() and _get_signed_xml() in lib/XML/Sig.pm build XPath expressions b... https://www.cyberhub.blog/cves/CVE-2026-9390", "creation_timestamp": "2026-08-06T10:07:06.475657Z"}, {"uuid": "44a8ffe6-8250-45d0-9089-dbd6cd2774cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93901", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-93901", "content": "", "creation_timestamp": "2026-09-24T23:16:41.000000Z"}, {"uuid": "402bc84f-247c-4209-9c23-18421283379a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93903", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bihk6d5tf2een", "content": "CVE-2026-93903 - LiteSpeed Web Server Open Redirect Vulnerability\nCVE ID : CVE-2026-93903\n \n Published : 30. September 2026 14:17 | 20\u00a0Minuten ago\n \n Description : LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain \"corner...", "creation_timestamp": "2026-09-30T15:26:37.338260Z"}, {"uuid": "6de50890-2ec1-4741-96b3-0bcd0c93cdee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93903", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqq2qvky725", "content": "\ud83d\udea8 CVE-2026-93903 \u2014 CVSS 9.4 CRITICAL\n\nLiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain \"...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93903\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T16:08:12.028617Z"}, {"uuid": "a52a6ae9-0c48-414f-b220-d78b5f32dda9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93903", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwqsbohmqv2n", "content": "CVE-2026-93903: LiteSpeed Web Server (LSWS) from litespeedtech mishandles internal redirect URL validation in a certain corner case in versions before 6.3.7 build 1. No exploitation is confirmed. Update to 6.3.7 build 1 to fix.", "creation_timestamp": "2026-09-30T16:47:51.396312Z"}]}