{"vulnerability": "cve-2026-94510", "sightings": [{"uuid": "9830fae8-5ebc-4ba6-ba1a-4f93c1bf9fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94510", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxflwfed4d2n", "content": "CVE-2026-94510 - microsoft bookings\nMicrosoft Bookings contains a flaw that lets a user who should not have permission trick the system into thinking they are authorized. This can allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftbookings #microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:20:05.533173Z"}, {"uuid": "849e0eaf-8fb3-42f2-a6c0-19f3fa68ef4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94510", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfopdgkpc2z", "content": "\ud83d\udea8 CVE-2026-94510 \u2014 CVSS 9.9 CRITICAL\n\nAuthorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to e...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94510\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:48.753593Z"}, {"uuid": "99b724f8-9de1-45c6-90d2-a121fc51f188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94510", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117408361757042134", "content": "CVE-2026-94510 (CRITICAL, CVSS 9.9) in Microsoft Bookings enables remote privilege escalation via authorization bypass (CWE-639). Apply the official Microsoft patch now: https://radar.offseq.com/threat/cve-2026-94510-cwe-639-authorization-bypass-through-user-controlled-key-in-microsoft-microsoft-bookings-0e362c50ebe161b6 #OffSeq #Microsoft #Vuln #CVE #Infosec", "creation_timestamp": "2026-10-09T01:30:27.052958Z"}, {"uuid": "4d3035d3-0769-47b9-836a-ac7d3a2388c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94510", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxft7ks5oz2m", "content": "Critical auth bypass (CVE-2026-94510) impacts Microsoft Bookings. Attackers can escalate privileges remotely \u2014 apply the official fix now: https://radar.offseq.com/threat/cve-2026-94510-cwe-639-authorization-bypass-through-user-controlled-key-in-microsoft-microsoft-bookings-0e362c50ebe161b6 #OffS...", "creation_timestamp": "2026-10-09T01:30:29.196300Z"}, {"uuid": "3199152b-aa0e-470e-a8a0-35732df30395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94510", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.272322Z"}]}