{"vulnerability": "cve-2026-9702", "sightings": [{"uuid": "4b8b6640-0b8a-45ea-a213-955da49871b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9702", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mp3vvpptdm2u", "content": "InPost PL WordPress plugin (<1.9.1) HIGH severity vuln lets unauthenticated attackers change WooCommerce order shipping destinations. No patch. Restrict plugin access & monitor orders. https://radar.offseq.com/threat/cve-2026-9702-cwe-284-improper-access-control-in-i-050e346ad7520813 #OffSeq #Wor...", "creation_timestamp": "2026-06-25T07:30:29.403562Z"}, {"uuid": "58bca791-d3dc-4783-8a67-e5631e8115a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9702", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116809572458310891", "content": "HIGH severity: CVE-2026-9702 in InPost PL WordPress plugin (<1.9.1) lets unauthenticated attackers redirect WooCommerce order shipping. No patch yet \u2014 restrict access, monitor for changes. Details: https://radar.offseq.com/threat/cve-2026-9702-cwe-284-improper-access-control-in-i-050e346ad7520813 #OffSeq #WordPress #Vulnerability #Ecommerce", "creation_timestamp": "2026-06-25T07:30:30.265049Z"}, {"uuid": "fc13564c-b920-4c2a-bd9e-e86a6a490dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97029", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bto7tego3ecdu", "content": "CVE-2026-97029 - Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group\nCVE ID : CVE-2026-97029\n \n Published : Sept. 29, 2026, 4:18 a.m. | 25\u00a0minutes ago\n \n Description : Flatpak's process ID namespace separation does not prevent a sandboxed...", "creation_timestamp": "2026-09-29T05:19:29.331983Z"}, {"uuid": "6aefbff1-99ee-4139-b8ea-758eba3ce41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a2mkjtxsrwjfs", "content": "CVE-2026-97024 - Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc\nCVE ID : CVE-2026-97024\n \n Published : Sept. 29, 2026, 4:18 a.m. | 25\u00a0minutes ago\n \n Description : A path traversal vulnerability in Flatpak's handling of the fi...", "creation_timestamp": "2026-09-29T05:21:29.449194Z"}]}