THREAT OPS › Threat News

Threat Intelligence News

11576 reports from 110+ open cyber-threat-intelligence sources — APT activity, malware, vulnerabilities and campaigns, newest first.

[NVD] CVE-2026-80072 (MEDIUM 4.7) — The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing.nvd · 2026-09-13
[NVD] CVE-2026-80071 (HIGH 7.2) — The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account, allowing authenticated users with Author-level access and above to assign themselves an arbitranvd · 2026-09-13
[NVD] CVE-2026-77773 (MEDIUM 5.3) — The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its public AJAX actions, allowing unauthenticated users to read the submitted entries of any form created with a supported thirnvd · 2026-09-13
Retrospective by 'gpg.fail' authorsoss_sec · 2026-09-13
Re: UnrealIRCd 6.2.7 released & hot-patch to fix security issues for existing installationsoss_sec · 2026-09-13
Fwd: UnrealIRCd 6.2.7 released & hot-patch to fix security issues for existing installationsoss_sec · 2026-09-13
[Doommageddon] INCOR Group posted to leak siteransomware_live · 2026-09-13
[Vexy Ransomware] Strad Solutions posted to leak siteransomware_live · 2026-09-12
Re: AI slops from Eveoss_sec · 2026-09-12
Re: AI slops from Eveoss_sec · 2026-09-12
[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090oss_sec · 2026-09-12
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEVthehackernews · 2026-09-12
Local Privilege Escalation (LPE) in FolkPatch due to Hardcoded Default SuperKeyoss_sec · 2026-09-12
[emperador] Nexbex Solutions Private Limited posted to leak siteransomware_live · 2026-09-12
[NVD] CVE-2026-90553 (HIGH 7.8) — vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores the trust_remote_code parameter when loading remote processor classes. Attackers can craft a malicious model with arbitrary code in processing_llava_onevision2.pnvd · 2026-09-12
[NVD] CVE-2026-90552 (MEDIUM 4.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the Playlists_schedules/list.json.php and Live/calendar.json.php endpoints, allowing authenticated and unauthenticated users to read private playlist schedule metadata. Attnvd · 2026-09-12
[NVD] CVE-2026-90551 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the video_from_program API endpoint, allowing unauthenticated access to private playlist contents. Attackers can query the API without authentication to enumerate private pnvd · 2026-09-12
[NVD] CVE-2026-90550 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to check user authorization in the PlayerSkins mediaSession.json.php endpoint before returning video metadata. Unauthenticated attackers can request the endpoint with a video ID parameter to retrieve passwonvd · 2026-09-12
[NVD] CVE-2026-90549 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to properly authorize access to the videosAndroid.json.php endpoint, allowing unauthenticated guests to list password-protected videos with sensitive owner information. Attackers can retrieve video metadatanvd · 2026-09-12
[NVD] CVE-2026-90548 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the ImageGallery list.json.php endpoint, allowing unauthenticated access to list gallery files. Attackers can retrieve filenames and URLs of password-protected image gallerienvd · 2026-09-12
[NVD] CVE-2026-90547 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the Bookmark plugin getBookmarks.json.php endpoint, allowing unauthenticated attackers to read chapter names from password-protected videos. Attackers can query the endpoint nvd · 2026-09-12
[NVD] CVE-2026-90546 (MEDIUM 4.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the like.json.php endpoint, allowing logged-in users to record likes on password-protected and group-restricted videos. Attackers can submit like requests for videos nvd · 2026-09-12
[NVD] CVE-2026-90545 (MEDIUM 4.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the commentAddNew.json.php endpoint, allowing authenticated users to post comments on password-protected and group-restricted videos. Attackers can submit POST requesnvd · 2026-09-12
[NVD] CVE-2026-90544 (MEDIUM 4.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint before updating view statistics. Authenticated attackers can increment view counts and watch-time on videos they cannot accessnvd · 2026-09-12
[NVD] CVE-2026-90543 (MEDIUM 5.3) — WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier, with the Live plugin enabled, contains a missing authentication vulnerability in plugin/Live/socketMessageLiveOwner.json.php. The script reads the `key` and `msg` parameters from $_REQUEST, resolves the snvd · 2026-09-12
[NVD] CVE-2026-90542 (MEDIUM 5.4) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate that logged-in users can access live schedules before creating reminders via remindMe.json.php. Authenticated attackers can create scheduler reminders for private live schedules they cannot viewnvd · 2026-09-12
[NVD] CVE-2026-90541 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to require authentication in the plugin/TopMenu/menus.json.php endpoint, allowing unauthenticated attackers to retrieve all menu data. Attackers can send GET requests to the endpoint to read inactive and adnvd · 2026-09-12
[NVD] CVE-2026-90540 (MEDIUM 4.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch permissions in the playListAddVideo.json.php endpoint when adding videos to playlists. Authenticated attackers can add password-protected videos they cannot watch to playlists they own by nvd · 2026-09-12
[NVD] CVE-2026-90539 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authentication vulnerability in the plugin/TopMenu/menuItems.json.php endpoint that allows unauthenticated attackers to read inactive admin menu items by submitting a POST request with a menuIdnvd · 2026-09-12
[NVD] CVE-2026-90538 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in playlistsFromUser.json.php that allows unauthenticated attackers to read private playlists by requesting another user's identifier. Attackers can retrieve Favoritnvd · 2026-09-12
[NVD] CVE-2026-90537 (HIGH 8.2) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/Scheduler/sendEmail.json.php that allows unauthenticated attackers to access scheduler email jobs by providing a site-wide daily token. Attackers can enumenvd · 2026-09-12
[NVD] CVE-2026-90536 (MEDIUM 5.3) — WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to authorize access to the adsInfo API endpoint, allowing unauthenticated attackers to retrieve password-protected video owner identifiers. Attackers can call the adsInfo API with a videos_id parameter to onvd · 2026-09-12
[NVD] CVE-2026-90535 — Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that accepts user-supplied chatflowId and chatId without ownership verification. Attackers can terminate active chatflow predictions for any user nvd · 2026-09-12
[NVD] CVE-2026-90534 — Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounted without any route-level permission check and invokes component loadMethods with an attacker-controlled nodeName, loadMenvd · 2026-09-12
[NVD] CVE-2026-90533 — Flowise before 3.1.4 contains a broken access control vulnerability in GET /api/v1/organizationuser that allows any authenticated organization member to retrieve the organization owner's full user record including bcrypt password hash and temporary tokens. Attackers can query thenvd · 2026-09-12
[NVD] CVE-2026-15451 (HIGH 8.8) — The MemberPress Corporate Accounts plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.39. This is due to a mass assignment vulnerability in the 'add_sub_account_user' function that passes the raw 'userdata' array to 'wp_insert_user' wnvd · 2026-09-12
[NVD] CVE-2026-10148 (MEDIUM 6.4) — The Booking for Appointments and Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Elementor widgets in versions up to and including 2.4.9. This is due to insufficient input sanitization and output escaping on the 'load_manually' paramnvd · 2026-09-12
[rhysida] Axdia International posted to leak siteransomware_live · 2026-09-12
[unsafe] watchops.com posted to leak siteransomware_live · 2026-09-12
[NVD] CVE-2026-90474 (MEDIUM 6.8) — MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it fnvd · 2026-09-12
[NVD] CVE-2026-90473 (MEDIUM 5.3) — msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor tnvd · 2026-09-12
[NVD] CVE-2026-90472 (MEDIUM 5.3) — msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and nvd · 2026-09-12
[AuditTeam] TE***PB posted to leak siteransomware_live · 2026-09-12
[krybit] www.tiflispalace.ge posted to leak siteransomware_live · 2026-09-12
[krybit] www.tender.mx posted to leak siteransomware_live · 2026-09-12
[krybit] capricornlogistics.com posted to leak siteransomware_live · 2026-09-12
[krybit] www.ibnsinatrust.com posted to leak siteransomware_live · 2026-09-12
[krybit] lasultanahotels.com posted to leak siteransomware_live · 2026-09-12
[krybit] eracm.fr posted to leak siteransomware_live · 2026-09-12
[krybit] pss.ht posted to leak siteransomware_live · 2026-09-12
[krybit] www.metalware.ca posted to leak siteransomware_live · 2026-09-12
[krybit] intherpro.com posted to leak siteransomware_live · 2026-09-12
[krybit] meridian16.hr posted to leak siteransomware_live · 2026-09-12
[krybit] www.eac-airports.com posted to leak siteransomware_live · 2026-09-12
[krybit] swadeshicipl.com posted to leak siteransomware_live · 2026-09-12
When the Whole Company Adopts AI: What It Does to Your SOCthehackernews · 2026-09-12
[global] Sutton Public Schools posted to leak siteransomware_live · 2026-09-12
OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Serversthehackernews · 2026-09-12
[medusalocker] 瑞祥机电 (Ruixiang Jidian) posted to leak siteransomware_live · 2026-09-12
[medusalocker] Abourametals posted to leak siteransomware_live · 2026-09-12
[medusalocker] Frisby Roofing (Frisby Construction LLC) posted to leak siteransomware_live · 2026-09-12
[medusalocker] Praveg Caves Jawai posted to leak siteransomware_live · 2026-09-12
[global] TOWN OF SUTTON | MASSACHUSETTS posted to leak siteransomware_live · 2026-09-12
[NVD] CVE-2026-85200 (HIGH 7.5) — The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmw_posts_locator_ajax_info_window_loader function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on tnvd · 2026-09-12
[NVD] CVE-2026-85198 (MEDIUM 6.5) — The MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin for WordPress is vulnerable to generic SQL Injection via URL Path in all versions up to, and including, 4.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparanvd · 2026-09-12
[NVD] CVE-2026-78175 (HIGH 8.8) — The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.0.7 via the `withdraw_method_field` parameter of the `tutor_save_withdraw_account` AJAX handler. This is due to the handler lacknvd · 2026-09-12
[NVD] CVE-2026-78159 (CRITICAL 9.8) — The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parse_array function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the is_safe_nvd · 2026-09-12
[NVD] CVE-2026-78006 (CRITICAL 9.8) — The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.4 via the is_safe_widget_instance function. This is due to insufficient protection in is_safe_widget_instance, which can be bypassed because PHP fires manvd · 2026-09-12
[NVD] CVE-2026-77161 (MEDIUM 6.5) — The Smart Marketing SMS and Newsletters Forms plugin for WordPress is vulnerable to generic SQL Injection via Parameter Name in all versions up to, and including, 5.1.24 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existingnvd · 2026-09-12
[NVD] CVE-2026-17585 (MEDIUM 5.3) — The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1066 via the 'wpr_keyword' parameter. This makes it possible for unauthenticated attackers to extnvd · 2026-09-12
[NVD] CVE-2026-16482 (HIGH 7.5) — The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versions up to, and including, 4.7.11 due to insufficient escaping on the user supplied parameter and lack of sufficient prepanvd · 2026-09-12
[NVD] CVE-2026-11355 (MEDIUM 5.3) — The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers (including dtlms_save_poc_settings, dtlms_save_skin_settings, and dtlms_save_options_settings) in versions up nvd · 2026-09-12
[NVD] CVE-2026-87919 (MEDIUM 4.9) — The Product XML Feed Manager for WooCommerce WordPress plugin before 3.1.1 does not restrict which object method its product shortcode may call, nor check the user's capability over the targeted product, allowing users with contributor-level access to delete arbitrary WooCommercnvd · 2026-09-12
[NVD] CVE-2026-87918 (MEDIUM 5.3) — The WPBot WordPress plugin before 8.5.7 does not perform any authorization or nonce check on several AJAX actions that relay prompts to its configured AI providers, allowing unauthenticated attackers to make those third-party API calls, and consume the associated cost, using thenvd · 2026-09-12
[NVD] CVE-2026-87916 (MEDIUM 5.3) — The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date rangnvd · 2026-09-12
[NVD] CVE-2026-87894 (MEDIUM 5.3) — The Rox Appointment Booking WordPress plugin before 1.2.3 does not perform any authorization check on the endpoint that returns a booking's confirmation details, and each booking is addressed by a sequential numeric identifier, allowing unauthenticated attackers to read any custnvd · 2026-09-12
[NVD] CVE-2026-87892 (MEDIUM 5.3) — The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own server-side pricing when creating a booking, allowing unauthenticated attackers to create confirmed bookings at an arbitrary price and to bypanvd · 2026-09-12
[NVD] CVE-2026-87891 (MEDIUM 6.5) — The Rox Appointment Booking WordPress plugin before 1.2.0 does not perform any capability or authorization check when saving its holiday schedule, allowing unauthenticated attackers to overwrite the dates the booking system treats as unavailable, which can block legitimate bookinvd · 2026-09-12
[NVD] CVE-2026-87888 (HIGH 8.0) — The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens the YayPricing Wornvd · 2026-09-12
[NVD] CVE-2026-87842 (HIGH 7.5) — The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check before returning the site's stored account login token, allowing unauthenticated attackers to retrieve it and authenticate to the site owner's linked service account.nvd · 2026-09-12
[NVD] CVE-2026-87797 (MEDIUM 4.3) — The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonnvd · 2026-09-12
[NVD] CVE-2026-87759 (HIGH 8.8) — The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselves the administrator nvd · 2026-09-12
[NVD] CVE-2026-86790 (MEDIUM 6.8) — The WP Highlight Box WordPress plugin through 1.0 does not escape some shortcode attributes before outputting them in a page where the shortcode is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.nvd · 2026-09-12
[NVD] CVE-2026-85681 (CRITICAL 9.8) — The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwritenvd · 2026-09-12
[NVD] CVE-2026-84171 (CRITICAL 9.8) — The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible directory, allowing unauthenticated attackers to upload arbitrary files and execute arbitrary code on the server.nvd · 2026-09-12
[NVD] CVE-2026-84099 (HIGH 8.1) — The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escnvd · 2026-09-12
[NVD] CVE-2026-84025 (LOW 2.2) — The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadablnvd · 2026-09-12
[NVD] CVE-2026-84024 (MEDIUM 4.3) — The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page.nvd · 2026-09-12
[NVD] CVE-2026-84023 (MEDIUM 6.5) — The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page.nvd · 2026-09-12
[NVD] CVE-2026-83532 (MEDIUM 6.8) — The Custom Menu Wizard Widget WordPress plugin through 3.3.1 does not sanitize and escape several shortcode attributes before rendering them into HTML, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the affected content isnvd · 2026-09-12
[NVD] CVE-2026-82851 (LOW 2.7) — The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing users with the instructor role to retrieve the full content and metadata of arbitrary posts, including other instructors' prinvd · 2026-09-12
[NVD] CVE-2026-82847 (MEDIUM 6.8) — The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing users with the instructor role to perform Stored Cross-Site Scripting attacks against higher privileged users such as adnvd · 2026-09-12
[NVD] CVE-2026-82845 (CRITICAL 9.9) — The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with nvd · 2026-09-12
[NVD] CVE-2026-81742 (HIGH 8.8) — The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitize the values it stores in them, allowing unauthenticated users to inject arbitrary web scripts whichnvd · 2026-09-12
[NVD] CVE-2026-81429 (HIGH 7.1) — The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a cranvd · 2026-09-12
[NVD] CVE-2026-81402 (CRITICAL 9.8) — The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can leanvd · 2026-09-12
[NVD] CVE-2026-81090 (HIGH 7.2) — The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Exnvd · 2026-09-12
[NVD] CVE-2026-80494 (HIGH 8.6) — The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, includinnvd · 2026-09-12
[NVD] CVE-2026-78152 (MEDIUM 5.3) — The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.nvd · 2026-09-12
[NVD] CVE-2026-77753 (MEDIUM 5.5) — The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working accenvd · 2026-09-12