{"vulnerability": "CVE-2026-1287", "sightings": [{"uuid": "dba37718-2e5e-4d5c-aad3-9ef12dcb03ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1287", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdxugave7y2b", "content": "", "creation_timestamp": "2026-02-03T17:16:15.354581Z"}, {"uuid": "e93c4b54-18f9-4c7e-8f12-a8d968cbbbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1287", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/141", "content": "", "creation_timestamp": "2026-02-03T15:53:03.000000Z"}, {"uuid": "53f910d8-56e2-4e37-b5f5-2ba22af5338e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1287", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mepbsbfiy22w", "content": "", "creation_timestamp": "2026-02-13T00:46:46.411045Z"}, {"uuid": "b8462b1b-954d-485d-99f6-ae1c4d8c15aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12872", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msedouqy5w2a", "content": "CVE-2026-12872 - webinfos\nAn outdated version of the Webinfos WordPress plugin allows attackers to upload files without being authenticated. This could lead to malicious code being executed on the server,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webinfos #unknown #CVE #infosec", "creation_timestamp": "2026-08-05T20:14:04.880716Z"}, {"uuid": "db03cf1f-5be4-456e-ba1e-5ae339eca865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12879", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117077984429270584", "content": "Broadcom has several new advisories that include two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCISA:\nIndustrial vulnerability: Johnson Controls C-CURE 9000 and Victor application server (Update A) https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-01\nBlog post: Cyber Storm X: 20 Years of Readiness, Resilience, and Real\u2011World Impact https://www.cisa.gov/news-events/news/cyber-storm-x-20-years-readiness-resilience-and-real-world-impact #CISA \nCisco:\nHigh-severity: CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF @TalosSecurity #Cisco \nYesterday:\nTenable Research Advisories: \nMedium-severity: CVE-2026-12879: Google Cloud Platform (GCP) Apigee Cross-Tenant Data Exfiltration via Confused Deputy https://www.tenable.com/security/research/tra-2026-53 #infosec #Google #vulnerability", "creation_timestamp": "2026-08-11T17:11:08.913561Z"}, {"uuid": "900fe5a7-d5e6-4aaf-9538-b8cc0ee6b5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12877", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg5ycdv322u", "content": "CVE-2026-12877 - project management, bug and issue tracking plugin\nThe WordPress Project Management Plugin is vulnerable to SQL injection attacks. This means attackers can potentially access or manipulate sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-07-24T20:12:05.893721Z"}, {"uuid": "1f127725-8883-4a30-b2b3-623b9754f733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12877", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhmbx6swj2g", "content": "\ud83d\udd34 CVE-2026-12877 - Critical (9.1)\n\nThe Project Management, Bug and Issue Tracking Plugin  WordPress plugin before 5.1.0 does not san...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12877/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-25T10:00:42.419709Z"}]}