{"vulnerability": "CVE-2026-15146", "sightings": [{"uuid": "f0d22722-3c90-4e52-86bb-cfa41c0c4fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15146", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mstfrfi3ik26", "content": "\u300cGNU Wget\u300d\u306bSSRF\u8106\u5f31\u6027 - \u9023\u643a\u5229\u7528\u74b0\u5883\u306a\u3069\u3082\u6ce8\u610f\n\nLinux\u74b0\u5883\u306a\u3069\u3067\u5e83\u304f\u5229\u7528\u3055\u308c\u308b\u30d5\u30a1\u30a4\u30eb\u53d6\u5f97\u30c4\u30fc\u30eb\u300cGNU Wget\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nCERT/CC\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670810\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30b5\u30fc\u30d0\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u306e\u8106\u5f31\u6027\u300cCVE-2026-15146\u300d\u306b\u3064\u3044\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u300cGNU Wget\u300d\u306f\u3001\u30b3\u30de\u30f3\u30c9\u30e9\u30a4\u30f3\u3088\u308aHTTP\u3084HTTPS\u3001FTP\u306a\u3069\u3092\u901a\u3058\u3066\u30b3\u30f3\u30c6\u30f3\u30c4\u3092\u53d6\u5f97\u3067\u304d\u308b\u30c4\u30fc\u30eb\u3002\u5916\u90e8\u3088\u308a\u30c7\u30fc\u30bf\u3092\u53d6\u5f97\u3059\u308b\u305f\u3081\u306b\u4ed6\u30d7\u30ed\u30b0\u30e9\u30e0\u3068\u9023\u643a\u3057\u3066\u5229\u7528\u3055\u308c\u308b\u3053\u3068\u3082\u591a\u3044\u3002\n\nFTP\u306e\u30d1\u30c3\u30b7\u30d6\u30e2\u30fc\u30c9\u3067\u306f\u3001\u30b5\u30fc\u30d0\u304b\u3089...", "creation_timestamp": "2026-08-11T20:01:12.629315Z"}, {"uuid": "229374c9-fad1-4d1f-b384-58d2fd7b62b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15146", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcwdstqlc27", "content": "CVE-2026-15146 - CVE-2026-15146\nCVE ID : CVE-2026-15146\n \n Published : July 10, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP ...", "creation_timestamp": "2026-07-10T19:52:11.511311Z"}, {"uuid": "ac573817-c962-4ee4-95d9-4436789c33b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15146", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhzm6kuv2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15146 \u0432 GNU Wget: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 FTP\n\n\n\nhttps://kripta.biz/posts/103E2EB0-F935-4828-B1CF-B588FF28C077", "creation_timestamp": "2026-07-11T01:08:36.316308Z"}]}