{"vulnerability": "CVE-2026-26198", "sightings": [{"uuid": "f20ba75a-f816-42e0-bed6-cb83799050f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpl7amlxb2m", "content": "", "creation_timestamp": "2026-02-25T21:00:15.779134Z"}, {"uuid": "3bf3324d-26c0-4a06-bedd-1da002793c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-26198", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mfxqtpo7vz2k", "content": "", "creation_timestamp": "2026-03-01T03:02:31.608868Z"}, {"uuid": "1c572089-9d51-458b-afdb-91b434c576d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mflbqlowoi26", "content": "", "creation_timestamp": "2026-02-24T04:00:22.048932Z"}, {"uuid": "46d70740-50fe-4dbd-b03a-f93270f945e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mflbrmiajg2s", "content": "", "creation_timestamp": "2026-02-24T04:00:56.296424Z"}, {"uuid": "a696a053-91ae-449d-8466-5efadfef0fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-26198", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfldgiqath2u", "content": "", "creation_timestamp": "2026-02-24T04:30:31.050266Z"}, {"uuid": "d9804150-5fcd-4409-ad70-78033d79d383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-26198", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116123725222412205", "content": "", "creation_timestamp": "2026-02-24T04:30:35.023241Z"}, {"uuid": "85b42eed-51fd-48f0-9e3a-be4d2f5ce3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mflg2utrar2n", "content": "", "creation_timestamp": "2026-02-24T05:17:42.055231Z"}, {"uuid": "f23e3f1b-a407-49f3-ad7c-96d5695cce7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://gist.github.com/alon710/c747a5bfea37c2e9ad96d1646d21077f", "content": "", "creation_timestamp": "2026-02-25T01:08:19.000000Z"}, {"uuid": "e0d53680-198a-4b49-bc34-b4f0ffc8b3cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77169", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-26198-analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sergicortesabadia\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-25 13:37:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDeep dive into a critical SQL injection in Python's Ormar ORM \u2014 reproduction, fix, and tests\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-25T14:00:04.000000Z"}, {"uuid": "327e1b26-7799-4c1d-92ef-5a988a6c2793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:18.938650Z"}, {"uuid": "9f92170b-9e8a-4279-a16c-07cfb65c1324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-26198", "type": "published-proof-of-concept", "source": "https://github.com/ormar-orm/ormar/security/advisories/GHSA-xxh2-68g9-8jqr", "content": "", "creation_timestamp": "2026-02-22T13:53:29.000000Z"}, {"uuid": "24026f28-568e-4b1a-a779-6177f1c055ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://bsky.app/profile/theresidentmachine.bsky.social/post/3mo4bc56bkm27", "content": "CVE-2026-26198: When MIN() Forgot to Ask Whether the Column Was Real\n\n#TheResident #ehabhussein #cybersecurity #infosec #vulnerability #CVE #hacking #security #CVE202626198", "creation_timestamp": "2026-06-12T17:29:06.343645Z"}, {"uuid": "c4f07cc2-982d-4f5c-bb4a-5921777f3668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:44.623950Z"}, {"uuid": "53562a7f-f5a4-439a-8718-5862dde876fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26198", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:25.377110Z"}]}