{"vulnerability": "CVE-2026-28672", "sightings": [{"uuid": "1788e3af-cbe4-4545-ad95-cf566f13478c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvkyosmvz26", "content": "CVE-2026-28672 - apache ranger\nApache Ranger versions 0.6 to 2.8 are vulnerable to an issue where an attacker can execute arbitrary operating system commands by manipulating the username. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheranger #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-12T16:40:05.464112Z"}, {"uuid": "9fa5f040-63b4-4a3f-a95b-539aaae3bcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5if5ljlxwuhwj", "content": "CVE-2026-28672 - Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder\nCVE ID : CVE-2026-28672\n \n Published : Aug. 10, 2026, 10:26 a.m. | 3\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in a Command ('Command Injection') vulne...", "creation_timestamp": "2026-08-10T10:59:32.611834Z"}]}