{"vulnerability": "CVE-2026-5559", "sightings": [{"uuid": "e07470ee-2b05-4576-8aa8-fd26f04f55f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5559", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miqpugsen52d", "content": "", "creation_timestamp": "2026-04-05T12:11:57.628309Z"}, {"uuid": "b79d9f1b-c892-4f73-a4cf-eea77a4c0c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55591", "type": "published-proof-of-concept", "source": "https://github.com/SignalK/signalk-server/security/advisories/GHSA-q59x-jc9f-gfqf", "content": "", "creation_timestamp": "2026-06-16T18:01:53.000000Z"}, {"uuid": "31536dd1-09ca-4ec0-b1bc-b0fd022adc17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55592", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-55592.yaml", "content": "", "creation_timestamp": "2026-06-22T02:53:55.000000Z"}, {"uuid": "25f7a9d6-5f5e-4a57-8b5b-fa5a85d8129a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55592", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-55592.yaml", "content": "", "creation_timestamp": "2026-06-24T15:00:04.909802Z"}, {"uuid": "3599fccb-d3e6-44bb-9327-53c3fa33460c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55592", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-55592.yaml", "content": "", "creation_timestamp": "2026-06-25T00:00:04.237582Z"}, {"uuid": "b17d51d3-737f-4998-885b-f8583142ce76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55592", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-55592.yaml", "content": "", "creation_timestamp": "2026-06-26T00:00:04.805244Z"}, {"uuid": "94f38232-95f0-4682-af93-5e6cc230b90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55593", "type": "published-proof-of-concept", "source": "https://github.com/froxlor/froxlor/security/advisories/GHSA-xpr4-8vp6-c87j", "content": "", "creation_timestamp": "2026-08-18T22:35:23.351118Z"}, {"uuid": "f141bcad-5a4f-4d78-b419-ce19ee5a27fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmda6anau2b", "content": "CVE-2026-55595 - ImageMagick: Infinite Loop in connected-components when providing invalid arguments\nCVE ID : CVE-2026-55595\n \n Published : July 1, 2026, 7 p.m. | 46\u00a0minutes ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating dig...", "creation_timestamp": "2026-07-01T20:11:34.066897Z"}, {"uuid": "4616d9de-54df-418c-a6bf-70ee9f73231b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmeddav3g2n", "content": "CVE-2026-55594 - ImageMagick: Stack Overflow in MVG decoder due to missing depth check.\nCVE ID : CVE-2026-55594\n \n Published : July 1, 2026, 6:58 p.m. | 48\u00a0minutes ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating digital image...", "creation_timestamp": "2026-07-01T20:31:13.617882Z"}, {"uuid": "301e8fd0-bdad-4c7e-ace8-084c618f0952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55595", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnszkptdj27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55595 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E03ABB6E-D845-4DE4-98FF-F7A8CA15B3FD", "creation_timestamp": "2026-07-02T10:26:52.021370Z"}, {"uuid": "91e9ce3d-e178-4271-ba0e-0e57aadb73c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55594", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnta4t6xy2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55594 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C46C3B20-353F-4FDF-A327-43A3DB164934", "creation_timestamp": "2026-07-02T10:30:32.117755Z"}, {"uuid": "1f058320-2ccd-4fda-b2de-d2071bfa0a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55594", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnxvevwqw2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55594 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9786AF9B-6CFA-4943-B1A5-AA12FC586E75", "creation_timestamp": "2026-07-02T11:54:05.039097Z"}, {"uuid": "14f95cb2-feae-471e-b3b3-9d7bd6dd8f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55595", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnxvyr5ig2q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55595 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F3604348-F5F5-454E-8A03-82BB279B8228", "creation_timestamp": "2026-07-02T11:54:20.884447Z"}, {"uuid": "619bc12e-b9c3-419f-8c37-cce4deea3eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55597", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnxzt4tn52o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55597 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FEC66B0A-E1B2-4902-898A-2A2C42A12CD5", "creation_timestamp": "2026-07-02T11:56:32.103962Z"}, {"uuid": "21cf160a-7d7b-4314-b95b-bd2d1713daf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55594", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnie2f7k2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55594 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1F732BA2-DF04-418D-9301-7D089B003D2F", "creation_timestamp": "2026-07-03T13:25:44.917632Z"}, {"uuid": "d6d147dc-898b-472b-a999-3107f0d614db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55597", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnlk6zdd2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55597 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D80A3360-16C6-42F1-8B58-C8DA0D79A703", "creation_timestamp": "2026-07-03T13:27:32.107652Z"}, {"uuid": "eece1c8c-8ddc-4faf-b7cc-053567f1d0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55595", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnpna2ry2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55595 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D694C2E1-87CD-4EBD-841A-18BA9DB49328", "creation_timestamp": "2026-07-03T13:29:49.407367Z"}, {"uuid": "ec841503-1563-471a-892c-6a10e5408432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55599", "type": "published-proof-of-concept", "source": "https://github.com/phpseclib/phpseclib/security/advisories/GHSA-m557-wrgg-6rp4", "content": "", "creation_timestamp": "2026-07-08T18:35:03.537509Z"}, {"uuid": "1d3f0c46-689c-4748-bb55-82b1ca75acea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55596", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq66jmihnl27", "content": "CVE-2026-55596 - Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript\nCVE ID : CVE-2026-55596\n \n Published : July 8, 2026, 8:27 p.m. | 32\u00a0minutes ago\n \n Description : Plate is a rich-text editor with AI and shadcn/ui. From 53.0.0 until...", "creation_timestamp": "2026-07-08T22:35:17.631126Z"}, {"uuid": "e13dca91-1938-4b4f-932e-8dc33dec48ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqaj36nun627", "content": "CVE-2026-55590 - CakePHP: Open redirect weakness via backslash bypass\nCVE ID : CVE-2026-55590\n \n Published : July 9, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applicatio...", "creation_timestamp": "2026-07-09T20:49:24.002153Z"}, {"uuid": "bc00fd2e-7640-435a-919b-0ca758b9974d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55590", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktqzssjo27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55590 \u0432 CakePHP Authentication: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E641FC69-D219-4E06-B497-98558401A749", "creation_timestamp": "2026-07-13T23:27:12.095381Z"}, {"uuid": "30236c3a-fc5d-4074-a870-b6a8bc743ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55593", "type": "seen", "source": "https://gist.github.com/alon710/3948341428804c685cf1bc5b4fc0d3f1", "content": "# CVE-2026-55593: CVE-2026-55593: Persistent Administrative Hijacking via Cross-Site Request Forgery in Froxlor Ajax Router\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-08-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55593\n\n## Summary\nFroxlor prior to version 2.3.8 contains a high-severity architectural flaw where the standalone lib/ajax.php entry point bypasses the centralized request validation in lib/init.php. Unauthenticated remote attackers can leverage Cross-Site Request Forgery (CSRF) to induce authenticated administrators to submit forged requests that modify API key whitelists and expiration dates, potentially yielding persistent, out-of-band administrative control.\n\n## TL;DR\nAn architectural flaw in Froxlor's standalone AJAX handler allows remote attackers to perform Cross-Site Request Forgery (CSRF) attacks to silently alter administrative API key parameters and gain persistent, unauthorized server access.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-352 (Cross-Site Request Forgery)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.5 Medium\n- **EPSS Score**: Not available\n- **Impact**: High Integrity Modification (I:H)\n- **Exploit Status**: Proof of Concept / Technical Analysis\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Froxlor Server Administration Panel\n- **Froxlor**: < 2.3.8 (Fixed in: `2.3.8`)\n\n## Mitigation\n\n- Upgrade Froxlor to version 2.3.8 or higher.\n- Configure modern SameSite cookie flags (Lax or Strict) on session identifiers.\n- Enforce network segmentation limiting access to administrative endpoints.\n\n**Remediation Steps:**\n1. Retrieve the latest repository updates or download Froxlor v2.3.8 directly from the official source.\n2. Apply the database and file system migrations to update the underlying dependencies and configurations.\n3. Verify that the 'csrf_token' field is properly generated within user sessions.\n4. Inspect browser cookie settings to confirm SameSite cookies are active.\n\n## References\n\n- [Froxlor Security Advisory](https://github.com/froxlor/froxlor/security/advisories/GHSA-xpr4-8vp6-c87j)\n- [Code Fix Security Patch Commit](https://github.com/froxlor/froxlor/commit/5f540fe361e7e13e8c5a32805b793a25e9e26a0e)\n- [Froxlor Release 2.3.8](https://github.com/froxlor/froxlor/releases/tag/2.3.8)\n- [CVE-2026-55593 Record](https://www.cve.org/CVERecord?id=CVE-2026-55593)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55593) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-19T11:32:39.231301Z"}, {"uuid": "20e82656-df69-4731-ac96-b8a84b7d58b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55596", "type": "seen", "source": "https://gist.github.com/alon710/fe6f5c87f44e8737a1f8abea57fa2cd5", "content": "# CVE-2026-55596: CVE-2026-55596: DOM-based Cross-Site Scripting (XSS) in Plate Media Embed Component\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55596\n\n## Summary\nCVE-2026-55596 is a critical DOM-based Cross-Site Scripting (XSS) vulnerability in the Plate rich-text editor framework (specifically within the @platejs/media package). The issue stems from an optimization fast-path that short-circuits safety parsing if a provider or source URL is already declared on an element. Consequently, serialized documents carrying malicious javascript: URLs bypass protocol sanitization and are loaded directly into iframe elements, leading to code execution.\n\n## TL;DR\nA validation bypass in Plate's media component allows unauthenticated DOM-based XSS when rendering crafted document nodes.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network\n- **CVSS Score**: 8.7\n- **EPSS Score**: 0.0043\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- @platejs/media\n- platejs\n- @platejs/utils\n- @platejs/core\n- **@platejs/media**: >= 53.0.0, < 53.1.4 (Fixed in: `53.1.4`)\n\n## Mitigation\n\n- Upgrade @platejs/media to version 53.1.4 or newer.\n- Implement client-side component wrappers that sanitize iframe URLs against malicious protocols.\n- Filter rich-text schema objects at the API ingress layer to sanitize URL protocols.\n\n**Remediation Steps:**\n1. Identify all deployments using @platejs/media or related monorepo packages.\n2. Execute dependency updates using standard package management tools (npm, yarn, pnpm).\n3. Deploy code modifications to enforce schema validation for saved media components in existing documents.\n\n## References\n\n- [GitHub Security Advisory GHSA-qj6x-xx2h-8hvv](https://github.com/udecode/plate/security/advisories/GHSA-qj6x-xx2h-8hvv)\n- [Vulnerability Fix Pull Request (PR #5014)](https://github.com/udecode/plate/pull/5014)\n- [Vulnerability Fix Commit](https://github.com/udecode/plate/commit/6214914ca811adf22d0ad503154494216eed68ba)\n- [Plate Version v53.1.4 Release Notes](https://github.com/udecode/plate/releases/tag/v53.1.4)\n- [NVD Vulnerability Detail Page](https://nvd.nist.gov/vuln/detail/CVE-2026-55596)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55596) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T17:32:46.022528Z"}, {"uuid": "026182fb-d659-49df-98d6-c9fdb6fdfe92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55596", "type": "published-proof-of-concept", "source": "https://github.com/udecode/plate/security/advisories/GHSA-qj6x-xx2h-8hvv", "content": "", "creation_timestamp": "2026-08-25T18:35:09.241936Z"}]}