{"vulnerability": "CVE-2026-5807", "sightings": [{"uuid": "a9fd083e-79f8-492a-b367-6588d2b68841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjodhxzg7k2r", "content": "", "creation_timestamp": "2026-04-17T06:50:05.737017Z"}, {"uuid": "0d990678-9323-412f-989d-09960c8916ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5807", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjoxtrp4ij2m", "content": "", "creation_timestamp": "2026-04-17T12:54:36.938585Z"}, {"uuid": "a1977833-5331-4749-80f0-acfe0f102ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5807", "type": "seen", "source": "Telegram/tG2JfBYkK87mHaeOPjoo4KUh_b5Z5XakpvfcfSoidkAS14Y", "content": "", "creation_timestamp": "2026-04-17T07:16:22.000000Z"}, {"uuid": "de669288-cc73-4220-9916-ed74fec8c78b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58072", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmu54swv2u", "content": "CVE-2026-58072 - service provider console\nA security flaw in Veeam Service Provider Console allows hackers to write files on the management server, potentially allowing them to execute malicious code remotely. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#veeam #CVE #infosec", "creation_timestamp": "2026-08-04T18:20:05.266062Z"}, {"uuid": "d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmxoaj552z", "content": "CVE-2026-58073 - service provider console\nAn attacker can impersonate a managed agent in the Veeam Service Provider Console and steal its credentials without needing a login. This allows the attacker to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#veeam #CVE #infosec", "creation_timestamp": "2026-08-04T18:22:04.086636Z"}, {"uuid": "c84c5164-d104-4369-b172-c725875377c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1", "content": "", "creation_timestamp": "2026-08-05T12:45:06.550526Z"}, {"uuid": "a4406360-f11b-4c93-bdb3-ef8814c05ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58071", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1", "content": "", "creation_timestamp": "2026-08-05T12:45:11.499698Z"}, {"uuid": "941d7004-a899-4f8d-a1b9-0d3368543423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58072", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1", "content": "", "creation_timestamp": "2026-08-05T12:45:09.317907Z"}, {"uuid": "5d6922fc-64e5-4743-8605-642f16fc132f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58071", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.569075Z"}, {"uuid": "225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.662852Z"}, {"uuid": "201401ed-1f57-4f91-bb7d-85921f7f6c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58072", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.620477Z"}, {"uuid": "210fb055-433b-4ad6-bc1a-a1dd0bb318bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58074", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.710507Z"}, {"uuid": "7754f0e4-88db-4aec-82db-85f02f00a77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58075", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.820366Z"}, {"uuid": "c9abc1e4-be40-4da7-b186-8a79b311a6ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58072", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-05T15:00:06.158362Z"}, {"uuid": "f47bcd0c-2415-4b90-a714-489048296dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-05T15:00:06.206363Z"}, {"uuid": "3d9e6a3e-0b90-488a-abd6-c08214a3a567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msdtwlu54i23", "content": "CVE-2026-58073 \u00b7 trending #5\n\nCurrently trending CVE - Hype Score: 11 - A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58073", "creation_timestamp": "2026-08-05T15:32:15.759528Z"}, {"uuid": "ae9b9b85-dfc2-439c-b4c0-b107c2bcff77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58072", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msdtz655wa27", "content": "CVE-2026-58072 \u00b7 trending #6\n\nCurrently trending CVE - Hype Score: 11 - A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58072", "creation_timestamp": "2026-08-05T15:33:34.017322Z"}, {"uuid": "c792b01f-800a-46e2-85cb-3c98db7f5e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58072", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-06T00:00:33.951985Z"}, {"uuid": "a46caf9c-3756-4734-bb72-d2d3928c0532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-06T00:00:34.543157Z"}, {"uuid": "23015d6c-e3e8-4230-89d9-ab8a463170f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58072", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msiyxvchhr2j", "content": "CVE-2026-58072 is trending. Hype score 23, currently #1 on cvemon.\n\nA vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58072", "creation_timestamp": "2026-08-07T16:45:34.482547Z"}, {"uuid": "b01e82a5-eb00-4929-b586-f69a9ae9a167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58077", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqot3gv3km2h", "content": "CVE-2026-58077 - Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics\nCVE ID : CVE-2026-58077\n \n Published : July 15, 2026, 10:16 a.m. | 17\u00a0minutes ago\n \n Description : The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. A specia...", "creation_timestamp": "2026-07-15T13:25:46.249004Z"}, {"uuid": "c2fc329f-dfec-4e40-b0b3-d9cef4b0fc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58077", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqotd5jryh2m", "content": "CVE-2026-58077 - Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics\nCVE ID : CVE-2026-58077\n \n Published : July 15, 2026, 10:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. ...", "creation_timestamp": "2026-07-15T13:30:12.438937Z"}, {"uuid": "76537849-1ae5-4b16-918f-73b065024b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqr37ucybl2s", "content": "CVE-2026-58078 - Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro\nCVE ID : CVE-2026-58078\n \n Published : July 16, 2026, 9:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The Joomla extension Quix Page Builder Pro is vulnerable to an ...", "creation_timestamp": "2026-07-16T10:56:44.194836Z"}]}