{"vulnerability": "CVE-2026-5950", "sightings": [{"uuid": "4bd8e885-90b6-4499-929d-a6a26c7da19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5950", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmc4ra55ad24", "content": "ISC has disclosed six vulnerabilities in BIND 9 (CVE-2026-3039, CVE-2026-3592, CVE-2026-3593, CVE-2026-5946, CVE-2026-5947, CVE-2026-5950)", "creation_timestamp": "2026-05-20T14:33:38.925934Z"}, {"uuid": "4620e2eb-394a-4167-9ab7-e8491d362113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5950", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmc5oop7eh2i", "content": "CVE-2026-5950 - Unbounded resend loop in BIND 9 resolver\nCVE ID : CVE-2026-5950\n \n Published : May 20, 2026, 1:16 p.m. | 58\u00a0minutes ago\n \n Description : An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a re...", "creation_timestamp": "2026-05-20T14:50:07.201238Z"}, {"uuid": "ef9fdd48-38c1-44e3-913b-b84eb860788b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5950", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmefrxbtbw2c", "content": "\ud83d\udd17 CVE : CVE-2026-5946, CVE-2026-5947, CVE-2026-5950", "creation_timestamp": "2026-05-21T12:20:25.678537Z"}, {"uuid": "056c19b5-1ca2-4eb4-ba91-0705b3ca0b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5950", "type": "seen", "source": "https://bsky.app/profile/moselwal.de/post/3mmhj6kmddk2e", "content": "CVE-2026-5950 \u2014 Unbounded Resend Loop im BIND-9-Resolver: warum DNS-Resilienz mehr ist als nur ein Patch in der Update-Welle\n\nmoselwal.de/blog/cve-202...", "creation_timestamp": "2026-05-22T17:59:12.242862Z"}, {"uuid": "6c8ff336-8947-44d4-9308-0c1ba036c4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5950", "type": "published-proof-of-concept", "source": "Telegram/Sf_a43W2L9rm9FpWaInkR8nKZdsDVC-bQXIPMKU90yJyhjQ", "content": "", "creation_timestamp": "2026-06-14T03:00:05.000000Z"}, {"uuid": "e388ba5e-090f-4597-8aa1-ee77df126f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59500", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxfo6wfwm24", "content": "CVE-2026-59500 - portal generator addon to priority erp (developed by soft solutions)\nApache's authentication mechanism can be bypassed, allowing unauthorized users to access the server. This could lead to sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#priority #CVE #infosec", "creation_timestamp": "2026-08-13T10:10:04.190194Z"}, {"uuid": "902551ca-255b-40fb-b9f6-124d4de0ed11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59503", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxfoabtly23", "content": "CVE-2026-59503 - portal generator addon to priority erp (developed by soft solutions)\nAdobe Acrobat has a security issue that allows unauthorized access to sensitive information, including private personal data.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#priority #CVE #infosec", "creation_timestamp": "2026-08-13T10:10:05.368175Z"}, {"uuid": "02b7422c-07de-460f-86f0-26710d6e6a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59504", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxga3bosk24", "content": "CVE-2026-59504 - portal generator addon to priority erp (developed by soft solutions)\nAdobe Acrobat has a security issue where it relies on the server to enforce security, potentially allowing malicious servers to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#priority #CVE #infosec", "creation_timestamp": "2026-08-13T10:20:04.079785Z"}, {"uuid": "7a3cd501-e9e3-40eb-be75-d3e28f213832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59506", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxga4sidz2b", "content": "CVE-2026-59506 - portal generator addon to priority erp (developed by soft solutions)\nAn attacker can access sensitive data without a password in WordPress. This means unauthorized users may be able to view or edit\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#priority #CVE #infosec", "creation_timestamp": "2026-08-13T10:20:06.062442Z"}, {"uuid": "7bf24e2b-70f3-463a-9a44-53403903fafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5950", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2015", "content": "", "creation_timestamp": "2026-08-13T10:21:14.709888Z"}, {"uuid": "3cf0234b-536c-4e10-8b96-86ced288b35c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4ogqyvskaudrn", "content": "CVE-2026-59503 - Priority \u2013 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor\nCVE ID : CVE-2026-59503\n \n Published : Aug. 13, 2026, 9:30 a.m. | 41\u00a0minutes ago\n \n Description : CWE-200:...", "creation_timestamp": "2026-08-13T10:24:34.308950Z"}, {"uuid": "3fd302ae-69de-4826-a466-32fab5120a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59507", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxgrxr5j42p", "content": "CVE-2026-59507 - portal generator addon to priority erp (developed by soft solutions)\nA security issue in WordPress allows attackers to access sensitive information. This is because the software has hard-coded\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#priority #CVE #infosec", "creation_timestamp": "2026-08-13T10:30:04.544636Z"}, {"uuid": "637bd94b-f5dc-4ff5-b4d5-b40de64620ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59507", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117087733264892290", "content": "CVE-2026-59507 (CRITICAL, CVSS 9.3) impacts Priority ERP Portal Generator addon: hard-coded creds, info exposure, improper access control. No patch yet \u2014 restrict access & monitor systems. https://radar.offseq.com/threat/cve-2026-59507-cwe-798-use-of-hard-coded-credentials-cwe-200-exposure-of-sensitive-information-to-an-30882f5adf8cd1ad #OffSeq #CVE #Infosec #ERP", "creation_timestamp": "2026-08-13T10:30:24.528706Z"}, {"uuid": "a641aca3-67c3-494e-8016-8c4e7abc6543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59507", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msxgsm2tel2t", "content": "CVE-2026-59507: CRITICAL vuln in Priority ERP Portal Generator addon allows remote data exposure via hard-coded creds. No patch yet \u2014 restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-59507-cwe-798-use-of-hard-coded-credentials-cwe-200-exposure-of-sensitive-information-...", "creation_timestamp": "2026-08-13T10:30:26.765517Z"}, {"uuid": "ac2594ee-6c9b-4aa4-94e9-23daf3b936f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i53ehmi3lu7s4", "content": "CVE-2026-59504 - Priority \u2013 CWE-602: Client-Side Enforcement of Server-Side Security\nCVE ID : CVE-2026-59504\n \n Published : Aug. 13, 2026, 9:33 a.m. | 38\u00a0minutes ago\n \n Description : CWE-602: Client-Side Enforcement of Server-Side Security\n \n Severity: 9.1 | CRITICAL\n \n Visit ...", "creation_timestamp": "2026-08-13T10:30:34.173847Z"}, {"uuid": "5a87005b-d063-4cec-8465-02950a0fdc4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59505", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iy6frz6sbq6om", "content": "CVE-2026-59505 - Priority - CWE-284: Improper Access Control\nCVE ID : CVE-2026-59505\n \n Published : Aug. 13, 2026, 9:36 a.m. | 35\u00a0minutes ago\n \n Description : CWE-284: Improper Access Control\n \n Severity: 8.6 | HIGH\n \n Visit the link for more details, such as CVSS details, aff...", "creation_timestamp": "2026-08-13T10:36:34.215324Z"}, {"uuid": "981bdd39-5dc0-468e-9a40-799d953af177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59506", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cyg2ac6dbgsu5", "content": "CVE-2026-59506 - Priority \u2013 CWE-306: Missing Authentication for Critical Function\nCVE ID : CVE-2026-59506\n \n Published : Aug. 13, 2026, 9:41 a.m. | 31\u00a0minutes ago\n \n Description : CWE-306: Missing Authentication for Critical Function\n \n Severity: 9.3 | CRITICAL\n \n Visit the li...", "creation_timestamp": "2026-08-13T10:42:36.058241Z"}, {"uuid": "ed4ac20d-7cc6-40e0-a252-f6c0738ff619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59507", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2i4ddbynbv7o2", "content": "CVE-2026-59507 - Priority \u2013 CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control\nCVE ID : CVE-2026-59507\n \n Published : Aug. 13, 2026, 9:44 a.m. | 28\u00a0minutes ago\n \n Description : CWE-798: Us...", "creation_timestamp": "2026-08-13T10:44:34.467682Z"}, {"uuid": "edc6f2c1-e63e-4967-9a26-1cfd9f8792d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvo7623bw2o", "content": "CVE-2026-59509 - Unauthenticated arbitrary MongoDB collection read in cve-search\nCVE ID : CVE-2026-59509\n \n Published : July 5, 2026, 12:02 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data end...", "creation_timestamp": "2026-07-05T13:21:49.188761Z"}, {"uuid": "feb228e7-b3d7-4206-a841-ccdf714db306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59509", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpvp4ane5k23", "content": "CVE-2026-59509 - cve-search\nCVE-Search, a tool for searching CVEs, has a flaw that allows attackers to access any MongoDB collection without logging in. This could lead to sensitive data being exposed, including\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cvesearch #CVE #infosec", "creation_timestamp": "2026-07-05T13:38:04.817891Z"}, {"uuid": "739119cd-9f52-4270-9eaf-8ef6d44f4acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59509", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116870089136632895", "content": "CVE-2026-59509 (CRITICAL): cve-search POST /fetch_cve_data allows unauth'd access to arbitrary MongoDB collections, exposing admin creds for offline cracking. Restrict endpoint, monitor activity, check vendor updates. https://radar.offseq.com/threat/ghsa-3fmp-59v6-4qw2-ddbb46f84ba1bbe2 #OffSeq #infosec #CVE202659509", "creation_timestamp": "2026-07-06T00:00:38.620312Z"}, {"uuid": "b2f6ba9c-7115-416c-8355-135235fe04be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59506", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117088087250115588", "content": "CVE-2026-59506 (CRITICAL): Portal Generator addon to Priority ERP lacks authentication for a critical function. Unauthenticated remote attackers can access sensitive data. No patch yet \u2014 restrict access & monitor. More info: https://radar.offseq.com/threat/cve-2026-59506-cwe-306-missing-authentication-for-critical-function-in-priority-portal-generator-addon-10b51be16c861426 #OffSeq #CVE202659506 #ERP #Infosec", "creation_timestamp": "2026-08-13T12:00:26.447588Z"}, {"uuid": "943da24f-03f3-450b-8421-c81389f7db64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59506", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msxltla5j72y", "content": "Critical severity: CVE-2026-59506 in Priority Portal Generator (Soft Solutions) lets unauthenticated attackers access sensitive data. Restrict access & monitor until a patch is released. Details: https://radar.offseq.com/threat/cve-2026-59506-cwe-306-missing-authentication-for-critical-function-i...", "creation_timestamp": "2026-08-13T12:00:31.483565Z"}, {"uuid": "02f57481-8c05-4a52-ab5a-1d21b71f4534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59500", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msxlvua3wu27", "content": "\ud83d\udd34 CVE-2026-59500 - Critical (10)\n\nCWE-287: Improper Authentication\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59500/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-13T12:01:44.498282Z"}, {"uuid": "04d1fdf6-155f-41c7-81d6-f38adb80c5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59501", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msxlw2zlvw2t", "content": "\ud83d\udfe0 CVE-2026-59501 - High (8.2)\n\nCWE-284: Improper Access Control\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59501/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-13T12:01:51.620330Z"}]}