{"vulnerability": "CVE-2026-6294", "sightings": [{"uuid": "4f26c663-5bd4-4dd6-8d6f-5e053625bd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk3jf3ktum2k", "content": "", "creation_timestamp": "2026-04-22T12:40:27.962952Z"}, {"uuid": "593180e9-efcb-4c29-84f2-93b5b6551f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6294", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkcwzfwzdo2l", "content": "", "creation_timestamp": "2026-04-25T11:33:07.817549Z"}, {"uuid": "c774bedc-e488-4220-8c50-c53e79b9a97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62940", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmiox4odb24", "content": "CVE-2026-62940 - incus\nA security issue affects incus (Debian). The advisory does not describe the issue in detail. Check the linked advisory for the fixed version and details.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:30:05.386904Z"}, {"uuid": "6e9cf5c4-4813-4442-9dc9-2501558e3079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62941", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmioyjyjj24", "content": "CVE-2026-62941 - incus\nA security issue affects incus (Debian). The advisory does not describe the issue in detail. Check the linked advisory for the fixed version and details.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:30:06.627629Z"}, {"uuid": "b7b73b00-d2ed-4a03-a1cd-34118e62dee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62941", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtoa2pqdfb27", "content": "\ud83d\udd34 CVE-2026-62941 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62941/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T12:00:56.478436Z"}, {"uuid": "ad36b0b9-23a4-4589-bc0c-b0041894f022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62941", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtms6wqdxp2y", "content": "CVE-2026-62941 - incus\nIn versions of Incus before 7.3.0, copying a container from one project to another could add risky settings after the system checked whether the target project allowed them. This means a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #lxc #CVE #infosec", "creation_timestamp": "2026-08-21T22:20:05.186276Z"}, {"uuid": "45d4867e-a13f-4211-9fc1-979f969e1d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62940", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmsqth7wr2p", "content": "CVE-2026-62940 - incus\nIf you use Incus version before 7.3.0 and move a container or virtual machine to another server in the same cluster, the system may apply custom settings that were not properly checked. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #lxc #CVE #infosec", "creation_timestamp": "2026-08-21T22:30:05.711546Z"}, {"uuid": "9c64ac13-8a1c-41cf-b5db-42e142f393ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62940", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5he653y25", "content": "\ud83d\udea8 CVE-2026-62940 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62940\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:59.506576Z"}, {"uuid": "256b34c1-36e8-4716-b988-bef2e13e87a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62941", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5hmwign25", "content": "\ud83d\udea8 CVE-2026-62941 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62941\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:09:08.254279Z"}, {"uuid": "2d712fe2-6cc3-46ae-9f12-12a3d28ce234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnzehjy5i2r", "content": "\ud83d\udd34 CVE-2026-62940 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62940/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T10:01:07.481302Z"}, {"uuid": "c8d2ff86-e9fb-4cd4-a9b4-0977b8ff421c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpeumdoqk2p", "content": "CVE-2026-62948 - openwrt\nAn attacker can inject malicious code into the OpenWrt admin interface, potentially allowing them to steal sensitive information or take control of the device. This is fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openwrt #CVE #infosec", "creation_timestamp": "2026-07-15T18:44:04.784211Z"}, {"uuid": "f932a936-f482-4818-97ea-b30a772e8a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpfsyvg2m2m", "content": "\ud83d\udd34 CVE-2026-62948 - Critical (9.6)\n\nOpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62948/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T19:01:04.856534Z"}, {"uuid": "b98e966d-fb55-4d11-8908-8808cbc6b55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpitaj4sg2s", "content": "CVE-2026-62948 - OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname \u2192 stored XSS in the LuCI admin UI\nCVE ID : CVE-2026-62948\n \n Published : July 15, 2026, 6:16 p.m. | 17\u00a0minutes ago\n \n Description : OpenWrt is a Linux operating sy...", "creation_timestamp": "2026-07-15T19:54:53.773892Z"}, {"uuid": "0afd65c6-7d2d-4fad-a7b4-3013d51e76c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpnuuez3f2s", "content": "CVE-2026-62947 - OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download\nCVE ID : CVE-2026-62947\n \n Published : July 15, 2026, 7:18 p.m. | 15\u00a0minutes ago\n \n Description : OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi...", "creation_timestamp": "2026-07-15T21:25:16.639331Z"}, {"uuid": "9d413d7e-528b-4e63-9807-d1e1f3e99db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqtbxutsz62p", "content": "Critical CVE landed today in OpenWrt:\n\nCVE-2026-62948. OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefil\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-62948", "creation_timestamp": "2026-07-17T08:02:52.126913Z"}, {"uuid": "a957117f-7ce1-4d6b-b090-e2d785160fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62947", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqxhztoy432e", "content": "OpenWrt: CVE-2026-62947 [MEDIUM]\n\nOpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller's ubus session file ACL before canonicalization,\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-62947", "creation_timestamp": "2026-07-19T00:01:59.222181Z"}, {"uuid": "f3b66cc8-9163-4627-9733-b226c9790c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr7fhbxmvx23", "content": "\ud83d\udccc CVE-2026-62948 - OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhc... https://www.cyberhub.blog/cves/CVE-2026-62948", "creation_timestamp": "2026-07-22T03:37:07.116861Z"}]}