{"vulnerability": "CVE-2026-6720", "sightings": [{"uuid": "eaaf4d23-6fdd-4c7a-beb9-e7d0e39f8ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67208", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrvadilv6w2e", "content": "CVE-2026-67208 - juggle\nAn attacker can access Juggle's database console without a password and run any system command. This is a concern because it allows unauthorized access to your system. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#juggle #somta #CVE #infosec", "creation_timestamp": "2026-07-30T20:04:05.288177Z"}, {"uuid": "72dfafd4-b77a-4b9d-9737-58e17cf96f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67206", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96249", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67206\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anirbala98\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 06:47:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept exploit for CVE-2026-67206\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T02:07:16.914185Z"}, {"uuid": "4f0eab33-2824-4603-bbd5-6ee959071f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67206", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdihpl222o", "content": "\ud83d\udfe0 CVE-2026-67206 - High (8.8)\n\nWolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerController ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67206/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T21:00:33.762965Z"}, {"uuid": "c5bfd76f-91c4-4f02-8b60-3e36562e2b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67207", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdiobq3d2q", "content": "\ud83d\udfe0 CVE-2026-67207 - High (8.8)\n\nWolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreControlle...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67207/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T21:00:40.707652Z"}, {"uuid": "247e5eee-6381-417c-96d4-c625016f57e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67208", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwxuttciu2q", "content": "CVE-2026-67208\nJuggle version 1.6.0 allows anyone on the internet to run system commands without needing a password. This means an attacker could delete or modify important system files, which could cause your business to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:38:03.143451Z"}, {"uuid": "79959338-e2c8-4908-a43f-b81643bc71c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwxuv6omv24", "content": "CVE-2026-67207\nWolf CMS versions up to 0.8.3.1 have a security flaw that lets non-admin users access and manage backups. This means unauthorized users could potentially access sensitive information and disrupt your site.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:38:04.550574Z"}, {"uuid": "bf3794a9-e56c-4c2e-b25e-542a0202d6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67206", "type": "seen", "source": "https://t.me/GithubRedTeam/96249", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67206\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anirbala98\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 06:47:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept exploit for CVE-2026-67206\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-02T08:02:13.894076Z"}, {"uuid": "bda22cf4-6d70-4013-b773-9760ebd9086c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67201", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrspoy6qkg2j", "content": "\ud83d\udfe0 CVE-2026-67201 - High (8.6)\n\nV through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67201/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T20:00:58.138147Z"}]}