{"vulnerability": "CVE-2026-7284", "sightings": [{"uuid": "76465339-c830-4144-95ad-32dd731379c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7284", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116604667946550443", "content": "\u26a0\ufe0f CVE-2026-7284: CRITICAL vuln in Easy Elements for Elementor (\u22641.4.4) lets unauth'd attackers create admin accounts! Disable user registration & monitor vendor for patches. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-7284-cwe-269-improper-privilege-managemen-ab05905e #OffSeq #WordPress #Vuln #CVE20267284", "creation_timestamp": "2026-05-20T03:00:32.745575Z"}, {"uuid": "e35c6c2d-de5e-4d1b-b5a8-f23a2af816b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7284", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmavz62j2w2w", "content": "\ud83d\udd34 CVE-2026-7284 - Critical (9.8)\n\nThe Easy Elements for Elementor \u2013 Addons & Website Templates plugin for WordPress is vulnerable...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7284/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-20T03:00:36.973648Z"}, {"uuid": "d2835eb5-11f7-478f-b06d-6b97df6bf08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7284", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmavzwsrks2y", "content": "CRITICAL: Easy Elements for Elementor (\u22641.4.4) lets attackers register as admins \u2014 full site takeover possible. Disable user registration now & monitor for a fix. https://radar.offseq.com/threat/cve-2026-7284-cwe-269-improper-privilege-managemen-ab05905e #OffSeq #WordPress #Security", "creation_timestamp": "2026-05-20T03:00:44.700977Z"}, {"uuid": "4f6ee171-127c-4ec5-a65d-5c43203dfa22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7284", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmb5mfhuef2q", "content": "CVE-2026-7284 - Easy Elements for Elementor\nCVE ID : CVE-2026-7284\n \n Published : May 20, 2026, 2:16 a.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : The Easy Elements for Elementor \u2013 Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via u...", "creation_timestamp": "2026-05-20T05:16:09.736923Z"}, {"uuid": "ab634c52-9304-4c81-b5fb-ea89e1362c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7284", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmc4oje3mo2s", "content": "CVE-2026-7284 easy-elements (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-20T14:32:07.057157Z"}, {"uuid": "725cca6e-7759-44b6-917e-ff18fe8f1f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72842", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mszi6qzgal2c", "content": "OpenWrt luci-app-lxc has a CRITICAL flaw: Authenticated users can bypass controls & gain root via path traversal. Restrict LuCI access, monitor for abuse, check vendor updates. https://radar.offseq.com/threat/cve-2026-72842-external-control-of-file-name-or-path-in-openwrt-luci-6786f542d3189e32 #O...", "creation_timestamp": "2026-08-14T06:00:28.095075Z"}, {"uuid": "b9161edb-ca08-428b-80ad-b32c60507f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72842", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117092333945573401", "content": "CVE-2026-72842: CRITICAL vuln in OpenWrt luci-app-lxc. Authenticated users can bypass ACLs via `/.%2E` path traversal, leading to root code exec on host. Restrict LuCI access & monitor systems. Patch status pending. https://radar.offseq.com/threat/cve-2026-72842-external-control-of-file-name-or-path-in-openwrt-luci-6786f542d3189e32 #OffSeq #OpenWrt #LinuxSec #CVE", "creation_timestamp": "2026-08-14T06:00:26.968605Z"}, {"uuid": "4f336a59-1fcd-4caa-b6f2-e8456999791b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhxja3xh23", "content": "\ud83d\udea8 CVE-2026-72843 \u2014 CVSS 9.3 CRITICAL\n\nThe customer update route in EverShop is declared with \"access\": \"public\" in packages/evershop/src/modules/...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72843\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:11:39.172024Z"}, {"uuid": "c700ac68-8bc8-4779-bb35-857bd4eba674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72848", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtkj2aofez2m", "content": "Another High-Severity Hole, Because Patch Hygiene Apparently Died Yesterday\nPANIC 62% | Lag 0.0h | CVE-2026-72848 is a high-severity vulnerability in langchain_community's SitemapLoader.parse_sitemap\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-21T00:31:04.588122Z"}, {"uuid": "a4f01ba5-012c-4470-8e8f-3dc649719752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkjke23od2e", "content": "CVE-2026-72843 - evershop\nEverShop\u2019s API for updating a customer record does not check who is making the request. Anyone who knows a customer\u2019s identifier can send a request that changes the email\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#evershop #evershopcommerce #CVE #infosec", "creation_timestamp": "2026-08-21T00:40:05.034423Z"}, {"uuid": "f3dc7c47-a17c-4c8e-aa48-0430f769b69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72841", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117093395688600672", "content": "CVE-2026-72841 (CRITICAL, CVSS 9.4) affects OpenWrt luci-app-openvpn: improper instance_name2 validation enables path traversal and arbitrary file writes, risking persistent root code execution. Restrict access & monitor uploads. https://radar.offseq.com/threat/cve-2026-72841-external-control-of-file-name-or-path-in-openwrt-luci-109c1361849edb55 #OffSeq #OpenWrt #Vuln", "creation_timestamp": "2026-08-14T10:30:26.188652Z"}, {"uuid": "5c4720fc-9a57-4274-96dd-424587ebc18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72841", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mszxbl6ydh2f", "content": "CVE-2026-72841 (CRITICAL): OpenWrt luci-app-openvpn flaw lets authenticated users write files anywhere via path traversal, risking persistent root access. Restrict user access & monitor uploads until patched. https://radar.offseq.com/threat/cve-2026-72841-external-control-of-file-name-or-path-in-...", "creation_timestamp": "2026-08-14T10:30:27.892510Z"}, {"uuid": "227350f2-d847-4b36-9aca-125e30498f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtno4wm7fn25", "content": "CVE-2026-72843\nThe update\u2011customer API in EverShop does not require a login, so anyone can send a request with a known customer ID and change that person\u2019s email or password. This lets an attacker take over a customer\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:40:03.932529Z"}, {"uuid": "a7b67ffb-9490-44b3-92b0-537dc655a502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7284", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motrcpprzu2y", "content": "\ud83d\udea8  ALERT: CVE-2026-7284\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe Easy Elements for Elementor \u2013 Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, and including, 1.4.4. This is due to the 'easyel_handle_register' function not rest", "creation_timestamp": "2026-06-22T01:46:58.331310Z"}, {"uuid": "75876247-295b-4ece-abea-b634fa414e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72841", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtcw3d6yt62v", "content": "Critical CVE landed today in OpenVPN:\n\nCVE-2026-72841. luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intende\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-72841", "creation_timestamp": "2026-08-18T00:03:01.637715Z"}, {"uuid": "2471c286-0fb3-4ac8-9c07-e8987a5c0269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72840", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtddmw3cl42s", "content": "New HIGH CVE for OpenWrt: CVE-2026-72840\n\nOpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users w\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-72840", "creation_timestamp": "2026-08-18T04:05:30.675535Z"}, {"uuid": "f85a6388-9b62-4582-8dca-7ae46035de0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdymxlgh27", "content": "\ud83d\udd34 CVE-2026-72843 - Critical (9.8)\n\nThe customer update route in EverShop is declared with \"access\": \"public\" in packages/evershop/sr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72843/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T23:00:42.885673Z"}, {"uuid": "a66090d8-588d-4acb-a2d7-da571a452265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72848", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdzy6u3727", "content": "\ud83d\udfe0 CVE-2026-72848 - High (8.6)\n\nSitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the docume...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72848/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T23:01:27.975546Z"}, {"uuid": "f0a600b3-36f9-436c-86c9-8ab67de51242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72841", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyq56elrd2u", "content": "CVE-2026-72841 - luci\nAuthenticated users can upload malicious files to gain root access. This happens because the system doesn't properly check where uploaded files are saved. To fix this, administrators\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#luci #openwrt #CVE #infosec", "creation_timestamp": "2026-08-13T22:50:03.965404Z"}, {"uuid": "86725e44-273e-449f-8229-3d0728bd890a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72842", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyq57ohte2y", "content": "CVE-2026-72842 - luci\nA security issue affects OpenWrt's luci-app-lxc, allowing users with limited access to control containers and potentially gain root access on the device. This means that an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#luci #openwrt #CVE #infosec", "creation_timestamp": "2026-08-13T22:50:05.126917Z"}, {"uuid": "c54f1c9a-0e90-4609-9367-54c2f995bb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72849", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msz66q4e6c22", "content": "\ud83d\udfe0 CVE-2026-72849 - High (7.7)\n\nBudibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link hando...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72849/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T03:01:29.293056Z"}, {"uuid": "93571fc7-e793-465e-bca7-91e0dcaf505e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99139", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a lean-cve-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a endrazine\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Lean\n\u2b50 Star\u6570\u91cf\uff1a 22  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 01:52:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72844 : Example of proving \"0 = 1\" using a vulnerability in the Lean 4 kernel.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.227835Z"}, {"uuid": "08cc83b1-3b9b-4066-9e45-4cdd039f1bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72844", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99139", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a lean-cve-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a endrazine\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Lean\n\u2b50 Star\u6570\u91cf\uff1a 22  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 01:52:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-72844 : Example of proving \"0 = 1\" using a vulnerability in the Lean 4 kernel.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.897363Z"}, {"uuid": "183fd915-6bf7-4596-beab-89dc111b20f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtq635nmhs27", "content": "A critical EverShop account takeover flaw, CVE-2026-72843, exposes systems to an eCommerce platform vulnerability. Update to version 2.2.1 immediately.\n\n#EverShop #CyberSecurity #CVE202672843 #Vulnerability #eCommerce", "creation_timestamp": "2026-08-23T06:30:43.012327Z"}, {"uuid": "49670ad8-6f85-4cce-a88b-6550bd277f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72846", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3417", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 validatePublicHttpUrl() \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 Lightdash \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-12707\nCVE-2026-72846\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/lightdash/lightdash/releases/tag/1.146.4", "creation_timestamp": "2026-08-28T15:00:05.049645Z"}, {"uuid": "0165f8e5-9acd-4f45-bba5-3a50a358a125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72846", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3417", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 validatePublicHttpUrl() \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 Lightdash \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-12707\nCVE-2026-72846\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/lightdash/lightdash/releases/tag/1.146.4", "creation_timestamp": "2026-08-29T00:00:09.510399Z"}, {"uuid": "173bc528-5766-41d8-bb56-ac5911023830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72843", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mtqvvwdls62d", "content": "\ud83d\udea8 \ud83d\udd03  EverShop flaw enables account takeover\n\nCVE-2026-72843 lets attackers overwrite customer email and passwords using an exposed UUID; fixed in 2.2.1.\n\n\ud83d\udd17 read more: securityonline.info/...\n\n#ransomNews #cyberthreats #ecommerce \n", "creation_timestamp": "2026-08-23T13:37:16.729132Z"}]}