{"vulnerability": "CVE-2026-7480", "sightings": [{"uuid": "155c50c6-5fc4-4ada-9a6d-1d9b29f72b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74804", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtgvj2kahc2s", "content": "\ud83d\udea8 Critical Security update for ZOO\n\nWe fixed 3 vulnerabilities:\n\nCVE-2026-74804 \u2013 Arbitrary file upload\nCVE-2026-75114 \u2013 SQL injection\nCVE-2026-75115 \u2013 External redirects\n\nUpdate ZOO immediately to ZOO 4.1.64.", "creation_timestamp": "2026-08-19T14:04:01.398190Z"}, {"uuid": "f94e4eb5-717d-4790-8174-4510e4b020fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74804", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtgvj2lbns2s", "content": "\ud83d\udea8 Critical Security update for ZOO\n\nWe fixed 3 vulnerabilities:\n\nCVE-2026-74804 \u2013 Arbitrary file upload\nCVE-2026-75114 \u2013 SQL injection\nCVE-2026-75115 \u2013 External redirects\n\nUpdate ZOO immediately to ZOO 4.1.64.", "creation_timestamp": "2026-08-19T14:04:02.008815Z"}, {"uuid": "38bd7074-bac9-41fe-9cb1-9f140f7bf4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7480", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmxka2lxrs2e", "content": "ASUS System Control Interface (\u22643.1.59.0) HIGH severity flaw: local users can escalate to SYSTEM with crafted RPC calls. No patch yet \u2014 limit local access & stay alert! https://radar.offseq.com/threat/cve-2026-7480-cwe-732-incorrect-permission-assignm-d09dc8d7 #OffSeq #ASUS #Vulnerability", "creation_timestamp": "2026-05-29T03:00:29.571443Z"}, {"uuid": "56e59a5b-f2aa-4c83-844f-b0459a4545e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7480", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116655628380153994", "content": "ASUS System Control Interface (\u22643.1.59.0) hit by HIGH-severity vuln (CVE-2026-7480): local attackers can escalate to SYSTEM via crafted RPC calls. No patch yet \u2014 restrict local access & monitor advisories. https://radar.offseq.com/threat/cve-2026-7480-cwe-732-incorrect-permission-assignm-d09dc8d7 #OffSeq #Vuln #ASUS #Infosec", "creation_timestamp": "2026-05-29T03:00:36.064966Z"}, {"uuid": "70dd49cd-0e89-47e6-8a9d-76345602217f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmxrgmobxo2d", "content": "CVE-2026-7480 - ASUS System Control Interface Privilege Escalation Remote Code Execution Vulnerability\nCVE ID : CVE-2026-7480\n \n Published : May 29, 2026, 2:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : An Incorrect Permission Assignment for Critical Resource vulnerabilit...", "creation_timestamp": "2026-05-29T05:09:25.167717Z"}, {"uuid": "ea4a6bab-4690-4fcb-aeb2-36bbb01f25ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74803", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4i67up623", "content": "\ud83d\udea8 CVE-2026-74803 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74803\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:08:14.040892Z"}, {"uuid": "58d6d096-f12c-45f3-a9eb-3275828d62e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74804", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4ii4jj32j", "content": "\ud83d\udea8 CVE-2026-74804 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element() in Zoo < 4.1.6...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74804\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:08:24.416101Z"}, {"uuid": "afcd3f00-3258-421b-b806-09e9ab707411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74803", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mth4lgoz632j", "content": "CVE-2026-74803 - zoo extension for joomla\nThe Zoo extension for Joomla, a popular content management system, has a security issue that allows an attacker to upload any type of file without needing a password. This can be used\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T16:10:06.745539Z"}, {"uuid": "433f7552-17c2-4896-81fd-db6dbd5ee896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74804", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mth6szbtyh2p", "content": "CVE-2026-74804\nThe Joomla Zoo extension is vulnerable to SQL injection attacks if an attacker sends a specially crafted request with an unfiltered filter type. This could allow an attacker to access or modify sensitive data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T16:50:05.567071Z"}, {"uuid": "c4007af2-7846-4ec5-9251-d919ae744dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74800", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo3ua4zu2m", "content": "\ud83d\udea8 CVE-2026-74800 \u2014 CVSS 9.4 CRITICAL\n\nSiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74800\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:07:29.771436Z"}, {"uuid": "e7687190-ea57-4074-bf4e-b977d3dd5ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74800", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtbufovbnd2q", "content": "CVE-2026-74800 - Stored XSS in SiYuan. Missing headers allow script execution with full kernel API access. CVSS 9.0. Unpatched. Update or restrict file uploads now. #CVE #SiYuan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-74800/", "creation_timestamp": "2026-08-17T14:00:22.256284Z"}, {"uuid": "682ef637-6d85-412d-8ef3-e7f757faf0a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74800", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117111208140014783", "content": "CVE-2026-74800 - Stored XSS in SiYuan. Missing headers allow script execution with full kernel API access. CVSS 9.0. Unpatched. Update or restrict file uploads now. #CVE #SiYuan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-74800/", "creation_timestamp": "2026-08-17T14:00:49.751918Z"}, {"uuid": "c97a560c-0885-4f03-b477-9a136474fb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74800", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcce6mlzd2p", "content": "CVE-2026-74800 - siyuan\nSiYuan versions before 3.7.4 have a security issue that allows attackers to upload malicious files. If a workspace owner opens a link to the uploaded file, the attacker can run code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-17T18:10:14.076177Z"}]}