{"vulnerability": "CVE-2026-7498", "sightings": [{"uuid": "349cc1c9-ad2a-436c-a4c7-1057f881333e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7498", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mm4oamh4jk2y", "content": "HIGH severity alert: DernekWeb (all versions \u226430122025) has a stored XSS vuln (CVE-2026-7498). No patch yet \u2014 apply WAF rules & monitor for vendor updates. https://radar.offseq.com/threat/cve-2026-7498-cwe-79-improper-neutralization-of-in-3ca40b7c #OffSeq #XSS #WebSecurity", "creation_timestamp": "2026-05-18T10:30:30.036257Z"}, {"uuid": "35c09657-3415-4973-8c05-2e755b5fca4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7498", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116595112473906096", "content": "HIGH-severity XSS (CVE-2026-7498) in DernekWeb up to v30122025: improper input neutralization allows stored script injection. No patch yet. Use WAF rules & monitor for updates. Details: https://radar.offseq.com/threat/cve-2026-7498-cwe-79-improper-neutralization-of-in-3ca40b7c #OffSeq #XSS #Vuln #InfoSec", "creation_timestamp": "2026-05-18T10:30:30.039092Z"}, {"uuid": "431540f5-ec6e-4409-9ed3-d03c5353b5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7498", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm4pa6fywy2p", "content": "CVE-2026-7498 - Stored XSS in Basamak Informatics' DernekWeb\nCVE ID : CVE-2026-7498\n \n Published : May 18, 2026, 9:16 a.m. | 51\u00a0minutes ago\n \n Description : Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Basamak Informatio...", "creation_timestamp": "2026-05-18T10:48:08.515796Z"}, {"uuid": "cadb274b-f550-4feb-91e8-3ee7a5be5274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7498", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5hg6fgv72z", "content": "\ud83d\udfe0 CVE-2026-7498 - High (8.8)\n\nImproper neutralization of input during web page generation ('cross-site scripting') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7498/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-18T18:01:00.753230Z"}, {"uuid": "3c8ae4f0-3002-4889-b1ac-e795b0880322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74987", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtgvczompr25", "content": "CVE-2026-74987 - firefox\nBugs in Firefox and Firefox ESR were fixed, potentially preventing memory corruption exploits. This update is recommended for users of affected versions to ensure security. Update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-08-19T14:00:22.474710Z"}, {"uuid": "40dc465c-304a-41cc-8d3e-5ed5d2bbdb3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74985", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjt753idf25", "content": "CVE-2026-74985 - firefox\nFirefox's Enterprise Policies component has a security weakness. This weakness could allow an attacker to gain more access than they should. To stay safe, update to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-08-20T18:00:06.366184Z"}, {"uuid": "caf0d191-722f-4ef1-83e1-c435362b795f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74986", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjuctplmh24", "content": "CVE-2026-74986 - firefox\nA bug in Firefox's CSS parser can allow websites to access information from other sites, but Mozilla has already fixed this issue in versions 154 and 153.1 of Firefox and Firefox\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-08-20T18:20:05.038209Z"}, {"uuid": "c9a36dbb-ace1-4db4-bf99-ff8ccba713ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74988", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjucv2vtg25", "content": "CVE-2026-74988 - firefox\nFirefox has fixed internally discovered bugs that could have caused memory corruption, potentially allowing attackers to exploit security weaknesses. This issue affects Firefox\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-08-20T18:20:06.089017Z"}, {"uuid": "c7528d7a-0d18-4568-bcc9-d1d978876488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74989", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjuuprenv2b", "content": "CVE-2026-74989 - firefox\nFirefox 153 had bugs that could have been exploited to corrupt system memory, potentially leading to security issues. This risk has been addressed in Firefox 154, which should be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-08-20T18:30:04.763933Z"}, {"uuid": "e5145d07-4791-45ad-9d91-2cbddcba0786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74983", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:47:01.150032Z"}, {"uuid": "82c02487-65df-42d0-ac68-3af2260e1246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74985", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:47:05.604382Z"}, {"uuid": "8ef96655-e728-436b-b472-b79fe59318d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74987", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:47:10.039932Z"}, {"uuid": "3c037554-c832-46ee-8a10-1773ceb32931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74981", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:46:56.079353Z"}, {"uuid": "144a76e6-0ebd-4f8b-bd6a-4fbab3c6bfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74982", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:46:58.701847Z"}, {"uuid": "d97f337c-bd61-49b1-886b-314696f8d93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74988", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:47:12.254977Z"}, {"uuid": "cc045e31-32a2-4470-b205-a412105c664c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74980", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:46:53.865362Z"}, {"uuid": "6aa3bf62-1a15-4bf1-8752-d5eb5a808f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74984", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:47:03.380206Z"}, {"uuid": "6ce01cee-7191-4320-85f3-26c4f8604e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74986", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:47:07.828345Z"}, {"uuid": "d9421c32-3c8f-4c2e-a947-b59334411091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-74989", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260819", "content": "", "creation_timestamp": "2026-08-19T04:47:14.483038Z"}, {"uuid": "6164dbc7-fce2-4e31-89b8-aadedfa6d81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74985", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtw6p76nsx25", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-74985](https://bugzilla.mozilla.org/show_bug.cgi?id=2059825)\nPrivilege escalation in th...\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=2059825 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-25T15:57:53.459259Z"}, {"uuid": "6cfc6be9-58fa-440f-a2bf-16ef13e5ec21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74980", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtw6rjcb5s2q", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-74980](https://bugzilla.mozilla.org/show_bug.cgi?id=2049034)\nClickjacking issue in the ...\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=2049034 #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-08-25T15:59:11.257748Z"}]}