{"vulnerability": "cve-2026-1279", "sightings": [{"uuid": "7c9ab710-7d3f-4632-89a3-d3ec7cec93e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosckd767l2i", "content": "CVE-2026-12795 - BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication\nCVE ID : CVE-2026-12795\n \n Published : June 21, 2026, 8:30 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects th...", "creation_timestamp": "2026-06-21T11:50:07.761367Z"}, {"uuid": "47bb033e-db1f-4efe-ab60-0465d85e2abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosjb4hhbj2t", "content": "CVE-2026-12797 - BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization\nCVE ID : CVE-2026-12797\n \n Published : June 21, 2026, 9:15 a.m. | 4\u00a0hours, 28\u00a0minutes ago\n \n Description : A security flaw has been discovered in BerriAI litellm up to 1.82.5. Aff...", "creation_timestamp": "2026-06-21T13:50:15.075691Z"}, {"uuid": "d8f1ae66-12cc-488a-bbd6-dc28d4bb24f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosjk2wdam27", "content": "CVE-2026-12798 - BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery\nCVE ID : CVE-2026-12798\n \n Published : June 21, 2026, 9:30 a.m. | 4\u00a0hours, 13\u00a0minutes ago\n \n Description : A weakness has been identified in...", "creation_timestamp": "2026-06-21T13:55:15.413356Z"}, {"uuid": "0a967217-abb7-4c86-90f8-02a23d9dcfa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosjszfxgj2c", "content": "CVE-2026-12796 - BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration\nCVE ID : CVE-2026-12796\n \n Published : June 21, 2026, 9 a.m. | 4\u00a0hours, 43\u00a0minutes ago\n \n Description : A vulnerability was identified in BerriAI litellm up ...", "creation_timestamp": "2026-06-21T14:00:15.792997Z"}, {"uuid": "97f85025-28ca-4ccc-bc30-1c462fc73da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosk3xudm42t", "content": "CVE-2026-12799 - BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization\nCVE ID : CVE-2026-12799\n \n Published : June 21, 2026, 10 a.m. | 3\u00a0hours, 43\u00a0minutes ago\n \n Description : A security vulnerability has been detected in ...", "creation_timestamp": "2026-06-21T14:05:16.259917Z"}, {"uuid": "0c08df83-5f76-4fc2-a0c4-acdaa2f54cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12793", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvmck7gbh724", "content": "JetFormBuilder Dynamic Blocks Form Builder (<=3.6.2) has a CRITICAL privilege escalation (CVE-2026-12793). Unauthenticated attackers can gain admin rights. Restrict access & monitor. Patch status pending. https://radar.offseq.com/threat/cve-2026-12793-cwe-269-improper-privilege-management-in-jetm...", "creation_timestamp": "2026-09-16T04:30:27.484386Z"}, {"uuid": "8e003d01-f3ed-482d-9301-be700d44df97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvmedqhuks2m", "content": "Daily IT Security Digest \u2014 2026-09-16\nusers should check vendor advisories and implement compensating controls.\nSource: [OffSeq](https://infosec.exchange/@offseq/117278482410349827)\n\n## 6. JetFormBuilder Critical Privilege Escalation \u2014 Unauthenticated Admin Account Creation\n\nCVE-2026-12793 in", "creation_timestamp": "2026-09-16T05:02:44.697218Z"}, {"uuid": "98597ed3-7f59-4822-b7a1-45cd153165d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmhxebt6o2b", "content": "\ud83d\udea8 CVE-2026-12793 \u2014 CVSS 9.8 CRITICAL\n\nThe JetFormBuilder \u2014 Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12793\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T06:07:17.174624Z"}, {"uuid": "9d8b5a8d-ab3e-4dd5-8490-8005eb5465be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvms67uytn25", "content": "CVE-2026-12793 - jetformbuilder \u2014 dynamic blocks form builder\nThe JetFormBuilder form plugin for WordPress can be tricked into giving a stranger full admin rights. An attacker can send a specially crafted request\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jetmonsters #CVE #infosec", "creation_timestamp": "2026-09-16T09:10:04.639711Z"}, {"uuid": "70139a03-ce97-46c6-9944-07309bd707ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvmxiahtuc2t", "content": "\u3010\u7dca\u6025\u3011WordPress\u30d7\u30e9\u30b0\u30a4\u30f3 JetFormBuilder \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-12793 / CVSS v3.1 9.8 CRITICAL\uff09\n\n\u8a8d\u8a3c\u3092\u901a\u3089\u305a\u306b\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210\u3067\u304d\u307e\u3059\u3002\u6709\u52b9\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306f\u7d048\u4e07\u4ef6\u3002\n\u5bfe\u51e6: 3.6.5.3\u3078\u66f4\u65b0\u3002\u672cCVE\u306f3.6.2.1\u3067\u4fee\u6b63\u6e08\u307f\u3067\u3059\u304c\u30019\u6708\u306e\u4ed65\u4ef6\u304c3.6.5.2\u307e\u3067\u304b\u304b\u308b\u305f\u3081\u3001\u9014\u4e2d\u3067\u6b62\u3081\u306a\u3044\u3067\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/jet...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-16T10:45:10.537416Z"}, {"uuid": "9b3c9455-a35c-492c-adb1-ec2559f0a7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12793", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117281561601330136", "content": "\ud83d\udcf0 Critical WordPress Plugin Flaw Allows Unauthenticated Admin Creation\nCritical unauthenticated admin creation flaw (CVE-2026-12793, CVSS 9.8) found in JetFormBuilder WordPress plugin (<= 3.6.2). Public exploit available. Update or disable immediately to prevent site takeover! #WordPress #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/wordpress-jetformbuilder-plugin-flaw-cve-2026-12793-allows-admin-takeover/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-16T16:03:32.206530Z"}, {"uuid": "39a53065-5a3a-4ab4-b986-bb512f40cd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvnjcld6vu2q", "content": "Critical unauthenticated admin creation flaw (CVE-2026-12793, CVSS 9.8) found in JetFormBuilder WordPress plugin (<= 3.6.2). Public exploit available. Update or disable immediately to prevent site takeover! #WordPress #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-16T16:04:07.459694Z"}, {"uuid": "4f43f028-c268-4dfa-8b46-8a2f98ef37a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102495", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12793\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 14:44:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12793 PoC \u2014 JetFormBuilder \u22643.6.2 unauth Register User / admin account creation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T19:00:04.925226Z"}, {"uuid": "d5bdb306-31ef-41f4-bfa3-7ff353e950fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102530", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12793\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 03:54:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T06:00:04.345578Z"}, {"uuid": "f10ad59d-9300-4831-bbfc-282ff721d925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "Telegram/Ur2Bn3bfhoLALRYtf_QQeiLvx6zF_jjvHXFzOmQHfaPkXXY", "content": "", "creation_timestamp": "2026-09-18T04:00:06.365162Z"}, {"uuid": "59a59c05-a21c-4e0a-af3b-f39bbb94db31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "Telegram/c5SreYmrDkdJR1r3a8RFt1SI3OPNA8AQ129hesIQxK_5L6E", "content": "", "creation_timestamp": "2026-09-18T04:00:08.588948Z"}, {"uuid": "a6b0aa9c-00ae-4d79-a56f-49fe473ac387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "Telegram/YI-zyM6R2SXtebw0qilHuE_bC29iP0vy8Cn8zxh5ugjaAgA", "content": "", "creation_timestamp": "2026-09-18T04:00:09.646062Z"}, {"uuid": "1fd4178a-0950-4133-bf1b-55043e7023f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "published-proof-of-concept", "source": "Telegram/YI-zyM6R2SXtebw0qilHuE_bC29iP0vy8Cn8zxh5ugjaAgA", "content": "", "creation_timestamp": "2026-09-19T00:00:24.415632Z"}, {"uuid": "d19f6992-5fb8-480f-a904-55dc6c5e90d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "published-proof-of-concept", "source": "Telegram/c5SreYmrDkdJR1r3a8RFt1SI3OPNA8AQ129hesIQxK_5L6E", "content": "", "creation_timestamp": "2026-09-19T00:00:25.196221Z"}]}