{"vulnerability": "cve-2026-1592", "sightings": [{"uuid": "efffbcdc-e554-4c81-bd6b-a8778b4a8e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1592", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3me2f4e4loc27", "content": "", "creation_timestamp": "2026-02-04T17:20:10.813239Z"}, {"uuid": "7c7303ce-e0da-4fb9-9e64-ee2fd7da3eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1592", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116007954860312788", "content": "", "creation_timestamp": "2026-02-03T17:48:34.000885Z"}, {"uuid": "0af612f0-89f7-4c02-83cb-94fc93c3dc05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1592", "type": "seen", "source": "https://threatintel.cc/2026/02/03/foxit-pdf-editor-vulnerabilities-let.html", "content": "", "creation_timestamp": "2026-02-03T16:48:40.000000Z"}, {"uuid": "3f27ced6-806d-4a82-867b-87ca18fd2ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4ndasz267zue5", "content": "CVE-2026-15929 - LG Electronics SmartShare SQL Injection Vulnerability\nCVE ID : CVE-2026-15929\n \n Published : July 30, 2026, 2:16 a.m. | 1\u00a0hour, 28\u00a0minutes ago\n \n Description : Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i...", "creation_timestamp": "2026-07-30T03:50:20.992863Z"}, {"uuid": "2479f736-f6b4-4433-964d-b6d03d96b491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy", "content": "Django CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, and CVE-2026-15920", "creation_timestamp": "2026-08-04T16:29:42.399430Z"}, {"uuid": "082eb1c3-8462-447d-9c99-b478ac88a264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msdr7aekni2v", "content": "Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)", "creation_timestamp": "2026-08-05T14:43:12.288521Z"}, {"uuid": "9cc0343b-2a84-4e0e-856b-758f5c1de994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3msdrtiroyj25", "content": "Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)", "creation_timestamp": "2026-08-05T14:54:36.322293Z"}, {"uuid": "c424296c-4981-431d-9d6c-0eff7845e15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3msdst4zyak2w", "content": "Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)", "creation_timestamp": "2026-08-05T15:12:15.677852Z"}, {"uuid": "ac5f58fb-ae45-49a1-88b1-dfc09ec8d5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mshox6qs5q26", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 41 interactions\nCVE-2026-58048: 16 interactions\nCVE-2026-15920: 9 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18556: 5 interactions\nCVE-2026-18577: 4 interactions\nCVE-2021-22681: 3 interactions\n", "creation_timestamp": "2026-08-07T04:13:33.871970Z"}, {"uuid": "8aff6d6a-24c6-45f4-b067-3ac6399f4b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqn5t5xvw2i", "content": "CVE-2026-15925 - Improper TLS Hostname Verification in Snowflake Connector for Python\nCVE ID : CVE-2026-15925\n \n Published : July 16, 2026, 5:31 a.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Improper TLS hostname verification in Snowflake Connector for Python versions prior to...", "creation_timestamp": "2026-07-16T06:45:06.567833Z"}, {"uuid": "2bd6fb05-d942-4323-a23f-06c272a725a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15925", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqqph67fpj2c", "content": "CVE-2026-15925 - snowflake connector for python\nIf you use the Snowflake Connector for Python, a previous version had a security weakness that could let someone intercept sensitive information like passwords and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#snowflake #CVE #infosec", "creation_timestamp": "2026-07-16T07:26:04.378228Z"}, {"uuid": "f4126ccf-c94a-44f3-a88c-22e91af0dc74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15925", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116936209476788382", "content": "Our CTI team identified a lot of activities targeting Snowflake Connector for Python (CVE-2026-15925) https://vuldb.com/vuln/379480/cti", "creation_timestamp": "2026-07-17T16:15:54.618910Z"}, {"uuid": "ed1f1e4f-455e-41b4-881a-448937605af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5mblx7vf23", "content": "CVE-2026-15927 - Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation\nCVE ID : CVE-2026-15927\n \n Published : July 21, 2026, 6:16 a.m. | 3\u00a0hours, 28\u00a0minutes ago\n \n Description : A flaw was found in Red Hat Quay's repository-level mirr...", "creation_timestamp": "2026-07-21T10:33:52.953162Z"}, {"uuid": "6a4256d1-ad7c-4e82-9dd5-700b07428a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15926", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f5qi25v7awzh2", "content": "CVE-2026-15926\nCVE ID : CVE-2026-15926\n \n Published : Sept. 3, 2026, 10:31 a.m. | 46\u00a0minutes ago\n \n Description : None\n \n Severity: 0.0 | NA\n \n Visit the link for more details, such as CVSS details, affected products, timeline, and more...\n#CVE", "creation_timestamp": "2026-09-03T11:36:28.820328Z"}, {"uuid": "10b067b8-c99d-466c-af49-c08ced5d3635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://t.me/TopCyberTechNews/841", "content": "Top Security News for Today\n\nAnthropic AI agent faked identities, phished real developers in UK government hacking test  \nhttps://therecord.media/anthropic-ai-hacking-uk\n\nVulnerabilities in Car Anti-Theft Device  \nhttps://www.schneier.com/blog/archives/2026/08/vulnerabilities-in-car-anti-theft-device.html\n\nCritical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup  \nhttps://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html\n\nKali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk  \nhttps://thehackernews.com/2026/08/kali365-weaponizes-microsoft.html\n\nStored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)  \nhttps://www.reddit.com/r/netsec/comments/1vg9704/stored_xss_in_djangos_admin_via_an_unvalidated/\n\nOpen VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data  \nhttps://thehackernews.com/2026/08/open-vsx-removes-77-malicious-evil-twin.html\n\nCyberattacks targeting water systems expand to 12 states as South Dakota, Georgia announce incidents  \nhttps://therecord.media/iran-cyberattacks-water-treatment\n\nU.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog  \nhttps://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html\n\n5th Edition MENA CYBER SECURITY CONFERENCE \u2013 RIYADH EDITION  \nhttps://cisomag.com/5th-edition-mena-cyber-security-conference-riyadh-edition/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://x.com/ShayaFeedman", "creation_timestamp": "2026-09-03T15:00:04.835722Z"}, {"uuid": "9120766e-be86-4412-a720-3637ed0ae07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://t.me/TopCyberTechNews/841", "content": "Top Security News for Today\n\nAnthropic AI agent faked identities, phished real developers in UK government hacking test  \nhttps://therecord.media/anthropic-ai-hacking-uk\n\nVulnerabilities in Car Anti-Theft Device  \nhttps://www.schneier.com/blog/archives/2026/08/vulnerabilities-in-car-anti-theft-device.html\n\nCritical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup  \nhttps://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html\n\nKali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk  \nhttps://thehackernews.com/2026/08/kali365-weaponizes-microsoft.html\n\nStored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)  \nhttps://www.reddit.com/r/netsec/comments/1vg9704/stored_xss_in_djangos_admin_via_an_unvalidated/\n\nOpen VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data  \nhttps://thehackernews.com/2026/08/open-vsx-removes-77-malicious-evil-twin.html\n\nCyberattacks targeting water systems expand to 12 states as South Dakota, Georgia announce incidents  \nhttps://therecord.media/iran-cyberattacks-water-treatment\n\nU.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog  \nhttps://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html\n\n5th Edition MENA CYBER SECURITY CONFERENCE \u2013 RIYADH EDITION  \nhttps://cisomag.com/5th-edition-mena-cyber-security-conference-riyadh-edition/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://x.com/ShayaFeedman", "creation_timestamp": "2026-09-04T00:00:45.283586Z"}]}