{"vulnerability": "cve-2026-15920", "sightings": [{"uuid": "2479f736-f6b4-4433-964d-b6d03d96b491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy", "content": "Django CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, and CVE-2026-15920", "creation_timestamp": "2026-08-04T16:29:42.399430Z"}, {"uuid": "082eb1c3-8462-447d-9c99-b478ac88a264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msdr7aekni2v", "content": "Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)", "creation_timestamp": "2026-08-05T14:43:12.288521Z"}, {"uuid": "9cc0343b-2a84-4e0e-856b-758f5c1de994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3msdrtiroyj25", "content": "Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)", "creation_timestamp": "2026-08-05T14:54:36.322293Z"}, {"uuid": "c424296c-4981-431d-9d6c-0eff7845e15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3msdst4zyak2w", "content": "Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)", "creation_timestamp": "2026-08-05T15:12:15.677852Z"}, {"uuid": "ac5f58fb-ae45-49a1-88b1-dfc09ec8d5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mshox6qs5q26", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 41 interactions\nCVE-2026-58048: 16 interactions\nCVE-2026-15920: 9 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18556: 5 interactions\nCVE-2026-18577: 4 interactions\nCVE-2021-22681: 3 interactions\n", "creation_timestamp": "2026-08-07T04:13:33.871970Z"}, {"uuid": "10b067b8-c99d-466c-af49-c08ced5d3635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://t.me/TopCyberTechNews/841", "content": "Top Security News for Today\n\nAnthropic AI agent faked identities, phished real developers in UK government hacking test  \nhttps://therecord.media/anthropic-ai-hacking-uk\n\nVulnerabilities in Car Anti-Theft Device  \nhttps://www.schneier.com/blog/archives/2026/08/vulnerabilities-in-car-anti-theft-device.html\n\nCritical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup  \nhttps://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html\n\nKali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk  \nhttps://thehackernews.com/2026/08/kali365-weaponizes-microsoft.html\n\nStored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)  \nhttps://www.reddit.com/r/netsec/comments/1vg9704/stored_xss_in_djangos_admin_via_an_unvalidated/\n\nOpen VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data  \nhttps://thehackernews.com/2026/08/open-vsx-removes-77-malicious-evil-twin.html\n\nCyberattacks targeting water systems expand to 12 states as South Dakota, Georgia announce incidents  \nhttps://therecord.media/iran-cyberattacks-water-treatment\n\nU.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog  \nhttps://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html\n\n5th Edition MENA CYBER SECURITY CONFERENCE \u2013 RIYADH EDITION  \nhttps://cisomag.com/5th-edition-mena-cyber-security-conference-riyadh-edition/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://x.com/ShayaFeedman", "creation_timestamp": "2026-09-03T15:00:04.835722Z"}, {"uuid": "9120766e-be86-4412-a720-3637ed0ae07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://t.me/TopCyberTechNews/841", "content": "Top Security News for Today\n\nAnthropic AI agent faked identities, phished real developers in UK government hacking test  \nhttps://therecord.media/anthropic-ai-hacking-uk\n\nVulnerabilities in Car Anti-Theft Device  \nhttps://www.schneier.com/blog/archives/2026/08/vulnerabilities-in-car-anti-theft-device.html\n\nCritical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup  \nhttps://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html\n\nKali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk  \nhttps://thehackernews.com/2026/08/kali365-weaponizes-microsoft.html\n\nStored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)  \nhttps://www.reddit.com/r/netsec/comments/1vg9704/stored_xss_in_djangos_admin_via_an_unvalidated/\n\nOpen VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data  \nhttps://thehackernews.com/2026/08/open-vsx-removes-77-malicious-evil-twin.html\n\nCyberattacks targeting water systems expand to 12 states as South Dakota, Georgia announce incidents  \nhttps://therecord.media/iran-cyberattacks-water-treatment\n\nU.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog  \nhttps://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html\n\n5th Edition MENA CYBER SECURITY CONFERENCE \u2013 RIYADH EDITION  \nhttps://cisomag.com/5th-edition-mena-cyber-security-conference-riyadh-edition/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://x.com/ShayaFeedman", "creation_timestamp": "2026-09-04T00:00:45.283586Z"}]}