{"vulnerability": "cve-2026-1646", "sightings": [{"uuid": "b5a0e0bf-a429-4e86-94b4-13b194af6d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16461", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mraag4n4sj2e", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-16461\n\nA stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump() short mode (used by `rpcinfo -s`), version numbers from a remot...", "creation_timestamp": "2026-07-22T11:39:39.154771Z"}, {"uuid": "a7cd3cc2-e044-4a01-94c7-7e2999a99402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16461", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdvfulvbi24", "content": "CVE-2026-16277 & CVE-2026-16461: buffer overflows in rpcinfo", "creation_timestamp": "2026-07-23T22:33:18.284091Z"}, {"uuid": "213b013b-91c0-4405-8c2e-e8454fc55850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16462", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mrp3vuzo4l42", "content": "#OT #Advisory VDE-2026-085\nWeidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA\n\nA remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands.\n#CVE CVE-2026-16462\n\nhttps://certvde.com/en/advisories/vde-2026-085/\n\n#CSAF [\u2026]", "creation_timestamp": "2026-07-28T09:29:06.025098Z"}, {"uuid": "e362b6cb-e47d-40fc-8de3-8d39eb25aa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16462", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpdnn7ydg23", "content": "CVE-2026-16462 - SQL injection via unauthenticated GetGridData endpoint\nCVE ID : CVE-2026-16462\n \n Published : July 28, 2026, 10:16 a.m. | 23\u00a0minutes ago\n \n Description : In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthentic...", "creation_timestamp": "2026-07-28T11:47:28.514239Z"}, {"uuid": "47110ceb-5806-40a6-a2d0-a12d81cd9074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16462", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrppul6hyz2a", "content": "CVE-2026-16462 - procon-web scada\nAn attacker can access sensitive data without a password by exploiting a weakness in the PROCON-WEB SCADA system. This could lead to unauthorized access to critical\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#weidmuellerinterface #CVE #infosec", "creation_timestamp": "2026-07-28T15:26:06.056924Z"}]}