{"vulnerability": "cve-2026-4526", "sightings": [{"uuid": "e6a9af45-8fea-40b0-bc1d-06d6ff76fb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45260", "type": "published-proof-of-concept", "source": "https://github.com/pimcore/pimcore/security/advisories/GHSA-wc7j-g8wx-m2qx", "content": "", "creation_timestamp": "2026-05-26T14:00:10.000000Z"}, {"uuid": "b6fd786c-b718-48bb-af33-8083bd620fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45261", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwtieccrp2c", "content": "CVE-2026-45261 - GitButler: Link injection via forge integration enables arbitrary script execution\nCVE ID : CVE-2026-45261\n \n Published : May 28, 2026, 5:16 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : GitButler is a modern Git-based version control interface for AI-powered...", "creation_timestamp": "2026-05-28T20:13:31.238459Z"}, {"uuid": "3c0fd13d-4c3a-436c-b35c-640940d9369e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45263", "type": "published-proof-of-concept", "source": "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-2p5x-4jr6-x5jg", "content": "", "creation_timestamp": "2026-07-14T18:35:07.807258Z"}, {"uuid": "74eacf5f-d279-4065-931b-79b5e3aca407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45262", "type": "published-proof-of-concept", "source": "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-5qmh-x653-g8qj", "content": "", "creation_timestamp": "2026-07-14T18:35:12.292360Z"}, {"uuid": "b716034f-c525-4574-8d39-2fbba47caf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45262", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmz3x5vth2z", "content": "CVE-2026-45262 - facturascripts\nFacturaScripts' REST API has a security flaw that can expose sensitive information, including passwords and session data. This can happen when an attacker sends a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#facturascripts #composer #CVE #infosec", "creation_timestamp": "2026-07-14T20:08:06.348863Z"}, {"uuid": "131557d3-e6dc-48c4-ad98-3b0f13259755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45260", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqurgm2p562q", "content": "CVE-2026-45260 - Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling\nCVE ID : CVE-2026-45260\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5...", "creation_timestamp": "2026-07-17T22:12:14.097103Z"}, {"uuid": "fdaed283-4a2f-42bf-a009-6d34246fef8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45260", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwqjihq2q22", "content": "\ud83d\udfe0 CVE-2026-45260 - High (8.1)\n\nPimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45260/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T17:01:14.767816Z"}]}