{"vulnerability": "cve-2026-6239", "sightings": [{"uuid": "aad26c77-bba6-4626-a57e-a5d5917ff4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgskpkir2q", "content": "CVE-2026-6239 - Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS\nCVE ID : CVE-2026-6239\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : A stack\u2011based\nbuffer overflow vulnerability exists in Tapo C520WS v2 in...", "creation_timestamp": "2026-06-06T00:52:29.515560Z"}, {"uuid": "5d59f206-2dee-4c4f-b671-50f5b1dec9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlbxpp4fp2j", "content": "CVE-2026-62390: Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API", "creation_timestamp": "2026-07-14T03:41:28.426497Z"}, {"uuid": "d8e683f5-fdf5-4c3a-a863-0e817a68ec9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqle5fo5ev23", "content": "CVE-2026-62392: Apache Kylin: OS Command Injection via Async Query API", "creation_timestamp": "2026-07-14T04:20:27.364525Z"}, {"uuid": "5f72c591-83cf-4215-b2ad-ed08b46182a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlfb7cxfr2q", "content": "CVE-2026-62393: Apache Kylin: Improper authorization in job information retrieval", "creation_timestamp": "2026-07-14T04:40:28.144791Z"}, {"uuid": "8da7c517-2cd2-4bd2-9beb-32e571839a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmqeyjaxl2z", "content": "CVE-2026-62390 - apache kylin\nApache Kylin versions 4 through 5.0.3 are at risk of a security threat. An attacker could potentially inject malicious SQL code, which could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachekylin #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-14T17:32:06.000111Z"}, {"uuid": "cc5e287b-b627-4287-b753-4e6338fc9e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqnqj744cc2n", "content": "\ud83d\udccc CVE-2026-62392 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. A backend API may bring job ... https://www.cyberhub.blog/cves/CVE-2026-62392", "creation_timestamp": "2026-07-15T03:07:08.011173Z"}, {"uuid": "62572b67-d918-44cb-b57b-e2cebd44d09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqnotjj6jj23", "content": "\ud83d\udccc CVE-2026-62390 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend API refreshing table cat... https://www.cyberhub.blog/cves/CVE-2026-62390", "creation_timestamp": "2026-07-15T02:37:06.108960Z"}, {"uuid": "0d13e953-16cf-4afe-b4d0-09739044b263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gb5opdr2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62392 \u0432 Apache Kylin: \u0443\u0433\u0440\u043e\u0437\u0430 OS Command Injection \u0447\u0435\u0440\u0435\u0437 Async Query API\n\n\n\nhttps://kripta.biz/posts/E46FA03A-1856-47C7-B4A8-DAE4FB117E0A", "creation_timestamp": "2026-07-21T08:46:15.746858Z"}, {"uuid": "f14ecc5f-1711-4a11-81cb-2904179e507b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gjcoqlw2h", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62393 \u0432 Apache Kylin: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/152ABA96-FCF5-4654-AD76-903BF428F175", "creation_timestamp": "2026-07-21T08:50:49.023097Z"}, {"uuid": "2afc7e23-cc21-4af9-8bdd-e7d01ec6c30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr5gqyraiv25", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d1\u05d1\u05d9\u05d8\u05d7\u05d5\u05df \u05d1\u05d0\u05e4\u05d0\u05e6'\u05d9 \u05e7\u05d9\u05dc\u05d9\u05df - CVE-2026-62393\n\n\n\nhttps://khesef.xyz/posts/136E9D7C-ACF7-47E0-B156-D3A91405A012", "creation_timestamp": "2026-07-21T08:55:07.504685Z"}]}