{"vulnerability": "cve-2026-6487", "sightings": [{"uuid": "aa914682-971c-407f-802d-ab55a0f8d31a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjp575ym2p26", "content": "", "creation_timestamp": "2026-04-17T14:30:27.532816Z"}, {"uuid": "5fc54425-6c8a-4b16-9e83-bea3ae00bd9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64870", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxtesop7dg2u", "content": "CVE-2026-64870 - MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation\nCVE ID : CVE-2026-64870\n \n Published : July 30, 2026, 7:18 p.m. | 26\u00a0minutes ago\n \n Description : MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 throu...", "creation_timestamp": "2026-07-30T20:00:13.650782Z"}, {"uuid": "10ef1805-fe33-4ced-924d-ab752c458603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64877", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6lowlm3s2i", "content": "CVE-2026-64877\nA non-admin user with a legitimate account can access sensitive data by exploiting a weakness in the ticketing API. This could allow unauthorized access to confidential information. To protect against this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-21T19:56:06.034812Z"}, {"uuid": "d935778e-76c0-4d42-a52a-7dcdc0573588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64877", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6lxd6i4z2a", "content": "\ud83d\udd34 CVE-2026-64877 - Critical (9.6)\n\nAn authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to acc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-64877/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T20:00:48.403759Z"}, {"uuid": "8474b203-a14b-496d-8b9a-af49ffd02c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6piiv7552i", "content": "CVE-2026-64878 - security center\nAdobe Analytics has a vulnerability that allows attackers to execute malicious code. This could happen if an attacker sends specially crafted data to the Analysis REST\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#securitycenter #tenable #CVE #infosec", "creation_timestamp": "2026-07-21T21:04:05.549990Z"}, {"uuid": "64ecbc1f-6c4e-4943-a40f-8a18218f0cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64879", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6pm2rbos24", "content": "CVE-2026-64879 - security center\nAdobe Acrobat's file upload feature does not properly check files for malicious content. This allows attackers to upload files that can execute system commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#securitycenter #tenable #CVE #infosec", "creation_timestamp": "2026-07-21T21:06:04.885081Z"}, {"uuid": "d51502b2-80a2-4456-a905-90aac61418ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6xsbr2z722", "content": "CVE-2026-64879 - Command Injection\nCVE ID : CVE-2026-64879\n \n Published : July 21, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to i...", "creation_timestamp": "2026-07-21T23:32:43.367855Z"}, {"uuid": "c30ff31a-c891-4e14-bde5-f6dda3589ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ye6zujs23", "content": "CVE-2026-64878 - Command Injection\nCVE ID : CVE-2026-64878\n \n Published : July 21, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code ex...", "creation_timestamp": "2026-07-21T23:42:44.537785Z"}, {"uuid": "7bdd234d-1fb1-494f-9e10-025f1fdf792c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6yn5lbay2q", "content": "CVE-2026-64877 - Ticketing REST API SQL Injection Vulnerability\nCVE ID : CVE-2026-64877\n \n Published : July 21, 2026, 7:17 p.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensit...", "creation_timestamp": "2026-07-21T23:47:46.199984Z"}, {"uuid": "adbc7d7d-94b7-446d-87e4-0781f6ffd6a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64873", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg63us7or22", "content": "CVE-2026-64873 - cache cleaner pro extension for joomla\nA security issue in Joomla's Cache Cleaner Pro extension allows attackers to access internal network services. This could be used to steal sensitive information or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T20:14:06.212829Z"}]}