{"vulnerability": "cve-2026-6645", "sightings": [{"uuid": "ecbdf659-236d-455d-8c5b-c5ada48c19b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6645", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116791877623901189", "content": "CVE-2026-6645 (HIGH, CVSS 7.3) affects PaperCut Print Deploy for Windows. Insecure search path in pc-printer-updater.exe lets local attackers execute malicious code as SYSTEM. Audit directories & monitor for suspicious files. https://radar.offseq.com/threat/cve-2026-6645-cwe-427-uncontrolled-search-path-ele-06fc150344a496a3 #OffSeq #CVE20266645 #infosec", "creation_timestamp": "2026-06-22T04:30:29.182944Z"}, {"uuid": "236370ee-38aa-4005-9c36-5b9a677fb7f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6645", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mou2gzwtck2t", "content": "PaperCut Print Deploy has a HIGH severity flaw (CVE-2026-6645). Local attackers can hijack SYSTEM privileges via uncontrolled search path. Audit system paths & monitor for malicious binaries now. https://radar.offseq.com/threat/cve-2026-6645-cwe-427-uncontrolled-search-path-ele-06fc150344a496a3 #...", "creation_timestamp": "2026-06-22T04:30:31.321276Z"}, {"uuid": "4b3f70d7-9c8d-4514-a80f-261aa97eb7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6645", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mou2sucqen2f", "content": "Your printer software could be what owns the whole PC.\n\nPaperCut's Windows print client runs a helper as the top account, found by name. A local user who can drop a file in the right folder gets full control.\n\nUpdate to 1.10.4178. (CVE-2026-6645)", "creation_timestamp": "2026-06-22T04:37:44.999838Z"}, {"uuid": "1c13fc84-f860-424c-9c57-fbb95b82d97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mougfnph7t2q", "content": "CVE-2026-6645 - Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows\nCVE ID : CVE-2026-6645\n \n Published : June 22, 2026, 3:24 a.m. | 4\u00a0hours, 19\u00a0minutes ago\n \n Description : An insecure process execution vulnerability exists in the pc-printer-updater...", "creation_timestamp": "2026-06-22T08:04:25.572325Z"}, {"uuid": "8e2fbaf6-7b3e-4133-960c-6bf0738fedaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6645", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mouymrsunk2y", "content": "\ud83d\udd17 CVE : CVE-2026-6645", "creation_timestamp": "2026-06-22T13:30:31.942192Z"}, {"uuid": "308aaa9f-f779-4c62-9150-fae2d120a3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6645", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mowe7iydwb2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 28 interactions\nCVE-2026-20262: 23 interactions\nCVE-2026-54420: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-4020: 5 interactions\nCVE-2026-6645: 5 interactions\nCVE-2025-66336: 4 interactions\n", "creation_timestamp": "2026-06-23T02:30:32.390695Z"}, {"uuid": "38fb5549-343b-4b60-9347-b18e882187db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66456", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt4jl765au27", "content": "CVE-2026-66456 - Stored XSS in BestWebSoft Profile Extra Fields \u22641.3.4. Subscriber-level attack. CVSS 6.5. Unpatched. Disable or restrict access now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66456/", "creation_timestamp": "2026-08-15T11:03:17.248085Z"}, {"uuid": "c4bead62-d0d2-4315-bb34-4e27f1c3a326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66456", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117099187201542367", "content": "CVE-2026-66456 - Stored XSS in BestWebSoft Profile Extra Fields \u22641.3.4. Subscriber-level attack. CVSS 6.5. Unpatched. Disable or restrict access now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66456/", "creation_timestamp": "2026-08-15T11:03:18.536070Z"}, {"uuid": "c02c8e8c-a5ab-4075-ad80-09713d42ccd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66453", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxzryihv42e", "content": "CVE-2026-66453 - salon booking system\nThe Salon booking system, versions up to 10.30.26, has a security issue that allows anyone to access customer and staff account information without needing a password. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dimitrigrassi #CVE #infosec", "creation_timestamp": "2026-08-13T16:10:06.687032Z"}, {"uuid": "6fc5e243-77a0-4444-9a9c-fcd37204c3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66458", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msy2dsb6iu2p", "content": "CVE-2026-66458 - realpress\nThe RealPress website builder has a security issue that allows hackers to access sensitive information without a password. This means that attackers can view or modify data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#realpress #thimpress #CVE #infosec", "creation_timestamp": "2026-08-13T16:20:03.962345Z"}]}