{"vulnerability": "cve-2026-6673", "sightings": [{"uuid": "4da5a5b1-ac8d-4507-977a-4ec1c9f1cb5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movcci4nxt2g", "content": "CVE-2026-6673 - Mattermost Jira plugin had unauthenticated {{/ac/installed}} lifecycle callback during pending Jira Cloud install\nCVE ID : CVE-2026-6673\n \n Published : June 22, 2026, 1:38 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : Mattermost versions 11.7.x <= 11.7.0, 1...", "creation_timestamp": "2026-06-22T16:23:43.876537Z"}, {"uuid": "8ec19835-c281-48fc-826c-8febabcb8ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66738", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/53mnn22alhix4", "content": "CVE-2026-66738 - SPIP\nCVE ID : CVE-2026-66738\n \n Published : Aug. 10, 2026, 3:41 p.m. | 19\u00a0minutes ago\n \n Description : SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The navigation menu endpoint improperly handles array-typed user i...", "creation_timestamp": "2026-08-10T16:15:49.745380Z"}, {"uuid": "7a6986be-93d0-4679-8f3a-bc77441fb7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66738", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msql7pnmsx27", "content": "\ud83d\udd34 CVE-2026-66738 - Critical (9.8)\n\nSPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The na...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66738/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T17:00:43.225382Z"}, {"uuid": "eb59ac2b-e2f3-43e4-9b9a-50ceac011a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66733", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117048804948021339", "content": "CVE-2026-66733: HIGH severity vuln in Eukaryot sonic3air \u226426.03.28.0. Crafted UDP packets can force unbounded memory allocation, crashing the server (DoS, no RCE). Patch unconfirmed \u2014 check vendor. https://radar.offseq.com/threat/cve-2026-66733-memory-allocation-with-excessive-size-value-in-eukaryot-sonic3air-4d6f914f9dea29a1 #OffSeq #Vuln #DoS #sonic3air", "creation_timestamp": "2026-08-06T13:30:25.596742Z"}, {"uuid": "84be5a5b-6942-4433-a08a-7134488d61f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66733", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msg5m2k3dm27", "content": "Eukaryot sonic3air \u226426.03.28.0 hit by HIGH severity vuln (CVE-2026-66733). Crafted UDP packets can trigger server crash (DoS). Patch status unconfirmed \u2014 monitor advisories. https://radar.offseq.com/threat/cve-2026-66733-memory-allocation-with-excessive-size-value-in-eukaryot-sonic3air-4d6f914f9d...", "creation_timestamp": "2026-08-06T13:30:27.766356Z"}, {"uuid": "c3c58058-5a5f-4bac-a263-85806943f90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66738", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msr7fgtuja2h", "content": "CVE-2026-66738 - Critical code injection in SPIP <4.4.18 via SQLite nav endpoint. Auth'd editors can RCE. CVSS 9.8. Unpatched - update/isolate now. #CVE #SPIP #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66738/", "creation_timestamp": "2026-08-10T23:01:49.564063Z"}, {"uuid": "6f526121-458d-4f03-bd92-e55a5a238bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66738", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117073701052682697", "content": "CVE-2026-66738 - Critical code injection in SPIP <4.4.18 via SQLite nav endpoint. Auth'd editors can RCE. CVSS 9.8. Unpatched - update/isolate now. #CVE #SPIP #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66738/", "creation_timestamp": "2026-08-10T23:01:49.988722Z"}, {"uuid": "dad706fd-899e-4c62-81e0-fbdb0dcc20d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66731", "type": "seen", "source": "https://t.me/GithubRedTeam/95400", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 17:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T19:00:03.921114Z"}, {"uuid": "ccffa4c2-bcda-4710-a4eb-534176e54c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66730", "type": "seen", "source": "https://t.me/GithubRedTeam/95401", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 17:41:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T19:00:03.961539Z"}, {"uuid": "5bc55f2a-89a7-45a9-b5bb-4d103c83818f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66730", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95401", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 17:41:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Infinite Loop DoS in facil.io MIME Parser (Partial Boundary)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:24.684179Z"}, {"uuid": "1eb6c48b-7bdd-489d-9d65-cc7450e0930f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66731", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95400", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 17:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:24.721965Z"}]}