{"vulnerability": "cve-2026-7055", "sightings": [{"uuid": "3eefd05d-57d7-42c1-89d8-9d17ecafcf51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70552", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbt4erihi2b", "content": "CVE-2026-70552 - maxsite cms\nMaxSite CMS versions 109.5 and earlier have a security flaw that allows unauthorized access to sensitive admin features. This could allow attackers to manipulate important\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxsitecms #maxsite #CVE #infosec", "creation_timestamp": "2026-08-04T20:12:04.736099Z"}, {"uuid": "9b3cec41-93e0-4b1e-b306-eff374abfd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbt7x7g372u", "content": "CVE-2026-70553 - maxsite cms\nMaxSite CMS allows attackers to inject malicious code into the application's configuration file, potentially leading to unauthorized access and data theft. This vulnerability\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxsitecms #maxsite #CVE #infosec", "creation_timestamp": "2026-08-04T20:14:04.354569Z"}, {"uuid": "0dd99267-d08f-47f9-94b3-d48c2f06cbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvszpbyv2t", "content": "\ud83d\udd34 CVE-2026-70553 - Critical (9.8)\n\nMaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70553/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T21:00:32.637761Z"}, {"uuid": "34724f36-c7dc-4e8d-917e-140239917805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70554", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbwlcivoa2s", "content": "CVE-2026-70554 - maxsite cms\nThe MaxSite CMS software has a security weakness that could allow hackers to run malicious code without needing a password. This could potentially lead to unauthorized access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxsitecms #maxsite #CVE #infosec", "creation_timestamp": "2026-08-04T21:14:06.439274Z"}, {"uuid": "08e29ec4-1dbd-4a5c-8f1b-a7532b37d3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70554", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j74eipql3yfb6", "content": "CVE-2026-70554 - MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie\nCVE ID : CVE-2026-70554\n \n Published : Aug. 4, 2026, 9:16 p.m. | 30\u00a0minutes ago\n \n Description : MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated a...", "creation_timestamp": "2026-08-04T22:07:37.240729Z"}, {"uuid": "b08f0ea6-a695-410c-9ecc-1c2bbd72dc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7055", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkoczezusu2v", "content": "\ud83d\udccc CVE-2026-7055 - A security vulnerability has been detected in Tenda F456 1.0.0.5. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the... https://www.cyberhub.blog/cves/CVE-2026-7055", "creation_timestamp": "2026-04-30T00:07:08.740317Z"}, {"uuid": "649f83c1-7c07-40ea-ab6f-5785d67a7ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70554", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117039958328085182", "content": "MaxSite CMS 0.78 is vulnerable (CVE-2026-70554, CRITICAL): PHP object injection via maxsite_comuser cookie enables unauthenticated RCE. No patch available. Restrict access, deploy WAF, and monitor activity. https://radar.offseq.com/threat/cve-2026-70554-deserialization-of-untrusted-data-in-maxsite-maxsite-cms-e8db7f34d62a5e30 #OffSeq #Vuln #CMS #PHP #RCE", "creation_timestamp": "2026-08-05T00:00:37.717602Z"}, {"uuid": "459bfc30-be00-4e21-8d46-a8d3e2fdb279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70554", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msc7v3a6i22h", "content": "MaxSite CMS 0.78 faces CRITICAL risk: CVE-2026-70554 allows unauthenticated code execution via PHP object injection. Restrict access & monitor for abuse. No patch yet. https://radar.offseq.com/threat/cve-2026-70554-deserialization-of-untrusted-data-in-maxsite-maxsite-cms-e8db7f34d62a5e30 #OffSeq ...", "creation_timestamp": "2026-08-05T00:00:38.854525Z"}, {"uuid": "0040b53c-4463-4a15-9faa-51829c27975c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117040312010612030", "content": "CVE-2026-70553: CRITICAL RCE in MaxSite CMS 105.2 (CVSS 9.3). Attackers can inject PHP via POST to the install endpoint, gaining persistent code exec as www-data. Restrict endpoint & monitor traffic until patched. Details: https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-maxsite-maxsite-cms-5161bdfb2e6804e9 #OffSeq #CVE #websecurity #RCE", "creation_timestamp": "2026-08-05T01:30:33.470662Z"}, {"uuid": "768d58c2-3506-4d82-a9f8-fe585c379083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mscevw6uqu2o", "content": "MaxSite CMS 105.2 has a CRITICAL RCE vulnerability (CVSS 9.3). Attackers can inject PHP code post-install via install endpoint. Restrict endpoint access & monitor for suspicious POSTs ASAP. https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-max...", "creation_timestamp": "2026-08-05T01:30:35.788037Z"}, {"uuid": "7c46ae56-4d9d-4d88-b60c-f0c14175704a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70559", "type": "seen", "source": "Telegram/f4Vytjn-MRLHBVgNi9AN52_s9pui8b8Txh36DWLXfR9Gx-I", "content": "", "creation_timestamp": "2026-08-08T00:04:26.485327Z"}, {"uuid": "c4ff3b19-46ef-42ea-8620-760460e0ffa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "published-proof-of-concept", "source": "Telegram/FZQflKSk-1-O2VR5bHzh2Y5vS6bPFGFfOUGDC-dTB0Cb394", "content": "", "creation_timestamp": "2026-08-08T00:12:52.486367Z"}, {"uuid": "3d251229-a247-422c-a286-b440ee095217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70559", "type": "published-proof-of-concept", "source": "Telegram/WS6QG7O3daDhEGVi670FSZbAH_cCdG6YEmYMAs3H7lOdyiY", "content": "", "creation_timestamp": "2026-08-08T00:19:25.878729Z"}, {"uuid": "ffc372d0-870e-43be-aa98-e1a522bbe551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70559", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96974", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-70559-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-07 02:58:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-70559\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T00:19:26.805134Z"}, {"uuid": "250c638f-63ce-4ac9-be40-78235e5535db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70558", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msnqodj4ku2w", "content": "\ud83d\udd34 CVE-2026-70558 - Critical (9.8)\n\nDinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter dire...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70558/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T14:00:23.482294Z"}, {"uuid": "f76cb05d-07be-4fa4-9815-56a3494007b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96910", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-70553-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a woshidashabi1126\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-06 14:20:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T16:00:06.835540Z"}, {"uuid": "ff8de181-4417-455d-ae36-83e37ed907e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96910", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-70553-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a woshidashabi1126\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-06 14:20:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-07T00:06:41.372478Z"}, {"uuid": "900d0655-852a-4ea4-85fb-d7255d5471b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70558", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshctvj2mq26", "content": "Default Port, Default Disaster, and Everyone Pretending It Wasn\u2019t Obvious\nPANIC 76% | Lag 0.0h | CVE-2026-70558 affects Dinky's file upload feature. Anyone with access to the default HTTP port 8888\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-07T00:36:59.085870Z"}, {"uuid": "d658bdac-d733-4cad-a0b0-f14211f2e8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70559", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96974", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-70559-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-07 02:58:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-70559\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-07T05:00:04.159876Z"}, {"uuid": "fd70c59a-d5d5-43e9-8bf9-210bfd134dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "published-proof-of-concept", "source": "Telegram/FZQflKSk-1-O2VR5bHzh2Y5vS6bPFGFfOUGDC-dTB0Cb394", "content": "", "creation_timestamp": "2026-08-07T10:04:24.702370Z"}, {"uuid": "a9ddcccb-a9c3-48b8-b17c-8348afa980d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70559", "type": "published-proof-of-concept", "source": "Telegram/WS6QG7O3daDhEGVi670FSZbAH_cCdG6YEmYMAs3H7lOdyiY", "content": "", "creation_timestamp": "2026-08-07T10:15:04.664082Z"}, {"uuid": "0780c2a9-f78a-4735-b132-26525f75d2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70559", "type": "seen", "source": "Telegram/f4Vytjn-MRLHBVgNi9AN52_s9pui8b8Txh36DWLXfR9Gx-I", "content": "", "creation_timestamp": "2026-08-07T16:02:15.035127Z"}, {"uuid": "123a7c99-959a-41c6-90b8-928670f023e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70550", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a2aqosgh42arr", "content": "CVE-2026-70550 - Potential unauthorized access to private Composer repository metadata in JFrog Artifactory\nCVE ID : CVE-2026-70550\n \n Published : Aug. 25, 2026, 3:22 p.m. | 43\u00a0minutes ago\n \n Description : An authorization weakness in JFrog Artifactory Composer repository hand...", "creation_timestamp": "2026-08-25T16:14:48.816222Z"}, {"uuid": "fae6f2d6-23ef-48c0-947f-662e693ab132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70551", "type": "seen", "source": "https://bsky.app/profile/gracekind.net/post/3mugbv5onu23g", "content": "According to this article they patched 9 CVEs related to the incident, CVE-2026-70551 is the SSRF", "creation_timestamp": "2026-09-01T01:37:31.058255Z"}, {"uuid": "b5d5126b-dcf4-43da-9b31-77d38cdbc51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70550", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3muhl4f5ksr2k", "content": "\ud83d\udd17 CVE : CVE-2026-69104, CVE-2026-70548, CVE-2026-70550, CVE-2026-70551, CVE-2026-82329", "creation_timestamp": "2026-09-01T13:55:16.786711Z"}, {"uuid": "e1459ef3-09d5-454f-b924-b56fa16b4328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70551", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3muhl4f5ksr2k", "content": "\ud83d\udd17 CVE : CVE-2026-69104, CVE-2026-70548, CVE-2026-70550, CVE-2026-70551, CVE-2026-82329", "creation_timestamp": "2026-09-01T13:55:16.841012Z"}, {"uuid": "ee5c2e38-772c-4575-b3df-f6535f87e891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70551", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mujcbrqrdu2q", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 41 interactions\nCVE-2026-60004: 16 interactions\nCVE-2026-65641: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-62911: 10 interactions\nCVE-2026-70551: 8 interactions\nCVE-2026-83548: 7 interactions\n", "creation_timestamp": "2026-09-02T06:22:33.592798Z"}]}