{"vulnerability": "cve-2026-7259", "sightings": [{"uuid": "a1f9ffd9-b929-46a1-b8bb-8c39c2a2359b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7259", "type": "seen", "source": "https://bsky.app/profile/remirepo.net/post/3mlczxuq7ac2w", "content": "\ud83d\udee1\ufe0f Security updates:\n\n- php-8.1.34-2 (in the php:remi-8.1 module)\n- php80-php-8.1.34-2 (in the php81 Software Collection)\n\nWith security fixes backported from 8.2.31 (CVE-2026-6735, CVE-2026-7259, CVE-2025-14179, CVE-2026-6722, CVE-2026-7261, CVE-2026-7262, CVE-2026-7568, CVE-2026-7258)", "creation_timestamp": "2026-05-08T05:51:08.691811Z"}, {"uuid": "63146818-fd8e-49bd-8430-cf4a49890646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7259", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mldbca2ylb2w", "content": "7/18\n\nrange comparison.\n  For more information, see:\n    https://www.php.net/ChangeLog-8.php#8.4.21\n    https://www.cve.org/CVERecord?id=CVE-2026-7263\n    https://www.cve.org/CVERecord?id=CVE-2026-6735\n    https://www.cve.org/CVERecord?id=CVE-2026-7259", "creation_timestamp": "2026-05-08T08:02:11.750006Z"}, {"uuid": "6f885c1e-0507-4c56-814c-480aaddfed27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7259", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mli7hmd6t42c", "content": "CVE-2026-7259 - Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()\nCVE ID : CVE-2026-7259\n \n Published : May 10, 2026, 5:16 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, ...", "creation_timestamp": "2026-05-10T07:12:43.395529Z"}, {"uuid": "ad639339-fb9d-40f9-8b15-f5be607d2341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7259", "type": "seen", "source": "https://bsky.app/profile/remirepo.net/post/3mlkr672pc225", "content": "\ud83d\udee1\ufe0f Security updates:\n\n- php-8.0.30-16 (in the php:remi-8.0 module)\n- php80-php-8.0.30-16 (in the php80 Software Collection)\n\nWith security fixes backported from 8.1.34 (CVE-2026-6735, CVE-2026-7259, CVE-2025-14179, CVE-2026-6722, CVE-2026-7261, CVE-2026-7262, CVE-2026-7568, CVE-2026-7258)", "creation_timestamp": "2026-05-11T07:34:54.684910Z"}, {"uuid": "85252f72-359e-4720-9005-88e45f8813ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7259", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mllakdpahl2k", "content": "\ud83d\udd17 CVE : CVE-2025-14179, CVE-2026-42371, CVE-2026-6104, CVE-2026-6722, CVE-2026-6735, CVE-2026-7258, CVE-2026-7259, CVE-2026-7261, CVE-2026-7262, CVE-2026-7263, CVE-2026-7568", "creation_timestamp": "2026-05-11T12:10:09.280000Z"}, {"uuid": "32c64546-0646-4447-a8ae-5e7272917193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72590", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mspzjjbxlo2u", "content": "CVE-2026-72590 - crontab-ui\nAn older version of the crontab-ui software from alseambusher allows unauthorized access to execute code on the server. This means an attacker could potentially run any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#crontabui #alseambusher #CVE #infosec", "creation_timestamp": "2026-08-10T11:44:04.035102Z"}, {"uuid": "1835eff4-8486-4eaf-b86b-d908e889858c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72592", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mspzjkirgl26", "content": "CVE-2026-72592 - phpfm\nAn attacker can upload malicious PHP files without a password, allowing them to run code on the server. This could lead to data theft or server compromise. Update to a fixed version of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpfm #dulldusk #CVE #infosec", "creation_timestamp": "2026-08-10T11:44:05.230513Z"}, {"uuid": "e61a4ebb-dc69-4299-8e82-e1b21bada0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72593", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mspzn3mfm62d", "content": "CVE-2026-72593 - phpfm\nThe dulldusk phpfm file manager allows anyone to access and modify files on the server without a password. This means that an attacker could delete or change important files, which\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpfm #dulldusk #CVE #infosec", "creation_timestamp": "2026-08-10T11:46:04.729119Z"}, {"uuid": "cdd4b49f-0f73-44c9-be1d-2de13a55a772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72592", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ga5shuzi2pgvm", "content": "CVE-2026-72592 - dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload\nCVE ID : CVE-2026-72592\n \n Published : Aug. 10, 2026, 11:17 a.m. | 43\u00a0minutes ago\n \n Description : An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0...", "creation_timestamp": "2026-08-10T12:16:41.765127Z"}, {"uuid": "a32aa2f1-d287-4476-93c4-da50424dd523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f7f7kexouu4m2", "content": "CVE-2026-72590 - alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter\nCVE ID : CVE-2026-72590\n \n Published : Aug. 10, 2026, 11:17 a.m. | 43\u00a0minutes ago\n \n Description : An OS command injection vulnerability in alseambusher/crontab-ui throug...", "creation_timestamp": "2026-08-10T12:22:41.852607Z"}, {"uuid": "c8519576-2441-4723-b341-599be010ac7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72599", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msskd7vp3i2q", "content": "CVE-2026-72599 - e107\nThe e107 content management system is vulnerable to SQL injection attacks. This means that an unauthorized person can access and modify sensitive data, including administrator credentials. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#e107 #CVE #infosec", "creation_timestamp": "2026-08-11T11:50:06.032706Z"}, {"uuid": "6ea4dc8b-5119-4dff-8a02-45a82414da4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ohvilzgpzeb2", "content": "CVE-2026-72595 - BadChoice Handesk - Broken Access Control\nCVE ID : CVE-2026-72595\n \n Published : Aug. 11, 2026, 11:13 a.m. | 34\u00a0minutes ago\n \n Description : A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ti...", "creation_timestamp": "2026-08-11T12:09:44.012987Z"}, {"uuid": "0914d06b-ce0a-45e4-9a89-732fb8a2a8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72596", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7jldxrtsvckes", "content": "CVE-2026-72596 - Ghost Foundation Ghost - Broken Access Control\nCVE ID : CVE-2026-72596\n \n Published : Aug. 11, 2026, 11:13 a.m. | 34\u00a0minutes ago\n \n Description : A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to dele...", "creation_timestamp": "2026-08-11T12:15:43.046109Z"}, {"uuid": "1bcf9a6d-df96-4f3e-a525-15ef0c0b032e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72599", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fprkkregxzrlx", "content": "CVE-2026-72599 - e107 e107 - SQL Injection\nCVE ID : CVE-2026-72599\n \n Published : Aug. 11, 2026, 11:14 a.m. | 33\u00a0minutes ago\n \n Description : An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID...", "creation_timestamp": "2026-08-11T12:21:43.419333Z"}]}