{"vulnerability": "cve-2026-7287", "sightings": [{"uuid": "3aec1e7e-0b94-4978-b9c4-4e450cb0afea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7287", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mln3czbvcb2q", "content": "CVE-2026-7287 - Zyxel NWA1100-N HTTP Request Buffer Overflow Denial of Service\nCVE ID : CVE-2026-7287\n \n Published : May 12, 2026, 4:16 a.m. | 14\u00a0minutes ago\n \n Description : ** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPass...", "creation_timestamp": "2026-05-12T05:41:52.798489Z"}, {"uuid": "f814d94d-f8aa-42ee-bb27-d0362d2dbf67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72872", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqtryv6kf2u", "content": "CVE-2026-72872 - dokploy\nDokploy's self-hosted Platform as a Service allows unauthorized users with deployment permissions to run arbitrary system commands on the host or target server. This is fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T19:34:05.980739Z"}, {"uuid": "678f5214-747c-4209-8ac9-03b64877eb7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72871", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqvbuvwhs27", "content": "\ud83d\udfe0 CVE-2026-72871 - High (7.5)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the unauthentica...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72871/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T20:00:53.417798Z"}, {"uuid": "6b596369-6094-4e30-8b54-c367214e5a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72872", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqvc435em2t", "content": "\ud83d\udd34 CVE-2026-72872 - Critical (9.9)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, application.save...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72872/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T20:01:00.688448Z"}, {"uuid": "2c7995ae-35ea-43d9-b75e-ead1cbcc2787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72876", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwlgfrhn25", "content": "CVE-2026-72876 - dokploy\nDokploy's self-hosted servers allow a malicious tenant with server access to execute arbitrary commands on another tenant's server. This is a serious security risk, as it could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:24:07.104370Z"}, {"uuid": "15a4b453-ccdb-46e7-a28a-df8e0a6b446e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwowoee625", "content": "CVE-2026-72878 - dokploy\nDokploy's backup and restore feature allows an attacker with admin access to inject malicious commands that can execute on the host machine, potentially leading to unauthorized access or data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:26:04.439113Z"}, {"uuid": "4ad328e8-0ec9-4357-81d5-ce2cf9fe1ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72879", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwoxvgia26", "content": "CVE-2026-72879 - dokploy\nDokploy's self-hosted Platform as a Service (PaaS) is affected. An attacker with access to a project can use malicious registry credentials to execute arbitrary commands on the server,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:26:05.680393Z"}, {"uuid": "d9beee61-adfd-4be8-af9c-177227ef55a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72877", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqxasur462v", "content": "CVE-2026-72877\nDokploy's self-hosted PaaS platform has a security flaw in its build process that allows an authenticated user with permission to create or update applications to execute arbitrary commands on the build host,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T20:36:04.572444Z"}, {"uuid": "914078d5-efc9-4746-b2aa-d4f3812bfafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mssvrauood2p", "content": "CVE-2026-72878 - Critical RCE in Dokploy PaaS. Backup pipeline injects user-controlled fields into shell commands, allowing authenticated admins to execute OS-level commands on the host. CVSS 9.6. Update to 0.29.13 immediately. #CVE #Dokplo...\n\nhttps://www.valtersit.com/cve/CVE-2026-72878/", "creation_timestamp": "2026-08-11T15:14:50.695273Z"}, {"uuid": "a58d7aa5-7b55-496c-859b-a9e9f74feb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117077526984432106", "content": "CVE-2026-72878 - Critical RCE in Dokploy PaaS. Backup pipeline injects user-controlled fields into shell commands, allowing authenticated admins to execute OS-level commands on the host. CVSS 9.6. Update to 0.29.13 immediately. #CVE #Dokploy #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72878/", "creation_timestamp": "2026-08-11T15:15:01.673205Z"}, {"uuid": "ad869041-289b-4c67-aaed-7f0c6b70f073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72872", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mst4cap7xl2z", "content": "CVE-2026-72872 - Critical RCE in Dokploy. Unvalidated input leads to OS command injection via git clone. CVSS 9.9. Unpatched. Update immediately if affected. #CVE #Dokploy #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-72872/", "creation_timestamp": "2026-08-11T17:11:40.756698Z"}, {"uuid": "343a2cb7-c5d4-448e-824b-2de2b1721bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72872", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117077986710144754", "content": "CVE-2026-72872 - Critical RCE in Dokploy. Unvalidated input leads to OS command injection via git clone. CVSS 9.9. Unpatched. Update immediately if affected. #CVE #Dokploy #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72872/", "creation_timestamp": "2026-08-11T17:11:47.328899Z"}]}