{"vulnerability": "cve-2026-74804", "sightings": [{"uuid": "155c50c6-5fc4-4ada-9a6d-1d9b29f72b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74804", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtgvj2kahc2s", "content": "\ud83d\udea8 Critical Security update for ZOO\n\nWe fixed 3 vulnerabilities:\n\nCVE-2026-74804 \u2013 Arbitrary file upload\nCVE-2026-75114 \u2013 SQL injection\nCVE-2026-75115 \u2013 External redirects\n\nUpdate ZOO immediately to ZOO 4.1.64.", "creation_timestamp": "2026-08-19T14:04:01.398190Z"}, {"uuid": "f94e4eb5-717d-4790-8174-4510e4b020fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74804", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtgvj2lbns2s", "content": "\ud83d\udea8 Critical Security update for ZOO\n\nWe fixed 3 vulnerabilities:\n\nCVE-2026-74804 \u2013 Arbitrary file upload\nCVE-2026-75114 \u2013 SQL injection\nCVE-2026-75115 \u2013 External redirects\n\nUpdate ZOO immediately to ZOO 4.1.64.", "creation_timestamp": "2026-08-19T14:04:02.008815Z"}, {"uuid": "58d6d096-f12c-45f3-a9eb-3275828d62e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74804", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4ii4jj32j", "content": "\ud83d\udea8 CVE-2026-74804 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element() in Zoo < 4.1.6...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74804\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:08:24.416101Z"}, {"uuid": "433f7552-17c2-4896-81fd-db6dbd5ee896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74804", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mth6szbtyh2p", "content": "CVE-2026-74804\nThe Joomla Zoo extension is vulnerable to SQL injection attacks if an attacker sends a specially crafted request with an unfiltered filter type. This could allow an attacker to access or modify sensitive data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T16:50:05.567071Z"}]}