{"vulnerability": "cve-2026-9259", "sightings": [{"uuid": "316de17c-4f79-429c-9446-4aacda6d6d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9259", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU98100934", "content": "", "creation_timestamp": "2026-06-15T19:00:00.000000Z"}, {"uuid": "0e440449-a245-46af-a4ae-e5f2325311dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9259", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moevt6c3uo2i", "content": "CVE-2026-9259 - Canon Network Setting Tool Improper Certificate Validation\nCVE ID : CVE-2026-9259\n \n Published : June 16, 2026, 12:16 a.m. | 3\u00a0hours, 14\u00a0minutes ago\n \n Description : Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or e...", "creation_timestamp": "2026-06-16T03:57:49.532085Z"}, {"uuid": "fba67359-b24a-4fee-a7f7-94a7cf61050b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9259", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-canon-eos-utility", "content": "", "creation_timestamp": "2026-06-16T04:31:16.000000Z"}, {"uuid": "d1011744-baa2-4041-bf06-da1e3b121774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92599", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/djdpmjjyqvynx", "content": "CVE-2026-92599 - Joi before 17.13.7 and 18.2.6 ReDoS via isoDate\nCVE ID : CVE-2026-92599\n \n Published : Sept. 16, 2026, 10:18 p.m. | 14\u00a0minutes ago\n \n Description : joi (npm package `joi`, hapi.js) versions >=17.2.0 <17.13.7 and >=18.0.0 <18.2.6 are vulnerable to r...", "creation_timestamp": "2026-09-16T23:01:41.477867Z"}, {"uuid": "e20d0c8a-e506-4775-b706-7e2e78d9130d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dmuesjrtqcdwt", "content": "CVE-2026-92598 - Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypass\nCVE ID : CVE-2026-92598\n \n Published : Sept. 16, 2026, 10:18 p.m. | 14\u00a0minutes ago\n \n Description : Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encoding international domain nam...", "creation_timestamp": "2026-09-16T23:07:39.736406Z"}, {"uuid": "eb080c1c-b4cd-4012-b93e-daf40921a030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/52ksaijs5owo7", "content": "CVE-2026-92597 - Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Comment\nCVE ID : CVE-2026-92597\n \n Published : Sept. 16, 2026, 10:18 p.m. | 14\u00a0minutes ago\n \n Description : Nodemailer versions >= 6.9.16 and < 9.1.0 mis-parse RFC 5322 comments in email...", "creation_timestamp": "2026-09-16T23:13:39.863310Z"}, {"uuid": "8546154d-9d17-409e-8243-66a32c4affa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/axtxvx3sflvhz", "content": "CVE-2026-92594 - Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQL\nCVE ID : CVE-2026-92594\n \n Published : Sept. 16, 2026, 10:18 p.m. | 14\u00a0minutes ago\n \n Description : Craft CMS 5.0.0-RC1 through versions before 5.11.0 incorrectly authorize the GraphQL draftCre...", "creation_timestamp": "2026-09-16T23:19:39.738231Z"}, {"uuid": "27af3574-1479-46fc-8fb2-eb79b042c434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92594", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-craft-cms", "content": "", "creation_timestamp": "2026-09-17T12:45:06.130766Z"}, {"uuid": "49e83e33-c2b0-4129-9308-020247e1c073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92593", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-craft-cms", "content": "", "creation_timestamp": "2026-09-17T12:45:08.025438Z"}, {"uuid": "274fd477-9795-44ad-8955-02922a23432b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92592", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-craft-cms", "content": "", "creation_timestamp": "2026-09-17T12:45:09.926190Z"}, {"uuid": "41884b67-7f05-48cb-b26f-5942ccafdc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92591", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-craft-cms", "content": "", "creation_timestamp": "2026-09-17T12:45:11.809548Z"}, {"uuid": "a6997677-4609-4a47-b31c-c1e644a0de9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92592", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtvlxhpnu2b", "content": "CVE-2026-92592 - cms\nVersions of Craft CMS from 4.8.0 up to 4.18.5 and from 5.0.0 up to 5.10.12 accept a specially crafted signed cookie and then execute code on the server. An attacker who can log in with a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-09-19T05:00:05.024105Z"}, {"uuid": "da3aa83c-6291-42f5-9bf5-304d55ba86e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92593", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtvlzaqwv2w", "content": "CVE-2026-92593 - cms\nVersions of Craft CMS from 5.10.0 through 5.10.12 let a user who can log into the control panel and edit a single content type create a special link that runs their own code on the web\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-09-19T05:00:06.651382Z"}]}