{"metadata": {"vulnerability": "CVE-2026-55572", "count": 9, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 3}}, "data": [{"timestamp": "2026-06-16T23:11:20.214Z", "date_only": false, "value": "2026-06-16T23:11:20.214Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-55572", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T18:12:10.984Z", "date_only": false, "value": "2026-10-14T18:12:10.984Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-55572", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T18:12:10.984Z", "date_only": false, "value": "2026-10-14T18:12:10.984Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-55572", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:12:10.984Z", "date_only": false, "value": "2026-10-14T18:12:10.984Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-55572", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:17:37.863Z", "date_only": false, "value": "2026-10-14T18:17:37.863", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55572", "record": "FKIE_CVE-2026-55572", "field": "published"}, {"timestamp": "2026-10-14T18:17:37.863Z", "date_only": false, "value": "2026-10-14T18:17:37.863", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55572", "record": "FKIE_CVE-2026-55572", "field": "lastModified"}, {"timestamp": "2026-10-14T20:00:07.561Z", "date_only": false, "value": "2026-10-14T20:00:07.561229Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxudkeroek2l", "record": "CVE-2026-55572", "field": "creation_timestamp", "uuid": "1574e299-c56f-49c9-b265-20330521a856", "content": "CVE-2026-55572 - e107\nThe alt_auth add\u2011on in e107 versions before 2.3.7 lets a bad actor place malicious code into the username field, which is then run as a database command. This can let an unauthenticated\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#e107 #e107inc #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxudkeroek2l"}, {"timestamp": "2026-10-14T20:11:15.282Z", "date_only": false, "value": "2026-10-14T20:11:15.282347Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxue6bnunz2z", "record": "CVE-2026-55572", "field": "creation_timestamp", "uuid": "e914f1ff-3514-4396-8270-f4f735b473a2", "content": "\ud83d\udea8 CVE-2026-55572 \u2014 CVSS 10 CRITICAL\n\ne107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55572\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxue6bnunz2z"}, {"timestamp": "2026-10-14T23:31:50.940Z", "date_only": false, "value": "2026-10-14T23:31:50.940018Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441868867970390", "record": "CVE-2026-55572", "field": "creation_timestamp", "uuid": "b3fb797d-8207-484d-9055-11a76a3142b1", "content": "CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107_plugins/alt_auth/otherdb_auth.php and e107_plugins/alt_auth/e107db_auth.php. The login() methods execute those strings with PDO::query() before effective sanitization, so an unauthenticated user can inject SQL when alt_auth is installed and either backend is configured with a live external database connection. The injection can expose or modify data available to the configured database account, and query failures can additionally disclose the generated query through the debug-message path. This issue is fixed in version 2.3.7.\nhttps://www.cve.org/CVERecord?id=CVE-2026-55572https://github.com/e107inc/e107/security/advisories/GHSA-5f75-c25x-59wxhttps://github.com/e107inc/e107/commit/120bd4bdbe18c8690c60a007ad6716e52e6ee965https://github.com/e107inc/e107/releases/tag/v2.3.7#e107inc #e107#CVE_2026_55572#bot", "url": "https://infosec.exchange/users/cve/statuses/117441868867970390"}]}