{"metadata": {"vulnerability": "CVE-2026-79752", "count": 21, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-08-25T14:08:18.109Z", "date_only": false, "value": "2026-08-25T14:08:18.109Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-79752", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-17T14:49:56.936Z", "date_only": false, "value": "2026-09-17T14:49:56.936Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-79752", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-17T14:49:56.936Z", "date_only": false, "value": "2026-09-17T14:49:56.936Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-79752", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-17T15:16:51Z", "date_only": false, "value": "2026-09-17T15:16:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VJQC-Q4MP-2RVF", "record": "GHSA-VJQC-Q4MP-2RVF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-17T15:16:51.673Z", "date_only": false, "value": "2026-09-17T15:16:51.673", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79752", "record": "FKIE_CVE-2026-79752", "field": "published"}, {"timestamp": "2026-09-17T15:19:49.116Z", "date_only": false, "value": "2026-09-17T15:19:49.116379Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-79752", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-17T15:19:49.116Z", "date_only": false, "value": "2026-09-17T15:19:49.116379Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79752", "record": "FKIE_CVE-2026-79752", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-17T15:20:00.313Z", "date_only": false, "value": "2026-09-17T15:20:00.313Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-79752", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-17T15:20:00.313Z", "date_only": false, "value": "2026-09-17T15:20:00.313Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-79752", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-17T16:11:12.163Z", "date_only": false, "value": "2026-09-17T16:11:12.163395Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq265jueo2j", "record": "CVE-2026-79752", "field": "creation_timestamp", "uuid": "b808789e-d3d0-4241-bcd6-4193aa8edc58", "content": "\ud83d\udea8 CVE-2026-79752 \u2014 CVSS 9.2 CRITICAL\n\nCakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, Functio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79752\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq265jueo2j"}, {"timestamp": "2026-09-17T17:00:11.888Z", "date_only": false, "value": "2026-09-17T17:00:11.888585Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4vosc5k2t", "record": "CVE-2026-79752", "field": "creation_timestamp", "uuid": "9af6b5bc-4edf-47f7-b4c0-f91de8991546", "content": "CVE-2026-79752 - cakephp\nVersions of CakePHP before 4.5.12, 4.6.5, 5.1.9, 5.2.14 and 5.3.7 let specially crafted input be turned into part of a database query without proper cleaning. This could let a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cakephp #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4vosc5k2t"}, {"timestamp": "2026-09-17T20:28:14Z", "date_only": false, "value": "2026-09-17T20:28:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VJQC-Q4MP-2RVF", "record": "GHSA-VJQC-Q4MP-2RVF", "field": "published"}, {"timestamp": "2026-09-18T01:30:24.004Z", "date_only": false, "value": "2026-09-18T01:30:24.004434Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117289453047176290", "record": "cve-2026-79752", "field": "creation_timestamp", "uuid": "5936f516-d0f4-4204-8856-9f22d2dd19ad", "content": "CVE-2026-79752: CakePHP <4.5.12, 4.6.0-4.6.4, 5.0.0-5.1.8, 5.2.0-5.2.13, 5.3.0-5.3.6 FunctionsBuilder SQL injection risk! CRITICAL severity \u2014 patch ASAP or avoid user input in $dataType, $part, $unit. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-injection-cve-2026-79752-16b04fe3ca4b5527 #OffSeq #CakePHP #SQLi #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117289453047176290"}, {"timestamp": "2026-09-18T01:30:26.115Z", "date_only": false, "value": "2026-09-18T01:30:26.115919Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvqzg5j6732y", "record": "CVE-2026-79752", "field": "creation_timestamp", "uuid": "aee7f2c2-d207-4877-9fc7-7b3ef2dc6342", "content": "CakePHP FunctionsBuilder has a CRITICAL SQL injection flaw (CVE-2026-79752). Impact: unauthorized SQL execution. Patch to 4.5.12/4.6.5/5.1.9/5.2.14/5.3.7 or avoid user input in key params. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-inje...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvqzg5j6732y"}, {"timestamp": "2026-09-18T05:02:28.439Z", "date_only": false, "value": "2026-09-18T05:02:28.439180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvrfbcyt6v2h", "record": "CVE-2026-79752", "field": "creation_timestamp", "uuid": "cb3239bf-f538-46e7-966d-ee710159931d", "content": "Daily IT Security Digest \u2014 2026-09-18\n[infosec.exchange/@beyondmachines1](https://infosec.exchange/@beyondmachines1/117279901169199565)\n\n## 8. Additional Notable Vulnerabilities\n\n- **CakePHP SQL Injection** (CVE-2026-79752, CRITICAL): Versions 4.x through 5.3.x vulnerable in FunctionsBuilder. Avoid", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mvrfbcyt6v2h"}, {"timestamp": "2026-09-22T07:00:08.925Z", "date_only": false, "value": "2026-09-22T07:00:08.925215Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "record": "CVE-2026-79752", "field": "creation_timestamp", "uuid": "9ad5fb07-874a-41cc-a9b7-3bf7826899d8"}, {"timestamp": "2026-09-22T07:00:10.349Z", "date_only": false, "value": "2026-09-22T07:00:10.349421Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "record": "CVE-2026-79752", "field": "creation_timestamp", "uuid": "dd1d7897-becd-4e0d-b1e6-e1cf8e4340b4"}, {"timestamp": "2026-09-23T00:00:12.505Z", "date_only": false, "value": "2026-09-23T00:00:12.505532Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "record": "CVE-2026-79752", "field": "creation_timestamp", "uuid": "221773a4-d85f-4598-bc09-cf6f3314ec2d"}, {"timestamp": "2026-09-23T00:00:14.323Z", "date_only": false, "value": "2026-09-23T00:00:14.323721Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "record": "CVE-2026-79752", "field": "creation_timestamp", "uuid": "d2e3d131-613b-4e9c-bb64-a92c4646b928"}, {"timestamp": "2026-09-24T14:36:09Z", "date_only": false, "value": "2026-09-24T14:36:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VJQC-Q4MP-2RVF", "record": "GHSA-VJQC-Q4MP-2RVF", "field": "modified"}, {"timestamp": "2026-09-30T17:43:24.057Z", "date_only": false, "value": "2026-09-30T17:43:24.057", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79752", "record": "FKIE_CVE-2026-79752", "field": "lastModified"}]}