<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 18 Sep 2026 03:28:16 +0000</lastBuildDate>
    <item>
      <title>aee7f2c2-d207-4877-9fc7-7b3ef2dc6342</title>
      <link>https://vulnerability.circl.lu/sighting/aee7f2c2-d207-4877-9fc7-7b3ef2dc6342/export</link>
      <description>{"uuid": "aee7f2c2-d207-4877-9fc7-7b3ef2dc6342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvqzg5j6732y", "content": "CakePHP FunctionsBuilder has a CRITICAL SQL injection flaw (CVE-2026-79752). Impact: unauthorized SQL execution. Patch to 4.5.12/4.6.5/5.1.9/5.2.14/5.3.7 or avoid user input in key params. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-inje...", "creation_timestamp": "2026-09-18T01:30:26.115919Z"}</description>
      <content:encoded>{"uuid": "aee7f2c2-d207-4877-9fc7-7b3ef2dc6342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvqzg5j6732y", "content": "CakePHP FunctionsBuilder has a CRITICAL SQL injection flaw (CVE-2026-79752). Impact: unauthorized SQL execution. Patch to 4.5.12/4.6.5/5.1.9/5.2.14/5.3.7 or avoid user input in key params. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-inje...", "creation_timestamp": "2026-09-18T01:30:26.115919Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aee7f2c2-d207-4877-9fc7-7b3ef2dc6342/export</guid>
      <pubDate>Fri, 18 Sep 2026 01:30:26 +0000</pubDate>
    </item>
    <item>
      <title>5936f516-d0f4-4204-8856-9f22d2dd19ad</title>
      <link>https://vulnerability.circl.lu/sighting/5936f516-d0f4-4204-8856-9f22d2dd19ad/export</link>
      <description>{"uuid": "5936f516-d0f4-4204-8856-9f22d2dd19ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79752", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117289453047176290", "content": "CVE-2026-79752: CakePHP &amp;lt;4.5.12, 4.6.0-4.6.4, 5.0.0-5.1.8, 5.2.0-5.2.13, 5.3.0-5.3.6 FunctionsBuilder SQL injection risk! CRITICAL severity \u2014 patch ASAP or avoid user input in $dataType, $part, $unit. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-injection-cve-2026-79752-16b04fe3ca4b5527 #OffSeq #CakePHP #SQLi #Infosec", "creation_timestamp": "2026-09-18T01:30:24.004434Z"}</description>
      <content:encoded>{"uuid": "5936f516-d0f4-4204-8856-9f22d2dd19ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79752", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117289453047176290", "content": "CVE-2026-79752: CakePHP &amp;lt;4.5.12, 4.6.0-4.6.4, 5.0.0-5.1.8, 5.2.0-5.2.13, 5.3.0-5.3.6 FunctionsBuilder SQL injection risk! CRITICAL severity \u2014 patch ASAP or avoid user input in $dataType, $part, $unit. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-injection-cve-2026-79752-16b04fe3ca4b5527 #OffSeq #CakePHP #SQLi #Infosec", "creation_timestamp": "2026-09-18T01:30:24.004434Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5936f516-d0f4-4204-8856-9f22d2dd19ad/export</guid>
      <pubDate>Fri, 18 Sep 2026 01:30:24 +0000</pubDate>
    </item>
    <item>
      <title>9af6b5bc-4edf-47f7-b4c0-f91de8991546</title>
      <link>https://vulnerability.circl.lu/sighting/9af6b5bc-4edf-47f7-b4c0-f91de8991546/export</link>
      <description>{"uuid": "9af6b5bc-4edf-47f7-b4c0-f91de8991546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4vosc5k2t", "content": "CVE-2026-79752 - cakephp\nVersions of CakePHP before 4.5.12, 4.6.5, 5.1.9, 5.2.14 and 5.3.7 let specially crafted input be turned into part of a database query without proper cleaning. This could let a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cakephp #CVE #infosec", "creation_timestamp": "2026-09-17T17:00:11.888585Z"}</description>
      <content:encoded>{"uuid": "9af6b5bc-4edf-47f7-b4c0-f91de8991546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4vosc5k2t", "content": "CVE-2026-79752 - cakephp\nVersions of CakePHP before 4.5.12, 4.6.5, 5.1.9, 5.2.14 and 5.3.7 let specially crafted input be turned into part of a database query without proper cleaning. This could let a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cakephp #CVE #infosec", "creation_timestamp": "2026-09-17T17:00:11.888585Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9af6b5bc-4edf-47f7-b4c0-f91de8991546/export</guid>
      <pubDate>Thu, 17 Sep 2026 17:00:11 +0000</pubDate>
    </item>
    <item>
      <title>b808789e-d3d0-4241-bcd6-4193aa8edc58</title>
      <link>https://vulnerability.circl.lu/sighting/b808789e-d3d0-4241-bcd6-4193aa8edc58/export</link>
      <description>{"uuid": "b808789e-d3d0-4241-bcd6-4193aa8edc58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq265jueo2j", "content": "\ud83d\udea8 CVE-2026-79752 \u2014 CVSS 9.2 CRITICAL\n\nCakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, Functio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79752\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:11:12.163395Z"}</description>
      <content:encoded>{"uuid": "b808789e-d3d0-4241-bcd6-4193aa8edc58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq265jueo2j", "content": "\ud83d\udea8 CVE-2026-79752 \u2014 CVSS 9.2 CRITICAL\n\nCakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, Functio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79752\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:11:12.163395Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b808789e-d3d0-4241-bcd6-4193aa8edc58/export</guid>
      <pubDate>Thu, 17 Sep 2026 16:11:12 +0000</pubDate>
    </item>
  </channel>
</rss>
