{"vulnerability": "CVE-2026-1059", "sightings": [{"uuid": "2be236c9-9978-4914-b9dd-909582383493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1059", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcnfjbe5of2v", "content": "", "creation_timestamp": "2026-01-17T19:57:35.486206Z"}, {"uuid": "9d943aa3-d53a-4011-adaa-2ba50a75456d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10591", "type": "seen", "source": "https://bsky.app/profile/alexpulver.bsky.social/post/3mnd5rysb5f2t", "content": "CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths", "creation_timestamp": "2026-06-02T17:49:49.157070Z"}, {"uuid": "17b685e5-dd1a-49fa-89ea-ef14f3af466f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10591", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndf4cjhad2d", "content": "\ud83d\udfe0 CVE-2026-10591 - High (8.8)\n\nInsufficient access control restrictions in the file write tool in Amazon Kiro IDE before version...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10591/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T20:00:51.658886Z"}, {"uuid": "73f3d939-64af-493d-b4a1-a8c91fd87c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10591", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mngtc5xsob2g", "content": "CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths #patchmanagement", "creation_timestamp": "2026-06-04T04:52:39.054836Z"}, {"uuid": "1e663874-82bf-493e-94da-ecdb00b610bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnh3ax372k2k", "content": "CVE-2026-10597 - ITPison\uff5cOMICARD EDM - Insecure Direct Object Reference\nCVE ID : CVE-2026-10597\n \n Published : June 4, 2026, 3:16 a.m. | 3\u00a0hours, 16\u00a0minutes ago\n \n Description : OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing una...", "creation_timestamp": "2026-06-04T07:15:08.401099Z"}, {"uuid": "4c19d5e5-4682-4993-9f7e-f61c2fe1555f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10591", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnktiyt33l2o", "content": "\ud83d\udccc CVE-2026-10591 - Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to ex... https://www.cyberhub.blog/cves/CVE-2026-10591", "creation_timestamp": "2026-06-05T19:07:07.493104Z"}, {"uuid": "b696c570-1323-4c99-b9cc-2aa09269fc12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10595", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msmsidmgcp2w", "content": "\ud83d\udfe0 CVE-2026-10595 - High (7.5)\n\nA path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10595/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T05:00:10.338846Z"}, {"uuid": "174d3f72-f797-483d-b911-0d6630be3e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10595", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msq36grg2f2m", "content": "CVE-2026-10595 - Path traversal in lollms v2.1.0 lets unauthenticated attackers read arbitrary files via encoded dot-dot sequences. CVSS 7.5. No patch yet\u2014disable or isolate service immediately. #CVE #infosec #lollms\n\nhttps://www.valtersit.com/cve/CVE-2026-10595/", "creation_timestamp": "2026-08-10T12:13:39.827387Z"}, {"uuid": "fb143df4-e319-4942-9a2c-69b04454a7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10595", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117071152394500408", "content": "CVE-2026-10595 - Path traversal in lollms v2.1.0 lets unauthenticated attackers read arbitrary files via encoded dot-dot sequences. CVSS 7.5. No patch yet\u2014disable or isolate service immediately. #CVE #infosec #lollms\nhttps://www.valtersit.com/cve/CVE-2026-10595/", "creation_timestamp": "2026-08-10T12:13:42.236193Z"}, {"uuid": "0e790901-88c1-484b-a817-a87492ae3b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpdcywiko62c", "content": "CVE-2026-10593 - Remotely triggerable NULL-pointer dereference in Bluetooth LE Audio BAP unicast client QoS-state handling\nCVE ID : CVE-2026-10593\n \n Published : June 28, 2026, 4:28 a.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : The Zephyr Bluetooth LE Audio Basic Audio Profil...", "creation_timestamp": "2026-06-28T06:13:33.530775Z"}, {"uuid": "c78e2dc0-5bde-4686-9013-879c0e042bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10593", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphezfrlpa2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10593 \u0432 Zephyr: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Bluetooth LE Audio \u0438 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\n\nhttps://kripta.biz/posts/70A9F3E0-AA17-4F5C-8ABD-84CB75723D18", "creation_timestamp": "2026-06-29T21:00:15.719257Z"}, {"uuid": "73b16881-f87f-4f57-b6b2-a13a003f57a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5seofnoue4dga", "content": "CVE-2026-105985 - Authenticated RCE via render-components Entry Type overrides\nCVE ID : CVE-2026-105985\n \n Published : Oct. 6, 2026, 10:23 a.m. | 50\u00a0minutes ago\n \n Description : Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Pa...", "creation_timestamp": "2026-10-06T11:33:23.255645Z"}, {"uuid": "2a12b0e2-b607-4ef4-a446-8019c6afbb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105918", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mxbud2ytqw2u", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-105918\n\nA vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function ...", "creation_timestamp": "2026-10-07T11:39:40.923855Z"}, {"uuid": "a3f84336-c4e9-48cb-8c1a-5d8038b6383f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105985", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdjygi2gb2n", "content": "CVE-2026-105985 - cms\nIf someone can log into the Craft CMS control panel, they can send specially crafted requests that cause the system to execute any command on the web server. This happens because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-10-08T03:40:05.693949Z"}]}