{"vulnerability": "CVE-2026-1280", "sightings": [{"uuid": "6baf05ce-c768-4100-8f45-3ab66332b3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1280", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdiddmln2x25", "content": "", "creation_timestamp": "2026-01-28T13:00:31.897240Z"}, {"uuid": "f129da73-0b37-486d-9786-257c77ac11be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12803", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117036528234088485", "content": "Bouncy Castle Java 1.85 has been released. It includes fixes to various rather significant vulnerabilities and weaknesses. Some highlights:\n- CVE-2026-8763 - Name Constraints bypass via trailing dot in rfc822Name and URI.- CVE-2026-12803 - KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery).- CVE-2026-12816 - IESEngine stream-mode MAC forgery via length-dependent KDF split.- CVE-2026-58061 - CCM-family modes write plaintext to caller buffer before tag check.- CVE-2026-58062 - Stapled OCSP response accepted without binding to the checked certificate.- CVE-2026-59639 - CMS verifySignatures returns true for SignedData with zero signers.\nhttps://www.bouncycastle.org/resources/new-release-bouncy-castle-java-1-85/\n#infosec #cybersecurity", "creation_timestamp": "2026-08-04T09:28:17.850324Z"}, {"uuid": "d8caa617-b4d0-4a0c-96d4-4976c54617aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12802", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12802", "content": "", "creation_timestamp": "2026-08-03T11:22:37.931601Z"}, {"uuid": "eedcb732-e3e1-4ee1-b166-394897d9da43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12803", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12803", "content": "", "creation_timestamp": "2026-08-03T11:22:47.388195Z"}, {"uuid": "1a281e7d-d910-437f-bbce-9f0dd5273d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2igor6ykz2if6", "content": "CVE-2026-12803 - KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)\nCVE ID : CVE-2026-12803\n \n Published : Aug. 3, 2026, 4:16 a.m. | 1\u00a0hour, 39\u00a0minutes ago\n \n Description : In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not b...", "creation_timestamp": "2026-08-03T06:09:53.130940Z"}, {"uuid": "e06f04ab-5019-4d8f-9afd-2d2b81a574d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12806", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116786226230335381", "content": "We have just added an important vulnerability affecting Edimax BR-6478AC V2 (CVE-2026-12806) https://vuldb.com/vuln/372600", "creation_timestamp": "2026-06-21T04:33:12.754897Z"}, {"uuid": "f9c9e869-d33f-4f70-b8f9-cc0503fa1105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12806", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3motlemgidr2g", "content": "Edimax BR-6478AC V2 (fw 1.23) hit by HIGH severity buffer overflow (CVE-2026-12806). No patch yet \u2014 limit network exposure & monitor for updates. https://radar.offseq.com/threat/cve-2026-12806-buffer-overflow-in-edimax-br-6478ac-e0054e5a0ac822a3 #OffSeq #RouterSecurity #Vulnerability", "creation_timestamp": "2026-06-22T00:00:41.193718Z"}, {"uuid": "08cad9b7-9ade-4cd9-a615-4f25d89ac3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mote2cizsf2v", "content": "CVE-2026-12806 - Edimax BR-6478AC V2 POST Request formWlSiteSurvey buffer overflow\nCVE ID : CVE-2026-12806\n \n Published : June 21, 2026, 7:30 p.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the...", "creation_timestamp": "2026-06-21T21:49:37.592464Z"}, {"uuid": "1f27a2d2-c6ce-48ee-baa9-a2ffed541112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3motedaxnnf23", "content": "CVE-2026-12805 - OFFIS DCMTK ofxml.cc parseFile heap-based overflow\nCVE ID : CVE-2026-12805\n \n Published : June 21, 2026, 7:15 p.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseF...", "creation_timestamp": "2026-06-21T21:54:37.929247Z"}, {"uuid": "89a3e9a5-acac-40ba-91a1-ade8aabe6643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3motem7fepg2q", "content": "CVE-2026-12807 - Edimax BR-6478AC V2 POST Request setWAN command injection\nCVE ID : CVE-2026-12807\n \n Published : June 21, 2026, 7:45 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : A vulnerability was found in Edimax BR-6478AC V2 1.23. This affects the function setWAN of the f...", "creation_timestamp": "2026-06-21T21:59:38.310667Z"}, {"uuid": "5a3dddde-9c67-4546-9c38-f77e2635328d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3motev5tby522", "content": "CVE-2026-12804 - lemonldap-ng SAML Common Domain Cookie Endpoint CDC.pm redirect\nCVE ID : CVE-2026-12804\n \n Published : June 21, 2026, 6:30 p.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown functio...", "creation_timestamp": "2026-06-21T22:04:46.503773Z"}, {"uuid": "b05dcc57-7528-47e0-bff4-355ba19b3f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12808", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3motf64iaye2x", "content": "CVE-2026-12808 - Edimax BR-6478AC V2 POST Request stainfo command injection\nCVE ID : CVE-2026-12808\n \n Published : June 21, 2026, 8:45 p.m. | 58\u00a0minutes ago\n \n Description : A vulnerability was determined in Edimax BR-6478AC V2 1.23. This impacts the function stainfo of the fi...", "creation_timestamp": "2026-06-21T22:09:39.213881Z"}, {"uuid": "736bef5e-0309-4fd9-b45f-62818f92fe44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12806", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116790816768253564", "content": "CVE-2026-12806: HIGH severity buffer overflow in Edimax BR-6478AC V2 (fw 1.23). Remote exploitation possible, no patch available. Limit access & watch for updates. https://radar.offseq.com/threat/cve-2026-12806-buffer-overflow-in-edimax-br-6478ac-e0054e5a0ac822a3 #OffSeq #Vulnerability #RouterSecurity #Infosec", "creation_timestamp": "2026-06-22T00:00:43.388704Z"}, {"uuid": "869690a2-49f0-4f4b-bfcf-380fb2001b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3motry22f5h2b", "content": "CVE-2026-12809 - Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection\nCVE ID : CVE-2026-12809\n \n Published : June 21, 2026, 9:30 p.m. | 4\u00a0hours, 7\u00a0minutes ago\n \n Description : A vulnerability was identified in Edimax BR-6478AC V2 1.23. Affected is the function ...", "creation_timestamp": "2026-06-22T01:58:54.128613Z"}, {"uuid": "4d9366e8-42b1-4e1c-bd77-be22d30c8aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12806", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moustzqpfp2y", "content": "Edimax BR-6478AC V2 1.23 \u306e /goform/formWlSiteSurvey \u3067\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u3067\u3001selSSID \u5f15\u6570\u64cd\u2026\nCVE-2026-12806 CVSS 8.8 | HIGH", "creation_timestamp": "2026-06-22T11:47:13.123403Z"}, {"uuid": "4d4c6191-4a27-415c-b85b-c37c87d2432a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12800", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrpcnsen6i2u", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cPremium Packages\u300dv6.2.0\u4ee5\u524d\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u975e\u8a8d\u8a3c\u653b\u6483\u8005\u304cSQL\u30af\u30a8\u30ea\u3092\u633f\u5165\u3057\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u304b\u3089\u6a5f\u5bc6\u60c5\u5831\u3092\u7a83\u53d6\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-12800 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-28T11:29:39.964547Z"}]}