{"vulnerability": "CVE-2026-16766", "sightings": [{"uuid": "335e0947-66a8-4f03-9553-87157956d4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16766", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116979795764810841", "content": "CVE-2026-16766: CRITICAL OS command injection in Catalyst::View::Wkhtmltopdf (<0.6.1). Exploitable via unsanitized PDF options \u2014 remote code execution possible. No maintained patch; upgrade to 0.6.1+ or migrate. https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-9e7c09567b0712f8 #OffSeq #infosec #perl #vuln", "creation_timestamp": "2026-07-25T09:00:29.001890Z"}, {"uuid": "70e32351-8b56-4d82-9235-8070efa2d920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16766", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrhiwcpizo2g", "content": "CVE-2026-16766: Catalyst::View::Wkhtmltopdf (<0.6.1) suffers CRITICAL OS command injection via PDF options. Upgrade to 0.6.1+ or migrate \u2014 no maintained patch. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-i...", "creation_timestamp": "2026-07-25T09:00:30.887845Z"}, {"uuid": "eb851439-43f2-4a71-80ae-190f1d2df896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrj2wcdbus2g", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-16766](https://github.com/mc7244/Catalyst-View-Wkhtmltopdf/issues/6)\nCatalyst::View::Wk...\nhttps://github.com/mc7244/Catalyst-View-Wkhtmltopdf/issues/6 #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-25T23:55:16.865184Z"}, {"uuid": "c9bc22a6-e246-48a7-a173-018c49a4695a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mriflkqhw526", "content": "CVE-2026-16766: Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options", "creation_timestamp": "2026-07-25T17:33:28.157881Z"}, {"uuid": "dcd13163-e0ef-4914-bc70-ced94a2dc9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnf3zxmbj2s", "content": "CVE-2026-16766 - catalyst::view::wkhtmltopdf\nCatalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl can be exploited by attackers to inject malicious code when generating PDFs. This can happen if your application\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rrwo #CVE #infosec", "creation_timestamp": "2026-07-27T17:08:05.714541Z"}]}