{"vulnerability": "CVE-2026-17459", "sightings": [{"uuid": "e15ae57e-c86b-4983-924c-e47e69d2eb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-17459", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116985811828078268", "content": "CVE-2026-17459: perwendel spark 2.9.0 \u2013 2.9.4 affected by symlink following in staticFiles.externalLocation. Exploit public, MEDIUM severity. Restrict external resource access and monitor for patches. https://radar.offseq.com/threat/cve-2026-17459-symlink-following-in-perwendel-spark-e9c7a3ae8bd59674 #OffSeq #CVE202617459 #Java #Security", "creation_timestamp": "2026-07-26T10:30:26.730337Z"}, {"uuid": "472f1bea-a2e5-402d-83b4-323656342ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-17459", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrk6g3xnyj2n", "content": "perwendel spark 2.9.0 \u2013 2.9.4 hit by CVE-2026-17459 (MEDIUM): Symlink following via staticFiles.externalLocation. Exploit is public \u2014 review server file access. https://radar.offseq.com/threat/cve-2026-17459-symlink-following-in-perwendel-spark-e9c7a3ae8bd59674 #OffSeq #AppSec #CVE202617459", "creation_timestamp": "2026-07-26T10:30:28.543528Z"}, {"uuid": "8e588b79-8fb2-4c30-9557-a5d046a54664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17459", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrkvmgxttw2x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-17459](https://github.com/perwendel/spark/)\nA vulnerability was determined in perwendel...\nhttps://github.com/perwendel/spark/ #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-26T17:25:36.996646Z"}]}