{"vulnerability": "CVE-2026-5172", "sightings": [{"uuid": "f5c514b8-31e8-4aa9-a062-0d1515ff26fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5172", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllxds6f4v2c", "content": "CVE-2026-5172 - CVE-2026-5172\nCVE ID : CVE-2026-5172\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : A buffer overflow in dnsmasq\u2019s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed...", "creation_timestamp": "2026-05-11T18:58:06.455431Z"}, {"uuid": "a6520877-02a0-4c49-a212-d2411a08d7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5172", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllxds6f4v2c", "content": "CVE-2026-5172 - CVE-2026-5172\nCVE ID : CVE-2026-5172\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : A buffer overflow in dnsmasq\u2019s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed...", "creation_timestamp": "2026-05-11T18:58:06.456858Z"}, {"uuid": "da1840d8-2459-4c40-a7e5-2a8cb5004fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-5172", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bb20f34e-4314-42f2-8e6b-cb2c917339bc", "content": "", "creation_timestamp": "2026-05-13T12:31:36.904766Z"}, {"uuid": "75bb9f20-034e-46ed-9dd5-0a88ee2a4b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5172", "type": "seen", "source": "https://t.me/GithubRedTeam/86070", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE20265172poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lottiedeyan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 05:56:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5172: buffer overflow in extract_addresses() on crafted resource record PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-27T06:00:04.000000Z"}, {"uuid": "b4675803-dc19-425c-a39e-53eeee6ca1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5172", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "creation_timestamp": "2026-05-27T21:09:44.000000Z"}, {"uuid": "090bcbbb-205e-4e93-892f-ffff99d42266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5172", "type": "seen", "source": "Telegram/XzC-KGBCdspPXiEjFuhhLQhveWuSfskWTBPYimD-K-OCFrQ", "content": "", "creation_timestamp": "2026-05-27T21:02:29.000000Z"}, {"uuid": "f91d1de4-9bbc-4344-95d0-3a0eba6d0972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51720", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mufphs37lq2y", "content": "\ud83d\udea8 CVE-2026-51720 \u2014 CVSS 9.1 CRITICAL\n\nIncorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-51720\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T20:07:54.713692Z"}, {"uuid": "055e9d6d-3cf9-496c-bc8d-eb6c4d9b0c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51725", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mufpi35g5h23", "content": "\ud83d\udea8 CVE-2026-51725 \u2014 CVSS 9.1 CRITICAL\n\nIncorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-51725\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T20:08:04.016353Z"}, {"uuid": "d91704b7-19fd-4b7e-8c5f-d01d441e137e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51725", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mufplnofk625", "content": "CVE-2026-51725\nThe T6 router running version 4.1.5 allows anyone on the network to send a specially crafted request that resets the device\u2019s date and time. Incorrect permission checks let an unauthenticated user make this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-31T20:10:05.334483Z"}, {"uuid": "35ed3188-6c07-40e8-891b-f729a1f82723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51720", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mufplpfdyq2m", "content": "CVE-2026-51720\nThe T6 router firmware version 4.1.5 allows anyone on the network to send a special web request that removes existing firewall filter rules. This can open the network to unwanted traffic or attacks because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-31T20:10:06.233020Z"}, {"uuid": "6a7ab94c-7f80-42c4-b776-1250f7d86239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51729", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muho6ekk6t2d", "content": "CVE-2026-51729\nThe T6 router\u2019s management interface does not properly verify who can use the delete\u2011device command. An attacker who can reach the router on the network could send a specially crafted request and cause a linked\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-01T14:50:04.422037Z"}, {"uuid": "66899873-0f41-4c87-8383-5c42d858a7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51724", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muho6gbk232o", "content": "CVE-2026-51724\nThe TOTOLINK T6 device running version 4.1.5 allows anyone on the network to send a special request that erases its Smart QoS (traffic\u2011priority) settings without logging in. This could cause important\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-01T14:50:06.039830Z"}, {"uuid": "29be6915-4117-4083-9220-dbd35d10d5d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51726", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhqxtw55a2o", "content": "CVE-2026-51726\nThe T6 router firmware version 4.1.5 allows anyone on the network to send a special web request that removes parental\u2011control settings. This means unwanted changes to content filters can be made without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-01T15:40:07.041387Z"}, {"uuid": "008eca30-5d36-4996-9c29-7503fde8008f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51722", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhrjokich2t", "content": "CVE-2026-51722\nThe TOTOLINK T6 router lets anyone on the network change its repeater settings by sending a specially crafted request, causing it to connect to a Wi\u2011Fi network controlled by an attacker. This can expose all\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-01T15:50:05.231782Z"}, {"uuid": "0c346579-aecd-4fb5-997a-f2c946c476a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51721", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhs3mtknj2v", "content": "CVE-2026-51721\nThe T6 router firmware version 4.1.5 allows anyone on the network to send a special request that changes how the device joins a mesh network. This could let an attacker disrupt or control the wireless layout\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-01T16:00:07.229174Z"}]}