{"vulnerability": "CVE-2026-59933", "sightings": [{"uuid": "7b7be676-3fa2-4542-83cf-3c4fc7d75833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrd5tmlace2i", "content": "A malformed 1 KB spreadsheet can crash PHP apps that use PhpSpreadsheet, the standard library for reading Excel files (CVE-2026-59933).\n\nIt fires during file-type detection, so even .xlsx-only apps are exposed.\n\nNo code execution. Patch now.", "creation_timestamp": "2026-07-23T15:31:30.448626Z"}, {"uuid": "61e40e8a-6961-4122-bfd1-b625a0f58a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59933", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-xh5m-36r6-47m3", "content": "", "creation_timestamp": "2026-07-23T16:35:05.029196Z"}, {"uuid": "6ba6d957-4a2f-488a-bcd5-28b3e6922244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3twcref2o", "content": "\ud83d\udfe0 CVE-2026-59933 - High (7.5)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59933/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:29.484049Z"}, {"uuid": "5390d3ae-d14f-4ea2-a89b-45e390bf3bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5egxnv72i", "content": "CVE-2026-59933 - PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion\nCVE ID : CVE-2026-59933\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In version...", "creation_timestamp": "2026-07-28T19:27:37.133052Z"}]}