{"vulnerability": "CVE-2026-6212", "sightings": [{"uuid": "b84e3194-3673-4836-b5f1-182f9e8f5ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxys6jxz2k", "content": "CVE-2026-6212 - IDOR in Teracity's TeraMIS\nCVE ID : CVE-2026-6212\n \n Published : July 10, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Authorization bypass through User-Controlled key vulnerability in Teracity Software Technologies Inc. TeraMIS allows Privilege Abuse.\n\nTh...", "creation_timestamp": "2026-07-10T20:21:49.357573Z"}, {"uuid": "52dd4789-1562-4bfd-b105-f01f1a102ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6212", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdi4fyxji27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6212 \u0432 Teracity Software: \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u043a\u043b\u044e\u0447\n\n\n\nhttps://kripta.biz/posts/9C6AC80A-02EE-4CC4-9476-04731FFCAE50", "creation_timestamp": "2026-07-11T01:10:10.607139Z"}, {"uuid": "9b811ee9-d85b-4212-a382-594340606834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6212", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdl3vdmjy22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6212 \u0432 Teracity Software: \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u043a\u043b\u044e\u0447\n\n\n\nhttps://kripta.biz/posts/3F0D2F1D-DAB2-4D26-B190-51D5D870336C", "creation_timestamp": "2026-07-11T02:03:34.325340Z"}, {"uuid": "b341ae63-e7d1-478b-a34b-752d09f17dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6212", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqezvaarpw2i", "content": "\ud83d\udfe0 CVE-2026-6212 - High (8.8)\n\nAuthorization bypass through User-Controlled key vulnerability in Teracity Software Technologies ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6212/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T16:01:00.910456Z"}, {"uuid": "9e2e0e42-4b10-4592-a77d-40cd4753bf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62120", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418565745764369", "content": "CVE-2026-62120 WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62120https://patchstack.com/database/wordpress/theme/law-office/vulnerability/wordpress-law-office-theme-3-20-php-object-injection-vulnerability?_s_id=cve#ThemeREX #LawOffice#CVE_2026_62120#bot", "creation_timestamp": "2026-10-10T20:45:27.370353Z"}, {"uuid": "0720dd1d-c59a-4f10-ad08-bf6aff01f920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62123", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418568389853917", "content": "CVE-2026-62123 WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62123https://patchstack.com/database/wordpress/theme/invetex/vulnerability/wordpress-invetex-theme-2-18-php-object-injection-vulnerability?_s_id=cve#ThemeREX #Invetex#CVE_2026_62123#bot", "creation_timestamp": "2026-10-10T20:46:10.694665Z"}, {"uuid": "df98c214-785a-411f-bdc9-7837d607914e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62124", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418571039691208", "content": "CVE-2026-62124 WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62124https://patchstack.com/database/wordpress/theme/n7-golf-club/vulnerability/wordpress-n7-golf-club-sports-events-theme-2-21-php-object-injection-vulnerability?_s_id=cve#ThemeREX #N7|GolfClubSports&Events#CVE_2026_62124#bot", "creation_timestamp": "2026-10-10T20:46:48.131587Z"}, {"uuid": "22a9d999-74c4-4b48-9051-c94d51c277de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62125", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418573690144148", "content": "CVE-2026-62125 WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62125https://patchstack.com/database/wordpress/theme/asia-garden/vulnerability/wordpress-asia-garden-theme-1-3-1-php-object-injection-vulnerability?_s_id=cve#ThemeREX #AsiaGarden#CVE_2026_62125#bot", "creation_timestamp": "2026-10-10T20:47:28.400273Z"}, {"uuid": "c9ccf151-0c37-4ebb-b149-41c284fdf36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62129", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418576348320927", "content": "CVE-2026-62129 WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62129https://patchstack.com/database/wordpress/plugin/creatorlms/vulnerability/wordpress-creator-lms-plugin-1-2-21-arbitrary-file-upload-vulnerability?_s_id=cve#WPFunnels #CreatorLMS#CVE_2026_62129#bot", "creation_timestamp": "2026-10-10T20:48:09.071569Z"}, {"uuid": "dfd7a239-2213-4c16-a07d-055a9567e330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62120", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkifb7a5g2l", "content": "CVE-2026-62120 - law office\nThe Law Office theme for WordPress, versions up to 3.20, lets anyone on the internet send specially crafted data that the site will execute as its own code. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lawoffice #themerex #CVE #infosec", "creation_timestamp": "2026-10-10T22:00:07.353948Z"}, {"uuid": "219eb0c5-d5ce-4e1b-ab0b-5877db50ff97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62120", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkixj7pkp27", "content": "\ud83d\udea8 CVE-2026-62120 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Law Office <= 3.20 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62120\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:10:19.509291Z"}, {"uuid": "ade12325-72c2-4412-9c03-3b23da51bfdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62125", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkiya5cbo2x", "content": "\ud83d\udea8 CVE-2026-62125 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62125\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:10:43.678886Z"}, {"uuid": "d36fa71e-11b5-4050-9233-93d857742bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkix2bpmg2l", "content": "CVE-2026-62123 - invetex\nThe Invetex theme for WordPress (versions up to 2.18) can be accessed by anyone on the internet to insert malicious data that the server will process. This can allow an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#invetex #themerex #CVE #infosec", "creation_timestamp": "2026-10-10T22:10:03.851381Z"}, {"uuid": "3c27baf6-c757-42e6-ba4b-3bb4d3886845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62124", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkix3nbsv2n", "content": "CVE-2026-62124 - n7 | golf club sports & events\nThe Golf Club Sports & Events WordPress theme (versions up to 2.21) can be accessed by anyone on the internet to inject malicious data, which may cause the server to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themerex #CVE #infosec", "creation_timestamp": "2026-10-10T22:10:05.405143Z"}, {"uuid": "9c496ab8-6b85-428a-a806-9798fabc058b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62123", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkixqpeko22", "content": "\ud83d\udea8 CVE-2026-62123 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Invetex <= 2.18 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62123\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:10:27.564928Z"}, {"uuid": "920cfc98-6290-48d8-b214-a766f4c64523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62124", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkixyfrp22w", "content": "\ud83d\udea8 CVE-2026-62124 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62124\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:10:35.693161Z"}, {"uuid": "2f0b9cee-c054-4870-ad63-79e8627e7484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62129", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkiyi4l2x2l", "content": "\ud83d\udea8 CVE-2026-62129 \u2014 CVSS 9.9 CRITICAL\n\nContributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62129\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:10:51.886328Z"}, {"uuid": "01c703ec-495f-456a-b66a-d0da84cb504a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62125", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkjiwpips2x", "content": "CVE-2026-62125 - asia garden\nThe Asia Garden theme for WordPress (versions up to 1.3.1) can be tricked into executing malicious code without needing a login. This could let a bad actor take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#asiagarden #themerex #CVE #infosec", "creation_timestamp": "2026-10-10T22:20:04.123241Z"}, {"uuid": "b4b13e3f-8f3a-42e5-ad12-f916a30b64bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62129", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkjiya3dj27", "content": "CVE-2026-62129 - creator lms\nThe Creator LMS plugin for WordPress (versions up to 1.2.21) lets a user with contributor rights place any file on your server. This could let an attacker add malicious code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#creatorlms #wpfunnels #CVE #infosec", "creation_timestamp": "2026-10-10T22:20:05.657699Z"}]}