{"vulnerability": "CVE-2026-6229", "sightings": [{"uuid": "f85aa036-8128-498e-8218-2fa762d83d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6229", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ml5nxwwnu32t", "content": "CVE-2026-6229 royal-elementor-addons (CVSS Score 7.2) #WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #wordpresssecurity #mashing #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T02:33:09.285383Z"}, {"uuid": "9c448849-8a9c-428c-871a-bd05f5032050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6229", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml5nxwigtp2q", "content": "CVE-2026-6229 royal-elementor-addons (CVSS Score 7.2) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T02:33:06.221050Z"}, {"uuid": "8f63e90e-cd93-43f0-a6a2-e3ca33544cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62292", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6fytcebjkfddg", "content": "CVE-2026-62292 - libheif: Out-of-bounds read in uncompressed unci tile range slicing\nCVE ID : CVE-2026-62292\n \n Published : Aug. 18, 2026, 9:20 p.m. | 11\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafte...", "creation_timestamp": "2026-08-18T22:52:56.686039Z"}, {"uuid": "5601f0c0-f32b-4f84-ae30-2cc921891046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/62qlbwy56xq6j", "content": "CVE-2026-62291 - libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions\nCVE ID : CVE-2026-62291\n \n Published : Aug. 18, 2026, 9:21 p.m. | 10\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file f...", "creation_timestamp": "2026-08-18T22:58:57.395652Z"}, {"uuid": "b363269f-f1da-4d59-be18-e2bb8222d84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7a4ktc32s", "content": "CVE-2026-62294 - Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot \"Open With\"\nCVE ID : CVE-2026-62294\n \n Published : July 15, 2026, 2:20 p.m. | 56\u00a0minutes ago\n \n Description : Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, t...", "creation_timestamp": "2026-07-15T17:03:08.120817Z"}, {"uuid": "95cc9c8c-f855-42f2-a8a1-4963011058d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw34zsflf2p", "content": "CVE-2026-62299: CoreDNS Vulnerability Is a Recipe for Remote DoS #CVE2026 #CoreDNS #Cybersecurity", "creation_timestamp": "2026-07-18T10:38:28.254240Z"}, {"uuid": "b379352e-9f88-4d9e-8d7e-ed5f37d23dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw355eeak2l", "content": "CVE-2026-62299 Exposes CoreDNS to Remote DoS via EDNS0 Weakness #CVE2026 #CoreDNS #DoSAttack", "creation_timestamp": "2026-07-18T10:38:31.850495Z"}, {"uuid": "5a3de123-c3e8-4d9a-b028-7fe9232f5157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35aculb2y", "content": "CVE-2026-62299: CoreDNS Vulnerability Exposes Users to Remote DoS Risks #CVE2026 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:38:34.944034Z"}, {"uuid": "69752624-8d0c-4ce4-93b1-e642b6f7377f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35cxqe42w", "content": "CVE-2026-62299: CoreDNS Vulnerability Highlights Risky Server Configurations #CVE202662299 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:38:37.925150Z"}, {"uuid": "f953d482-0894-4572-81a8-660b3e5d6c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35ftrmk2m", "content": "CVE-2026-62299: CoreDNS's Rewrite Plugin Elicits Panic, But at What Cost? #CVE2026 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:38:40.631695Z"}, {"uuid": "f0653535-5440-4350-ab54-1c326eb97f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35irbmn2j", "content": "CVE-2026-62299 CoreDNS: Critical Response or Overblown Risk? #CVE202662299 #CoreDNS #Cybersecurity", "creation_timestamp": "2026-07-18T10:38:43.765546Z"}, {"uuid": "eb6fecf6-7a05-4475-8194-439303d3e4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62294", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrdmtg2tub2n", "content": "[Backport release-26.05] flameshot: toctou symlink attack fix (CVE-2026-62294)\n\nhttps://github.com/NixOS/nixpkgs/pull/544600\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2209\n\n#security", "creation_timestamp": "2026-07-23T19:59:49.061123Z"}, {"uuid": "dfe356dd-7fec-4fbd-abe3-5691874999c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6229", "type": "seen", "source": "https://t.me/shimiscyberworld/1125", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-6229 \u2014 CVSS 7.2\nCVE-2026-6229: Royal Elementor Addons Plugin Vulnerable to SSRF\n\nCVE-2026-6229 \u2014 The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057. This is due to insufficient validation of user-supplied URLs in\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #server_side_request_forgery\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-6229 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:19.873742Z"}, {"uuid": "5caf148b-0bcd-4824-b72e-b0b9b5d7985a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6229", "type": "seen", "source": "https://t.me/shimiscyberworld/1125", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-6229 \u2014 CVSS 7.2\nCVE-2026-6229: Royal Elementor Addons Plugin Vulnerable to SSRF\n\nCVE-2026-6229 \u2014 The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057. This is due to insufficient validation of user-supplied URLs in\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #server_side_request_forgery\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-6229 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:08.669887Z"}]}