{"vulnerability": "CVE-2026-6691", "sightings": [{"uuid": "bf3c2f0e-71f4-4412-bc22-60d25b1c7640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6691", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76i65dst2g", "content": "\ud83d\udfe0 CVE-2026-6691 - High (7.8)\n\nThe MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username cano...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6691/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:01:11.423021Z"}, {"uuid": "e72356ea-705a-4e44-99b6-9c74025b02b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6691", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml7ccpbv4m2c", "content": "CVE-2026-6691 - MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow\nCVE ID : CVE-2026-6691\n \n Published : May 6, 2026, 3:08 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username cano...", "creation_timestamp": "2026-05-06T18:09:42.311394Z"}, {"uuid": "52a775a4-1b9f-4db1-a5d2-1aa07e6a43ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6691", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml7dgoy2l62r", "content": "CVE-2026-6691 - MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow\nCVE ID : CVE-2026-6691\n \n Published : May 6, 2026, 3:08 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username cano...", "creation_timestamp": "2026-05-06T18:29:49.965348Z"}, {"uuid": "0a77b1cd-77f8-4ac1-8338-211f928713e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66916", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/grd7qg5lacxpt", "content": "CVE-2026-66916 - Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery\nCVE ID : CVE-2026-66916\n \n Published : Aug. 22, 2026, 11:16 a.m. | 43\u00a0minutes ago\n \n Description : Joomla Extension - joomgalleryfriends.net - Passwor...", "creation_timestamp": "2026-08-22T12:06:57.699447Z"}, {"uuid": "fdd4096d-c0e7-4899-a8e8-ccc574a906ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66915", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mspvpwstsn2n", "content": "CVE-2026-66915 - fabrik extension for joomla\nThe Fabrik extension for Joomla, available from fabrikar.com, has a vulnerability that allows an attacker to run malicious code without needing a login. This could potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T10:36:05.510526Z"}, {"uuid": "8a3f1963-46e3-434d-a1a3-fc57460c6811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66915", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mspwps54m32i", "content": "Fabrik for Joomla 4.6.7 fixes an unauthenticated RCE. CVE-2026-66915, CVSS 10.0, all versions up to 4.6.6 affected.\n\nThe fix installs on Joomla 4.2 to 5.x only, so J3 and J6 sites are stuck.\n\nmysites.guru/blog/fabrik-...", "creation_timestamp": "2026-08-10T10:53:53.974971Z"}, {"uuid": "711fc9e1-d498-4484-835f-131977a637f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66915", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mssb3nmten2g", "content": "Fabrik for Joomla 4.6.7 fixes an unauthenticated RCE. CVE-2026-66915, CVSS 10.0, all versions up to 4.6.6 affected.\n\nThe fix installs on Joomla 4.2 to 5.x only, so J3 and J6 sites are stuck.\n\nmysites.guru/blog/fabrik-...", "creation_timestamp": "2026-08-11T09:04:48.421214Z"}, {"uuid": "4ab9014f-b957-487c-8ea1-699c969f4122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66914", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/403", "content": "CVE-2026-66914\nJoomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot.\npayload: site.com/index.php?option=com_cck&task=download&file={payload}\nproof: \nhttps://www.vaihingen.events/index.php?option=com_cck&task=download&file=tmp/../../../../etc/passwd\nopen passwd file after downloaded with notepad", "creation_timestamp": "2026-08-11T22:00:03.478572Z"}, {"uuid": "3210e26a-a54d-4b87-81de-de2a02a5c0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66914", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/403", "content": "CVE-2026-66914\nJoomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot.\npayload: site.com/index.php?option=com_cck&task=download&file={payload}\nproof: \nhttps://www.vaihingen.events/index.php?option=com_cck&task=download&file=tmp/../../../../etc/passwd\nopen passwd file after downloaded with notepad", "creation_timestamp": "2026-08-12T00:00:07.003952Z"}, {"uuid": "d250db21-363d-4fe6-9efc-d33990730672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66915", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mttetieesc2n", "content": "CVE-2026-66915 (CVSS 10.0): unauth RCE in Fabrik for Joomla via the calc element. Affects 1.0.0-4.6.8; 4.6.7 & 4.6.8 did NOT fix it. Update to 4.7.2. Query: (fingerprints.technologies.name=\"Joomla\" or web.html~\"Joomla! - Open Source Content Management\") and fingerprints.tags!=\"Honeypot\"", "creation_timestamp": "2026-08-24T13:09:41.381885Z"}, {"uuid": "7768c760-de40-4141-be86-5a97f8cb9710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66916", "type": "seen", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-24T21:00:04.352189Z"}, {"uuid": "dfbb0583-cc7f-4cbe-ac9e-5cb764bbbdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66917", "type": "seen", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-24T21:00:04.643012Z"}, {"uuid": "85610258-f564-4637-af5f-bed2e138113b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66917", "type": "seen", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-24T21:00:05.500805Z"}, {"uuid": "a3212937-6f85-42fd-afcd-adb828ffdd06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66916", "type": "seen", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-24T21:00:05.948382Z"}, {"uuid": "e78633ee-94e3-4231-ba92-954d7d227815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66916", "type": "published-proof-of-concept", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-25T00:00:08.049865Z"}, {"uuid": "73bba622-2ccb-45ba-b1a2-c7b2dcd2cd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66917", "type": "published-proof-of-concept", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-25T00:00:08.100483Z"}, {"uuid": "9c470a01-48c4-45b9-abd3-fb2cf5e315f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66917", "type": "published-proof-of-concept", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-25T00:00:09.317934Z"}, {"uuid": "be798b53-5257-447c-aab6-a088ce1fca1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66916", "type": "published-proof-of-concept", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-25T00:00:09.495899Z"}, {"uuid": "af832903-025d-416f-8c6f-0fd92abaebc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66917", "type": "seen", "source": "https://t.me/GithubRedTeam/99370", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66917\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-23 15:22:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T17:00:03.719723Z"}, {"uuid": "b8682624-a147-4018-ad0e-fd11611dc12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66917", "type": "seen", "source": "https://t.me/GithubRedTeam/99370", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66917\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-23 15:22:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:07.331547Z"}, {"uuid": "26e530a1-5e14-4e4c-9218-3fdaa7edbfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66918", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpnvsfk6c2q", "content": "CVE-2026-66918 - DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons\nCVE ID : CVE-2026-66918\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node styl...", "creation_timestamp": "2026-07-28T14:50:59.933871Z"}, {"uuid": "db378261-86ed-45e1-b05e-c5ccef2f0cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpoub4ve22s", "content": "CVE-2026-66913 - Zip Bomb in Lookyloo Capture Upload Allows Denial of Service\nCVE ID : CVE-2026-66913\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and com...", "creation_timestamp": "2026-07-28T15:08:01.804988Z"}, {"uuid": "ada8036a-3338-45ad-b665-c60d23de95ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66919", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrppo3g6oa2e", "content": "CVE-2026-66919 - Stored DOM-Based Cross-Site Scripting in Node Modal Headers\nCVE ID : CVE-2026-66919\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : Pivotick contains a cross-site scripting vulnerability in the inspect and edit node modals. No...", "creation_timestamp": "2026-07-28T15:22:28.163150Z"}]}