{"vulnerability": "CVE-2026-6736", "sightings": [{"uuid": "af67fc9d-4a22-4717-9a88-7e5f774ee0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67363", "type": "seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-02T01:00:15.247034Z"}, {"uuid": "08538d8b-d9eb-4164-b1c5-9ccd846bfc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlclnkbewn2e", "content": "CVE-2026-6736 - Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider\nCVE ID : CVE-2026-6736\n \n Published : May 7, 2026, 10:16 p.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : A...", "creation_timestamp": "2026-05-08T01:34:49.133715Z"}, {"uuid": "9cd57845-0d5d-459d-a415-63b5abd1a8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67364", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117122415059936959", "content": "CVE-2026-67364 (CVSS 10): CRITICAL pre-auth PHP code injection in Balbooa Forms for Joomla (v1.0.0 \u2013 2.4.3.1). Exploitable via unescaped query param in custom-PHP handler. Update to 2.4.3.2+ now. https://radar.offseq.com/threat/cve-2026-67364-cwe-94-improper-control-of-generation-of-code-code-injection-in-balbooacom-balbooa-36f88c0efc17ca75 #OffSeq #Joomla #CVE202667364 #WebSecurity", "creation_timestamp": "2026-08-19T13:30:27.877489Z"}, {"uuid": "20bb8f07-6077-4d69-ba36-8fb149e643b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67364", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtgto2pvl72f", "content": "Balbooa Forms for Joomla (v1.0.0 \u2013 2.4.3.1) hit by CRITICAL CVE-2026-67364. PHP code injection allows unauthenticated code execution. Update urgently! \ud83d\udea8 https://radar.offseq.com/threat/cve-2026-67364-cwe-94-improper-control-of-generation-of-code-code-injection-in-balbooacom-balbooa-36f88c0efc17ca...", "creation_timestamp": "2026-08-19T13:30:28.595119Z"}, {"uuid": "42199501-9da6-4613-8148-7d6ec745c2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5oc52rw6ldhq4", "content": "CVE-2026-67362 - Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5\nCVE ID : CVE-2026-67362\n \n Published : Aug. 21, 2026, 7:19 p.m. | 20\u00a0minutes ago\n \n Description : Joomla Extension - j2commerce.com - Open r...", "creation_timestamp": "2026-08-21T20:12:39.782171Z"}, {"uuid": "b7a369c3-70df-481c-a253-1dedb4ddb7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67361", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hsl4hpxdlcedh", "content": "CVE-2026-67361 - Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5\nCVE ID : CVE-2026-67361\n \n Published : Aug. 21, 2026, 7:23 p.m. | 16\u00a0minutes ago\n \n Description : Joomla Extens...", "creation_timestamp": "2026-08-21T20:26:39.938216Z"}, {"uuid": "994d4930-8c5c-4c2a-838b-8e17dfee1936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67364", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtgvq7w4dr2e", "content": "\ud83d\udea8 CVE-2026-67364 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - CWE-94 / CWE-95 |...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67364\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T14:07:33.456982Z"}, {"uuid": "ce4361fb-4e29-4489-bce2-865c3a48639b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67364", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtgza73sqt2b", "content": "CVE-2026-67364 - balbooa forms extension for joomla\nA security issue affects Joomla's Balbooa Forms extension. An attacker can inject malicious PHP code without needing a password, potentially leading to data theft and system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T15:10:11.321976Z"}, {"uuid": "a5ef9abc-f4ee-4952-95fd-e0a99fb8c113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67365", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt32hi3mp32p", "content": "CVE-2026-67365 - icagenda extension for joomla\nThe Joomla icagenda.com extension has a security flaw that allows attackers to execute unauthorized database queries without logging in. This can lead to sensitive data exposure\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-14T21:00:06.644109Z"}, {"uuid": "ce5f6bfe-9c7f-4177-a74c-d3cc84d05ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67365", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117096581361904284", "content": "CVE-2026-67365: Unauthenticated SQL injection in Joomla iCagenda (4.0.0 \u2013 4.0.11). Exploitable via com_ajax, no auth needed. CRITICAL (CVSS 9.2). Restrict endpoint & monitor for attacks. https://radar.offseq.com/threat/cve-2026-67365-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-8f2e4ed9eff903b1 #OffSeq #CVE202667365 #Joomla #SQLi", "creation_timestamp": "2026-08-15T00:00:35.892191Z"}, {"uuid": "81a4dc60-d45a-495b-9daa-6d1e0f18a125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67365", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3ekasmhf2t", "content": "Joomla iCagenda 4.0.0 \u2013 4.0.11 faces CRITICAL SQL injection (CVSS 9.2). No auth needed to exploit via com_ajax. Restrict access, monitor for threats, await vendor patch. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-67365-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-...", "creation_timestamp": "2026-08-15T00:00:38.421775Z"}, {"uuid": "133b30f8-631e-46ea-832c-2fab14c8391c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67363", "type": "seen", "source": "https://t.me/GithubRedTeam/100404", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-67363-67364\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Lulztigre\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 18:52:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nBalboa form Command Injection POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-30T21:00:04.842819Z"}, {"uuid": "e17b6411-dd0b-4e19-879b-7fa201ac9ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67363", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100404", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-67363-67364\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Lulztigre\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 18:52:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nBalboa form Command Injection POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T00:00:08.635817Z"}, {"uuid": "f0a52a84-5b6c-4285-b063-0291b0a8e033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67363", "type": "published-proof-of-concept", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-03T00:00:38.983665Z"}]}