{"vulnerability": "CVE-2026-6848", "sightings": [{"uuid": "b9633009-842b-421d-ab94-1ee08f3a2f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6848", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk3kxbqt2x2q", "content": "", "creation_timestamp": "2026-04-22T13:08:32.147202Z"}, {"uuid": "e250a1bb-43f2-4e29-9f8e-8e58d3e6644b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68480", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117050295771308994", "content": "We have just added an important vulnerability affecting Linux Kernel (CVE-2026-68480) https://vuldb.com/vuln/386705", "creation_timestamp": "2026-08-06T19:49:33.274564Z"}, {"uuid": "bc2b79f2-c4f0-4b96-9731-9621b94aadc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68481", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/f2g3b6tnd6j4e", "content": "CVE-2026-68481: Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider", "creation_timestamp": "2026-08-06T21:32:12.376312Z"}, {"uuid": "c18eb2e8-b62a-456f-a19a-d6be4c7ce606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-68480", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-02T04:45:12.569363Z"}, {"uuid": "0bd91e9a-9d37-48df-9899-4d90f7ce5d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68484", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4mq2hgmx2p", "content": "CVE-2026-68484 - sage ar automation\nThe Cash Collect system\u2019s Sage AR Automation interface does not correctly check who is using its admin functions. As a result, users with only basic access can create new\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sage #CVE #infosec", "creation_timestamp": "2026-09-09T22:50:04.855800Z"}, {"uuid": "5386e092-cc70-4514-93b8-21c5a5caa30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68488", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6luqxvi325", "content": "CVE-2026-68488 - plesk\nPlesk on your server has a timing flaw that can let someone with local access take control of files and directories, eventually giving them full administrator rights. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plesk #webpros #CVE #infosec", "creation_timestamp": "2026-09-10T17:40:08.993429Z"}, {"uuid": "7bc171e7-7bd6-4b8a-9546-36f017e2418f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68487", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6mgms5dz2y", "content": "CVE-2026-68487 - plesk\nThe backup feature in Plesk can be tricked by a signed-in customer to place files anywhere on the server, including system areas that run with full administrator rights. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plesk #webpros #CVE #infosec", "creation_timestamp": "2026-09-10T17:50:08.054110Z"}, {"uuid": "41b92a8c-dc14-47df-85e9-d59a4364f569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68487", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6niqwuew22", "content": "\ud83d\udea8 CVE-2026-68487 \u2014 CVSS 9.9 CRITICAL\n\nPath traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-68487\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T18:09:13.381242Z"}, {"uuid": "7c4f6382-e0b1-42b3-9c07-9d40cfc7401a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68488", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6nj22xqz2g", "content": "\ud83d\udea8 CVE-2026-68488 \u2014 CVSS 9.9 CRITICAL\n\nA Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes l...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-68488\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T18:09:22.589441Z"}, {"uuid": "1fc49837-68e2-4b76-bab4-88ee4ccf7efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68488", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mveuipcuoo23", "content": "Nieuwe ernstige kwetsbaarheid ontdekt in Plesk Backup Manager, die roottoegang k\n\nEen kritieke beveiligingskwetsbaarheid, gedefinieerd als CVE-2026-68488, is ontdekt in de Plesk Backup Manager. Deze kwetsbaarheid, een 'symlink race condition' tijdens het herstellen van abonnementinhoud, stel...", "creation_timestamp": "2026-09-13T05:30:26.733385Z"}]}