{"vulnerability": "CVE-2026-72709", "sightings": [{"uuid": "bf4fe099-91b1-4107-bf6a-fed6c1453ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eezs3rf76rjy6", "content": "CVE-2026-72709 - SPIP\nCVE ID : CVE-2026-72709\n \n Published : 11. September 2026 16:38 | 19\u00a0Minuten ago\n \n Description : SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauthenticated att...", "creation_timestamp": "2026-09-11T17:18:00.330922Z"}, {"uuid": "35154c25-29fd-4ea9-9a74-684f54f1a747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rspmhl2b", "content": "CVE-2026-72709 - spip\nVersions of SPIP prior to 4.4.18 let an attacker who can get a special code reset the password of any account, including the admin. Because the system does not check if the user is allowed to do\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-09-11T17:30:09.419599Z"}, {"uuid": "b7d16834-05cb-4d0a-85e6-faf60defbf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvb5wzfnju2n", "content": "\ud83d\udea8 CVE-2026-72709 \u2014 CVSS 9.3 CRITICAL\n\nSPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72709\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T18:08:50.803593Z"}]}