{"vulnerability": "CVE-2026-7510", "sightings": [{"uuid": "afec1ada-23c7-4c78-91ab-de7d260f12d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkr3yupog42k", "content": "CVE-2026-7510 - OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization\nCVE ID : CVE-2026-7510\n \n Published : April 30, 2026, 11:16 p.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnera...", "creation_timestamp": "2026-05-01T02:39:33.507426Z"}, {"uuid": "a80938f9-d4b4-46c0-878e-0665e3566317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75105", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtclnphkfn2b", "content": "phpIPAM, the open-source tool teams use to track their IP addresses, has a flaw (CVE-2026-75105): one temporary share link lets a stranger read every IP record across all your subnets.\n\nAffects versions through 1.8.1.\n\nFix: update to 1.8.2, then revoke old share links.", "creation_timestamp": "2026-08-17T20:56:27.922453Z"}, {"uuid": "e44e932f-203f-4c3e-9e47-5ac18d41ebcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75106", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcryw3sgr2y", "content": "CVE-2026-75106 - opnform\nOpnForm's submission secrets can be compromised by an attacker, allowing them to read or modify other respondents' submissions. This is a significant security risk for any organization using\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opnform #CVE #infosec", "creation_timestamp": "2026-08-17T22:50:05.781968Z"}, {"uuid": "9ab50bd8-9b77-402f-9bcd-c0a6eaa26131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75103", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtdk4e2vr32b", "content": "\ud83d\udfe0 CVE-2026-75103 - High (8.8)\n\nCrawlab fails to verify user ownership or administrative role on the password-change endpoint, al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75103/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T06:01:31.735575Z"}, {"uuid": "44428ce8-76e8-4c82-867f-72ac9454af4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtdk4kt67w2t", "content": "\ud83d\udfe0 CVE-2026-75105 - High (7.5)\n\nphpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a tempora...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T06:01:38.670140Z"}, {"uuid": "4e93263f-0e8a-41d2-bd4c-5cb287214d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75106", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtdk4rqvah27", "content": "\ud83d\udd34 CVE-2026-75106 - Critical (9.1)\n\nOpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75106/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T06:01:46.202410Z"}, {"uuid": "35d964f8-27a2-492b-a9dd-8492dee489b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75103", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtieaz3mql25", "content": "CVE-2026-75103\nCrawlab's password change feature is vulnerable to unauthorized access. This means that an attacker can change any account's password, potentially gaining control of the account. To fix this, update Crawlab to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T04:00:05.787799Z"}]}