{"vulnerability": "CVE-2026-7975", "sightings": [{"uuid": "b7d535eb-bf95-4454-8163-2630af6d647a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7975", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260507", "content": "", "creation_timestamp": "2026-05-06T18:00:00.000000Z"}, {"uuid": "39c8734d-4ab6-4baf-8d39-18bd2ab97da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7975", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260508", "content": "", "creation_timestamp": "2026-05-07T18:00:00.000000Z"}, {"uuid": "d42a71ef-d529-4ffc-a847-9e40ed0215c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muflpxwnn226", "content": "\ud83d\udfe0 CVE-2026-79750 - High (7.7)\n\nMCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79750/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-31T19:00:55.574955Z"}, {"uuid": "39c22572-4524-4454-9227-a6bf5e7ef6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbo7hk32h", "content": "\ud83d\udfe0 CVE-2026-79755 - High (8)\n\nNuclio is a \"Serverless\" framework for Real-Time Events and Data Processing. Prior to version 1.1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79755/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T18:00:26.494022Z"}, {"uuid": "d4f7c615-a425-4500-aa1d-42017e54404f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5duznc7mbj25r", "content": "CVE-2026-79755 - Nuclio Dashboard OS Command Injection Vulnerability\nCVE ID : CVE-2026-79755\n \n Published : Sept. 2, 2026, 5:17 p.m. | 47\u00a0minutes ago\n \n Description : Nuclio is a \"Serverless\" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the N...", "creation_timestamp": "2026-09-02T18:54:25.703816Z"}, {"uuid": "a471abb1-bb74-4448-be9d-eeccc2e11c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i42qnatmaclvb", "content": "CVE-2026-79756 - Nuclio Dashboard OS Command Injection\nCVE ID : CVE-2026-79756\n \n Published : Sept. 2, 2026, 5:18 p.m. | 47\u00a0minutes ago\n \n Description : Nuclio is a \"Serverless\" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenti...", "creation_timestamp": "2026-09-02T19:02:25.671323Z"}, {"uuid": "b808789e-d3d0-4241-bcd6-4193aa8edc58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq265jueo2j", "content": "\ud83d\udea8 CVE-2026-79752 \u2014 CVSS 9.2 CRITICAL\n\nCakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, Functio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79752\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:11:12.163395Z"}, {"uuid": "9af6b5bc-4edf-47f7-b4c0-f91de8991546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4vosc5k2t", "content": "CVE-2026-79752 - cakephp\nVersions of CakePHP before 4.5.12, 4.6.5, 5.1.9, 5.2.14 and 5.3.7 let specially crafted input be turned into part of a database query without proper cleaning. This could let a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cakephp #CVE #infosec", "creation_timestamp": "2026-09-17T17:00:11.888585Z"}, {"uuid": "5936f516-d0f4-4204-8856-9f22d2dd19ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79752", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117289453047176290", "content": "CVE-2026-79752: CakePHP <4.5.12, 4.6.0-4.6.4, 5.0.0-5.1.8, 5.2.0-5.2.13, 5.3.0-5.3.6 FunctionsBuilder SQL injection risk! CRITICAL severity \u2014 patch ASAP or avoid user input in $dataType, $part, $unit. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-injection-cve-2026-79752-16b04fe3ca4b5527 #OffSeq #CakePHP #SQLi #Infosec", "creation_timestamp": "2026-09-18T01:30:24.004434Z"}, {"uuid": "aee7f2c2-d207-4877-9fc7-7b3ef2dc6342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvqzg5j6732y", "content": "CakePHP FunctionsBuilder has a CRITICAL SQL injection flaw (CVE-2026-79752). Impact: unauthorized SQL execution. Patch to 4.5.12/4.6.5/5.1.9/5.2.14/5.3.7 or avoid user input in key params. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-inje...", "creation_timestamp": "2026-09-18T01:30:26.115919Z"}, {"uuid": "cb3239bf-f538-46e7-966d-ee710159931d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvrfbcyt6v2h", "content": "Daily IT Security Digest \u2014 2026-09-18\n[infosec.exchange/@beyondmachines1](https://infosec.exchange/@beyondmachines1/117279901169199565)\n\n## 8. Additional Notable Vulnerabilities\n\n- **CakePHP SQL Injection** (CVE-2026-79752, CRITICAL): Versions 4.x through 5.3.x vulnerable in FunctionsBuilder. Avoid", "creation_timestamp": "2026-09-18T05:02:28.439180Z"}, {"uuid": "9ad5fb07-874a-41cc-a9b7-3bf7826899d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "content": "", "creation_timestamp": "2026-09-22T07:00:08.925215Z"}, {"uuid": "dd1d7897-becd-4e0d-b1e6-e1cf8e4340b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "content": "", "creation_timestamp": "2026-09-22T07:00:10.349421Z"}, {"uuid": "221773a4-d85f-4598-bc09-cf6f3314ec2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "published-proof-of-concept", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "content": "", "creation_timestamp": "2026-09-23T00:00:12.505532Z"}, {"uuid": "d2e3d131-613b-4e9c-bb64-a92c4646b928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "published-proof-of-concept", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "content": "", "creation_timestamp": "2026-09-23T00:00:14.323721Z"}, {"uuid": "6693ab0a-51c1-4b02-bb94-a9d7f456a978", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79756", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/29fc720b-8bbf-423f-932b-1423f4349a5f", "content": "", "creation_timestamp": "2026-09-23T12:00:31.951496Z"}]}