{"vulnerability": "CVE-2026-79752", "sightings": [{"uuid": "b808789e-d3d0-4241-bcd6-4193aa8edc58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq265jueo2j", "content": "\ud83d\udea8 CVE-2026-79752 \u2014 CVSS 9.2 CRITICAL\n\nCakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, Functio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79752\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:11:12.163395Z"}, {"uuid": "9af6b5bc-4edf-47f7-b4c0-f91de8991546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4vosc5k2t", "content": "CVE-2026-79752 - cakephp\nVersions of CakePHP before 4.5.12, 4.6.5, 5.1.9, 5.2.14 and 5.3.7 let specially crafted input be turned into part of a database query without proper cleaning. This could let a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cakephp #CVE #infosec", "creation_timestamp": "2026-09-17T17:00:11.888585Z"}, {"uuid": "5936f516-d0f4-4204-8856-9f22d2dd19ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79752", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117289453047176290", "content": "CVE-2026-79752: CakePHP <4.5.12, 4.6.0-4.6.4, 5.0.0-5.1.8, 5.2.0-5.2.13, 5.3.0-5.3.6 FunctionsBuilder SQL injection risk! CRITICAL severity \u2014 patch ASAP or avoid user input in $dataType, $part, $unit. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-injection-cve-2026-79752-16b04fe3ca4b5527 #OffSeq #CakePHP #SQLi #Infosec", "creation_timestamp": "2026-09-18T01:30:24.004434Z"}, {"uuid": "aee7f2c2-d207-4877-9fc7-7b3ef2dc6342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79752", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvqzg5j6732y", "content": "CakePHP FunctionsBuilder has a CRITICAL SQL injection flaw (CVE-2026-79752). Impact: unauthorized SQL execution. Patch to 4.5.12/4.6.5/5.1.9/5.2.14/5.3.7 or avoid user input in key params. https://radar.offseq.com/threat/database-cakephp-multiple-methods-in-functionsbuilder-vulnerable-to-sql-inje...", "creation_timestamp": "2026-09-18T01:30:26.115919Z"}]}