{"vulnerability": "cve-2026-1157", "sightings": [{"uuid": "ed8bb3ef-70b6-46ea-b891-5c0339fef326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1157", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115918002947014061", "content": "", "creation_timestamp": "2026-01-18T20:32:35.952066Z"}, {"uuid": "987d4e3e-3b02-4db2-9cb5-12f473520f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1157", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcrvbdoy7p2y", "content": "", "creation_timestamp": "2026-01-19T14:50:08.985198Z"}, {"uuid": "8110a58a-14e7-4d5f-b34c-82e4973802ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1157", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcs74u6rpn2v", "content": "", "creation_timestamp": "2026-01-19T17:46:35.280876Z"}, {"uuid": "97d15632-b479-4fe9-9e03-35e32a613587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11572", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mntmrdn7vf2n", "content": "\ud83d\udfe0 CVE-2026-11572 - High (8.8)\n\nVersions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11572/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T07:00:29.903181Z"}, {"uuid": "c8c7e737-1b26-4761-b36f-c03645f4aefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11572", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntptxvrps25", "content": "CVE-2026-11572 - degit Command Injection\nCVE ID : CVE-2026-11572\n \n Published : June 9, 2026, 6:16 a.m. | 18\u00a0minutes ago\n \n Description : Versions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command Injection due to improper sanitisation of...", "creation_timestamp": "2026-06-09T07:55:38.244376Z"}, {"uuid": "ef19f1ac-e2e1-4c50-aebc-6c89d35c8620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11576", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monbwwekfi2r", "content": "CVE-2026-11576 - eclipse-threadx NetX Duo HTTP Server fx_file_close Uninitialized Handle Vulnerability\nCVE ID : CVE-2026-11576\n \n Published : June 19, 2026, 8:27 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refac...", "creation_timestamp": "2026-06-19T11:55:58.261413Z"}, {"uuid": "c54161e3-5545-4798-8890-bd13942cda7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11570", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplc7rj3hx2u", "content": "CVE-2026-11570 - User Submitted Posts\nCVE ID : CVE-2026-11570\n \n Published : 1 Jul 2026, 6 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured dis...", "creation_timestamp": "2026-07-01T10:20:47.288317Z"}, {"uuid": "54c9dd80-b736-4220-adf0-646cd9e69a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11570", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgx5o7262o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11570 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 User Submitted Posts: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress\n\n\n\nhttps://kripta.biz/posts/AE3A68A8-EE22-42E1-BDD4-CC4A97839B27", "creation_timestamp": "2026-07-01T11:45:26.826385Z"}, {"uuid": "df2e76ee-d618-495d-ba84-d9994667f09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11578", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpnmjyq3om26", "content": "CVE-2026-11578 - Fluent Forms\nCVE ID : CVE-2026-11578\n \n Published : July 2, 2026, 6 a.m. | 1\u00a0hour, 46\u00a0minutes ago\n \n Description : The Fluent Forms WordPress plugin before 6.2.5 does not properly restrict the deletion of form submission entries to the forms a restricted Manag...", "creation_timestamp": "2026-07-02T08:30:48.034798Z"}, {"uuid": "f7ed9e0d-b693-47ce-be51-76d5b6826a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11578", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotr7dht427", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11578 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Fluent Forms: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress\n\n\n\nhttps://kripta.biz/posts/5C8C505B-EE02-47DB-995A-B48CF3C1E3D0", "creation_timestamp": "2026-07-02T20:12:45.249999Z"}, {"uuid": "1dbfc86b-1cd2-4c3f-bc9e-c14ed8b9b93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq762jnkum25", "content": "CVE-2026-11571 - Everest Forms\nCVE ID : CVE-2026-11571\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : The Everest Forms WordPress plugin before 3.5.0 does not reliably delete temporary CSV files generated during email-notification processing and leave...", "creation_timestamp": "2026-07-09T07:59:31.186900Z"}, {"uuid": "be91a41f-3087-47de-bec9-16394bd6e8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11571", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6wauter26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11571 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Everest Forms: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress\n\n\n\nhttps://kripta.biz/posts/B42EA900-CA22-4030-8345-441C9A209161", "creation_timestamp": "2026-07-09T17:47:41.145638Z"}, {"uuid": "49666b64-ab99-4cd5-8424-114fabc04eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11579", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqoci4zafs2x", "content": "CVE-2026-11579 - Kali Forms\nCVE ID : CVE-2026-11579\n \n Published : July 15, 2026, 6:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : The Kali Forms \u2014 Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not verify that a file upload is made against an ...", "creation_timestamp": "2026-07-15T08:28:38.509217Z"}, {"uuid": "6ba48508-ddb4-401b-b4cf-29a887b910c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqtcsizabo2x", "content": "CVE-2026-11575 - PhonePe Payment Solutions\nCVE ID : CVE-2026-11575\n \n Published : July 17, 2026, 7:16 a.m. | 20\u00a0minutes ago\n \n Description : The PhonePe Payment Solutions WordPress plugin before 3.1.0 does not properly verify the authenticity of incoming payment callbacks: the...", "creation_timestamp": "2026-07-17T08:17:45.556942Z"}, {"uuid": "66ec6fc9-a9d3-4f7e-8026-110e78a44f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqytjwb6uq2m", "content": "\ud83d\udfe0 CVE-2026-11575 - High (7.5)\n\nThe PhonePe Payment Solutions WordPress plugin before 3.1.0 does not properly verify the authenti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11575/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T13:00:30.081776Z"}]}