{"vulnerability": "cve-2026-1159", "sightings": [{"uuid": "f75a9056-fad9-487d-b11e-3a37bdb3a8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11595", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms6ihzuiz22j", "content": "IBM WebSphere Application Server\u304c\u91cd\u5927\u306aXSS\u304a\u3088\u3073\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306e\u5f71\u97ff\u3092\u53d7\u3051\u308b\n\nIBM\u306f\u3001WebSphere Application Server\u306b\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u516c\u8868\u3057\u305f\u3002\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u4f01\u696d\u74b0\u5883\u304c\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u653b\u6483\u3084\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u653b\u6483\u306e\u5371\u967a\u306b\u3055\u3089\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u7ba1\u7406\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u4fb5\u5bb3\u3057\u3001\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002CVE-2026-11712\u3001CVE-2026-11595\u3001\u304a\u3088\u3073CVE-2026-11708\u3068\u3057\u3066\u7279\u5b9a\u3055\u308c\u305f\u3053\u308c\u3089\u306e...", "creation_timestamp": "2026-08-03T12:25:59.420220Z"}, {"uuid": "fe8ed23e-9c71-461e-a543-7d499f23bf83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11595", "type": "seen", "source": "https://t.me/pphm_HackerNews/1818", "content": "\ud83d\udd34 IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities\n\nIBM has disclosed several security vulnerabilities in its WebSphere Application Server that put enterprise environments at risk of cross-site scripting (XSS) and path-traversal attacks.\n\nThese vulnerabilities could allow attackers to compromise administrative sessions and access sensitive data. The issues, identified as CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, affect widely deployed versions 8.5 and 9.0 of the application server, raising concerns for organizations that rely on WebSphere for critical business applications.", "creation_timestamp": "2026-08-21T23:00:10.515210Z"}, {"uuid": "9ca5dca5-69d4-4157-9612-06ffe8ed9b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpbbyleuz42q", "content": "CVE-2026-11597 - Surbma | Infusionsoft Shortcode\nCVE ID : CVE-2026-11597\n \n Published : June 27, 2026, 6:50 a.m. | 2\u00a0hours, 54\u00a0minutes ago\n \n Description : The Surbma | Infusionsoft Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'infusionso...", "creation_timestamp": "2026-06-27T10:50:08.530311Z"}, {"uuid": "29ee5f87-6d73-4325-bb06-65dce10e39c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11597", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpcbmo3z4j2x", "content": "CVE-2026-11597 surbma-infusionsoft-shortcode (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-27T20:16:08.938620Z"}, {"uuid": "1ead3a7d-901a-4b39-ba6d-bcdce8b178dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11597", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpcbmozjx42z", "content": "CVE-2026-11597 surbma-infusionsoft-shortcode (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #mashing #wpsecurity #atomicedge #potatosecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-27T20:16:09.618984Z"}, {"uuid": "f8e2f9d0-5326-48ed-8eb0-5e878d25cf30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjywr6fnl23", "content": "CVE-2026-11594 - IBM WebSphere Application Server is affected by multiple cross-site scripting vulnerabilities\nCVE ID : CVE-2026-11594\n \n Published : June 30, 2026, 8:50 p.m. | 55\u00a0minutes ago\n \n Description : IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross...", "creation_timestamp": "2026-06-30T22:02:01.372728Z"}, {"uuid": "c53a80ad-6aaf-4d55-a44f-d71c373d3b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11594", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmvgmmvyb2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11594 \u0432 IBM WebSphere Application Server: \u0443\u0433\u0440\u043e\u0437\u0430 XSS \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/2AA947E4-24EE-45F4-A4AF-1542FCD66428", "creation_timestamp": "2026-07-02T01:37:17.691968Z"}, {"uuid": "1322b06f-3e3b-49b8-8b77-cf799d89d65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11592", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpnlnyjks52f", "content": "CVE-2026-11592 email-subscribers (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-02T08:15:07.748754Z"}, {"uuid": "b284fb00-2dfe-4abd-8a39-3ca39c3d20dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11592", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpnmb2b5xh2m", "content": "CVE-2026-11592 - Email Subscribers & Newsletters\nCVE ID : CVE-2026-11592\n \n Published : July 2, 2026, 5:35 a.m. | 2\u00a0hours, 11\u00a0minutes ago\n \n Description : The Email Subscribers & Newsletters \u2013 Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin...", "creation_timestamp": "2026-07-02T08:25:47.569583Z"}, {"uuid": "26730c7a-e697-4c4a-b2b9-e8b7359467c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11595", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:28:13.060787Z"}, {"uuid": "bfce8371-3418-4064-8d1e-048f1aaf672a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11592", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoti7cwcc2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11592 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Email Subscribers & Newsletters: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E84A8E74-8C2F-41D9-BE63-39355A814AA2", "creation_timestamp": "2026-07-02T20:07:42.837913Z"}, {"uuid": "c7817334-7017-4bcc-a305-e85d8d806aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11595", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqc6nyl242q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11595 \u0432 IBM WebSphere Application Server: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\n\nhttps://kripta.biz/posts/1582413E-80AC-49BD-9797-43979E2F3202", "creation_timestamp": "2026-07-03T10:03:28.498676Z"}, {"uuid": "82986b99-15ba-4146-905b-e1cdfea712a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11594", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcaym7v32k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11594 \u0432 IBM WebSphere Application Server: \u0443\u0433\u0440\u043e\u0437\u0430 XSS \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5CDF9310-8A02-4633-BD86-79EE9DC2F03E", "creation_timestamp": "2026-07-03T10:04:47.010103Z"}, {"uuid": "13b2ead5-1f5d-46ca-9101-b4ba288fb3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11595", "type": "seen", "source": "https://t.me/pphm_HackerNews/1818", "content": "\ud83d\udd34 IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities\n\nIBM has disclosed several security vulnerabilities in its WebSphere Application Server that put enterprise environments at risk of cross-site scripting (XSS) and path-traversal attacks.\n\nThese vulnerabilities could allow attackers to compromise administrative sessions and access sensitive data. The issues, identified as CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, affect widely deployed versions 8.5 and 9.0 of the application server, raising concerns for organizations that rely on WebSphere for critical business applications.", "creation_timestamp": "2026-08-22T00:00:26.885942Z"}, {"uuid": "f8748fc7-0b6e-4d1e-b26d-f56045692a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11591", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5i7gwfo22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11591 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Widgets for Google Reviews: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress\n\n\n\nhttps://kripta.biz/posts/6E964AD6-0EA0-4D52-BE34-FEA02A906D13", "creation_timestamp": "2026-07-11T07:32:35.026070Z"}, {"uuid": "2b637cb9-db23-4030-9aaf-e570002f547c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11591", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqe7xzwjop2g", "content": "CVE-2026-11591 - Widgets for Google Reviews\nCVE ID : CVE-2026-11591\n \n Published : July 11, 2026, 5:35 a.m. | 1\u00a0hour, 48\u00a0minutes ago\n \n Description : The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all vers...", "creation_timestamp": "2026-07-11T08:17:13.540286Z"}, {"uuid": "ceaa8d93-ab95-498e-bf7c-9a2612da568e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11594", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqlu5ysskp2o", "content": "\ud83d\udccc CVE-2026-11594 - IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console. https://www.cyberhub.blog/cves/CVE-2026-11594", "creation_timestamp": "2026-07-14T09:07:07.124840Z"}, {"uuid": "81ec44f1-165d-4128-b04b-33dc523413ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11595", "type": "seen", "source": "https://t.me/pphm_HackerNews/1818", "content": "\ud83d\udd34 IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities\n\nIBM has disclosed several security vulnerabilities in its WebSphere Application Server that put enterprise environments at risk of cross-site scripting (XSS) and path-traversal attacks.\n\nThese vulnerabilities could allow attackers to compromise administrative sessions and access sensitive data. The issues, identified as CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, affect widely deployed versions 8.5 and 9.0 of the application server, raising concerns for organizations that rely on WebSphere for critical business applications.", "creation_timestamp": "2026-08-23T00:00:42.451729Z"}, {"uuid": "53209ece-7fd8-43e4-b018-1b12d73df1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpd4byovt22", "content": "CVE-2026-11598 - Shortcodify\nCVE ID : CVE-2026-11598\n \n Published : July 28, 2026, 10:16 a.m. | 23\u00a0minutes ago\n \n Description : The Shortcodify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'name' Shortcode Attribute in all versions up to, and including...", "creation_timestamp": "2026-07-28T11:37:46.333057Z"}]}