{"vulnerability": "cve-2026-1170", "sightings": [{"uuid": "2a67e98a-367d-4d2f-96fc-99e2e7c6fd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11707", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mruvprg2zw2i", "content": "CVE-2026-11707\nAn attacker can inject malicious code into the login page of the IBM WebSphere Application Server administrative console. This can potentially allow the attacker to steal sensitive information or take control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T16:54:05.816714Z"}, {"uuid": "8045e583-bc3e-435b-a6b2-fdb0b67c74d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnszqwofd32p", "content": "CVE-2026-11700 - Google Chrome Use After Free\nCVE ID : CVE-2026-11700\n \n Published : June 9, 2026, 12:16 a.m. | 17\u00a0minutes ago\n \n Description : Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process...", "creation_timestamp": "2026-06-09T01:20:14.160639Z"}, {"uuid": "9316721b-f7e9-426c-98b7-86aded3a8324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11701", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnt2uqtw5s2a", "content": "CVE-2026-11701 - Google Chrome Guest View UI Spoofing\nCVE ID : CVE-2026-11701\n \n Published : June 9, 2026, 12:16 a.m. | 17\u00a0minutes ago\n \n Description : Inappropriate implementation in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI s...", "creation_timestamp": "2026-06-09T01:40:16.071429Z"}, {"uuid": "13c3e57b-f387-4e30-811b-c9604cb614ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mntcpfxhxv2y", "content": "\ud83d\udfe0 CVE-2026-11700 - High (8.3)\n\nUse after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11700/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T04:00:27.777097Z"}, {"uuid": "4dc9349d-3df2-4440-9ede-71b4d2599b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11708", "type": "seen", "source": "https://t.me/pphm_HackerNews/1818", "content": "\ud83d\udd34 IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities\n\nIBM has disclosed several security vulnerabilities in its WebSphere Application Server that put enterprise environments at risk of cross-site scripting (XSS) and path-traversal attacks.\n\nThese vulnerabilities could allow attackers to compromise administrative sessions and access sensitive data. The issues, identified as CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, affect widely deployed versions 8.5 and 9.0 of the application server, raising concerns for organizations that rely on WebSphere for critical business applications.", "creation_timestamp": "2026-08-21T23:00:10.482425Z"}, {"uuid": "1afa645c-f9b0-4ded-8439-2e32ac9e14d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11700", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260609", "content": "", "creation_timestamp": "2026-06-08T18:00:00.000000Z"}, {"uuid": "08ef28c5-9e7d-4f72-906a-e181410eda06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11701", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260609", "content": "", "creation_timestamp": "2026-06-08T18:00:00.000000Z"}, {"uuid": "b1a14c0c-55b0-4f8a-9705-33be5f9d7e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11700", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260616", "content": "", "creation_timestamp": "2026-06-15T18:00:00.000000Z"}, {"uuid": "4e3338a9-854e-499d-a785-212c82cd1226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11701", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260616", "content": "", "creation_timestamp": "2026-06-15T18:00:00.000000Z"}, {"uuid": "20c0f575-31e9-4bf9-babb-08e2d2831ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11701", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1921", "content": "", "creation_timestamp": "2026-06-15T21:00:00.000000Z"}, {"uuid": "3df176fd-c2dd-44d7-aa98-2affc6a470d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5iqs5h7w2z", "content": "CVE-2026-11703 - Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption\nCVE ID : CVE-2026-11703\n \n Published : June 25, 2026, 9:15 p.m. | 29\u00a0minutes ago\n \n Description : Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped th...", "creation_timestamp": "2026-06-25T22:40:24.391698Z"}, {"uuid": "721b2eec-7e2f-44ba-b4b4-7c06827fe4b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp6o6patk627", "content": "CVE-2026-11702 - Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes\nCVE ID : CVE-2026-11702\n \n Published : June 26, 2026, 8:13 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : Bytes::Random::Secure::Tiny versions through 1.01...", "creation_timestamp": "2026-06-26T09:50:19.568560Z"}, {"uuid": "f66aa2c8-b803-4e9e-8563-4c56a792ecc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11702", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp7j2nh5jg2f", "content": "CVE-2026-11702: Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes", "creation_timestamp": "2026-06-26T17:51:14.824833Z"}, {"uuid": "de1e0fa4-bdbe-455f-b4e7-5a26466112b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11702", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mpbec372ch2p", "content": "perlPackages.BytesRandomSecureTiny: add patch for CVE-2026-11702\n\nhttps://github.com/NixOS/nixpkgs/pull/535971\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2018\n\n#security", "creation_timestamp": "2026-06-27T11:31:15.407390Z"}, {"uuid": "299dbf09-22ff-4c9a-a26f-c9bdafac9ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11702", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mpbhh4nm642d", "content": "[Backport release-26.05] perlPackages.BytesRandomSecureTiny: add patch for CVE-2026-11702\n\nhttps://github.com/NixOS/nixpkgs/pull/536001\n\n#security", "creation_timestamp": "2026-06-27T12:27:45.342410Z"}, {"uuid": "6e11a015-9b47-4b2e-82ae-ab3f56f2b03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11708", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T08:28:19.647597Z"}, {"uuid": "743f3c07-48c8-4a8d-ab51-13e15deddb49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11708", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mppzywkxsk2r", "content": "\ud83d\udccc CVE-2026-11708 - IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help syst... https://www.cyberhub.blog/cves/CVE-2026-11708", "creation_timestamp": "2026-07-03T07:37:06.675571Z"}, {"uuid": "447cd9eb-2eaf-4d41-8a55-d8848ad895a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11708", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqcmvfpfc2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11708 \u0432 IBM WebSphere Application Server: \u0443\u0433\u0440\u043e\u0437\u0430 XSS \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/889972E3-7627-4877-8F1D-D5C39845AB11", "creation_timestamp": "2026-07-03T10:11:27.239420Z"}, {"uuid": "a13b43fb-3476-4df7-86ef-68ccf108f0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11708", "type": "seen", "source": "https://t.me/pphm_HackerNews/1818", "content": "\ud83d\udd34 IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities\n\nIBM has disclosed several security vulnerabilities in its WebSphere Application Server that put enterprise environments at risk of cross-site scripting (XSS) and path-traversal attacks.\n\nThese vulnerabilities could allow attackers to compromise administrative sessions and access sensitive data. The issues, identified as CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, affect widely deployed versions 8.5 and 9.0 of the application server, raising concerns for organizations that rely on WebSphere for critical business applications.", "creation_timestamp": "2026-08-22T00:00:26.851941Z"}, {"uuid": "8ecd8a79-1aaf-4ca3-8612-c4bfe373e089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11708", "type": "seen", "source": "https://t.me/pphm_HackerNews/1818", "content": "\ud83d\udd34 IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities\n\nIBM has disclosed several security vulnerabilities in its WebSphere Application Server that put enterprise environments at risk of cross-site scripting (XSS) and path-traversal attacks.\n\nThese vulnerabilities could allow attackers to compromise administrative sessions and access sensitive data. The issues, identified as CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, affect widely deployed versions 8.5 and 9.0 of the application server, raising concerns for organizations that rely on WebSphere for critical business applications.", "creation_timestamp": "2026-08-23T00:00:42.410349Z"}]}