{"vulnerability": "cve-2026-1172", "sightings": [{"uuid": "ec1640b2-de9d-489a-aa11-1ad3b7d7470a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5g46kci2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11720: \u043f\u0443\u0442\u044c \u043a \u0442\u0440\u0430\u0432\u0435\u0440\u0441\u0430\u0446\u0438\u0438 \u0432 HTTP-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 Google APIs\n\n\n\nhttps://kripta.biz/posts/6BDD7213-D7F1-4B42-B9CE-9356B16198A0", "creation_timestamp": "2026-06-29T18:44:11.945356Z"}, {"uuid": "70057b68-82ef-4e54-b6f7-3f813b950be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mphikpwkbb2m", "content": "CVE-2026-11720 - Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder\nCVE ID : CVE-2026-11720\n \n Published : June 29, 2026, 5:51 p.m. | 3\u00a0hours, 20\u00a0minutes ago\n \n Description : A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolb...", "creation_timestamp": "2026-06-29T22:03:38.336181Z"}, {"uuid": "2990ea6c-fbb3-4988-8f7b-5620f14b69a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpn7i5z3gq2t", "content": "\ud83d\udccc CVE-2026-11720 - A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox.\n\nWhen constructing downstream API requests, the URL buil... https://www.cyberhub.blog/cves/CVE-2026-11720", "creation_timestamp": "2026-07-02T04:37:07.013761Z"}, {"uuid": "c7d17c71-c781-4f83-b03e-68e23e3c9ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11721", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u", "content": "ISC has disclosed nine vulnerabilities in BIND 9 (CVE-2026-10723, CVE-2026-10822, CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321)", "creation_timestamp": "2026-07-22T16:47:00.790994Z"}, {"uuid": "3c858ecd-8da5-439a-8483-14dcaeddb60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11721", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mraz4gyvek2o", "content": "BIND 9\u306e\u8106\u5f31\u6027(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)\u3068\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3(9.20.26, 9.21.24)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #dns #bind\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-07-22T19:01:40.250027Z"}, {"uuid": "98436197-af4a-40d1-9dfc-717c7d4fddcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11721", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116969594782190144", "content": "The severity is increased for this new vulnerability affecting ISC BIND (CVE-2026-11721) https://vuldb.com/vuln/382359", "creation_timestamp": "2026-07-23T13:46:13.940069Z"}, {"uuid": "cd6b24c8-e621-4319-9a0f-3fa5e9da0a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11721", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mttdxln7f22j", "content": "\u300cBIND 9\u300d\u306b\u30ad\u30e3\u30c3\u30b7\u30e5\u6c5a\u67d3\u306a\u3069\u8907\u6570\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nInternet Systems Consortium\uff08ISC\uff09\u306f\u3001\u300cBIND 9\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u3042\u308f\u305b\u30669\u4ef6\u306e\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u3066\u3044\u308b\u3002\u65e5\u672c\u30ec\u30b8\u30b9\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9\u306a\u3069\u306f\u7dca\u6025\u5bfe\u5fdc\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-13321\u300d\u306f\u3001Next Domain Name\u30d5\u30a3\u30fc\u30eb\u30c9\u304c\u7f72\u540d\u8005\u306e\u30be\u30fc\u30f3\u5916\u3092\u6307\u3059\u300cNSEC\u30ec\u30b3\u30fc\u30c9\u300d\u3092\u53d7\u3051\u5165\u308c\u308b\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u304c\u7ba1\u7406\u3059\u308bDNSSEC\u7f72\u540d\u6e08\u307f\u30be\u30fc\u30f3\u3092\u7528\u3044\u3066\u30be\u30fc\u30f3\u6a2a\u65ad\u578b\u306e\u30ad\u30e3\u30c3\u30b7\u30e5\u30dd\u30a4\u30ba\u30cb\u30f3\u30b0\u3092\u5f15\u304d\u8d77\u3053\u3059\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u307e\u305f\u300cCVE-2026-11721\u300d\u3067\u306f\u3001...", "creation_timestamp": "2026-08-24T12:54:04.665841Z"}, {"uuid": "ca1a2519-7b5c-419d-a8bb-b52a44b824a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6gbwnwhh22", "content": "CVE-2026-11720 - mcp_toolbox_for_databases\nThe Google MCP Toolbox HTTP tool can make unauthorized API requests to unintended endpoints on the same target host. This is because an attacker can manipulate the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#google #Golang #CVE #infosec", "creation_timestamp": "2026-09-10T16:00:08.117521Z"}]}