{"vulnerability": "cve-2026-1219", "sightings": [{"uuid": "acd95a12-3893-4010-8f5e-bf4de4c1845a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12191", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116747156308574401", "content": "A new vulnerability with increased severity was disclosed for Comma AI Openpilot (CVE-2026-12191) https://vuldb.com/vuln/370837", "creation_timestamp": "2026-06-14T06:57:13.938087Z"}, {"uuid": "3b32916b-20b3-4b60-9bd6-a70782e1b5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobxfwrfvr23", "content": "CVE-2026-12190 - Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url scheme\nCVE ID : CVE-2026-12190\n \n Published : June 14, 2026, 11:16 p.m. | 25\u00a0minutes ago\n \n Description : A vulnerability has been found in Genspark AI Workspace Ap...", "creation_timestamp": "2026-06-14T23:48:13.793459Z"}, {"uuid": "2dcae21a-5535-4eaf-96c2-c72ba4755d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12191", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moby3piree2c", "content": "\ud83d\udfe0 CVE-2026-12191 - High (7.8)\n\nA vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12191/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T00:00:25.550480Z"}, {"uuid": "3d75b770-e69f-4ddd-a599-b35a3814e1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12193", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moby42wvt52y", "content": "HIGH severity alert: Heap-based buffer overflow in VS Revo RevoUninstaller (2.5.x/2.6.x). Public exploit available \u2014 upgrade to 2.7.0 now! https://radar.offseq.com/threat/cve-2026-12193-heap-based-buffer-overflow-in-vs-re-cf8229a8 #OffSeq #Vulnerability #RevoUninstaller", "creation_timestamp": "2026-06-15T00:00:36.630939Z"}, {"uuid": "6dbbacf3-f7a7-4a99-8de2-8612d6b9cd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12193", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116751180370821217", "content": "VS Revo RevoUninstaller 2.5.x/2.6.x affected by HIGH severity heap-based buffer overflow (CVE-2026-12193). Public exploit out \u2014 local attack vector. Upgrade to 2.7.0 ASAP! https://radar.offseq.com/threat/cve-2026-12193-heap-based-buffer-overflow-in-vs-re-cf8229a8 #OffSeq #Vulnerability #RevoUninstaller #Infosec", "creation_timestamp": "2026-06-15T00:00:38.693483Z"}, {"uuid": "8b9dc0d3-1d4e-45ab-91a9-f983d3dc8f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobyjqsopj2o", "content": "CVE-2026-12191 - Comma AI Openpilot Pickle modeld.py pickle.loads deserialization\nCVE ID : CVE-2026-12191\n \n Published : June 14, 2026, 11:16 p.m. | 25\u00a0minutes ago\n \n Description : A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.loa...", "creation_timestamp": "2026-06-15T00:08:15.512851Z"}, {"uuid": "7126f56e-f0f6-4197-900b-54191d6f3e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12192", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3gsau3s22", "content": "\ud83d\udfe0 CVE-2026-12192 - High (8.8)\n\nA vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the compon...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12192/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T01:00:19.155646Z"}, {"uuid": "660e99a8-d05d-49ea-9ef1-a7b8f9bceb75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12193", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3gzqyik24", "content": "\ud83d\udfe0 CVE-2026-12193 - High (7.8)\n\nA vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12193/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T01:00:26.143545Z"}, {"uuid": "70cee37b-eecc-4c2c-9187-b12a823120dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12192", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moc4gzc3iz2b", "content": "CVE-2026-12192 - GALAYOU Y4 Web Server buffer overflow\nCVE ID : CVE-2026-12192\n \n Published : June 15, 2026, 12:16 a.m. | 51\u00a0minutes ago\n \n Description : A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manip...", "creation_timestamp": "2026-06-15T01:18:18.706088Z"}, {"uuid": "5a89cfe9-6a10-46b7-93e0-1636f324c1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moc4pxr3u32b", "content": "CVE-2026-12197 - Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection\nCVE ID : CVE-2026-12197\n \n Published : June 15, 2026, 12:16 a.m. | 51\u00a0minutes ago\n \n Description : A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element...", "creation_timestamp": "2026-06-15T01:23:18.845264Z"}, {"uuid": "15178d7c-a672-4530-a6fc-eba23d941780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12197", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moc54pa4u62l", "content": "Ruijie EG105G-P v2.340 hit by HIGH severity command injection (CVE-2026-12197). No patch, public exploit out. Restrict access ASAP & watch for vendor updates. https://radar.offseq.com/threat/cve-2026-12197-command-injection-in-ruijie-eg105g--9776681e #OffSeq #Vulnerability #Ruijie", "creation_timestamp": "2026-06-15T01:30:26.579582Z"}, {"uuid": "b3109ff9-30f7-44df-bfa8-70b0394f931e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12197", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116751533611424963", "content": "\u26a0\ufe0f HIGH-severity: CVE-2026-12197 in Ruijie EG105G-P v2.340 enables remote command injection via /cgi-bin/luci/api/diagnose. No patch, exploit code public. Restrict access & monitor for updates. https://radar.offseq.com/threat/cve-2026-12197-command-injection-in-ruijie-eg105g--9776681e #OffSeq #Infosec #CVE #Vulnerability", "creation_timestamp": "2026-06-15T01:30:27.979701Z"}, {"uuid": "59f6b6e3-ea57-4bbd-8e0e-b66ef2f5e542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12192", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116751887686155742", "content": "\ud83d\udd0d HIGH severity: Buffer overflow in GALAYOU Y4 v1.0.0 (CVE-2026-12192). Exploitable via local network \u2014 no patch or vendor response yet. Restrict network access & monitor for updates. https://radar.offseq.com/threat/cve-2026-12192-buffer-overflow-in-galayou-y4-555d7b50 #OffSeq #Vuln #IoTSecurity #BufferOverflow", "creation_timestamp": "2026-06-15T03:00:28.200298Z"}, {"uuid": "ccc50b49-c493-4c3c-b8dc-e73d6328bf43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12192", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mocc5poxpg2h", "content": "GALAYOU Y4 v1.0.0 hit by HIGH-severity buffer overflow. No patch yet, local network attack risk \u2014 restrict access, stay alert for vendor updates. https://radar.offseq.com/threat/cve-2026-12192-buffer-overflow-in-galayou-y4-555d7b50 #OffSeq #Vulnerability #IoTSecurity", "creation_timestamp": "2026-06-15T03:00:29.801244Z"}, {"uuid": "8a1a390c-9b43-449e-9529-2515f4af22aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mocfvmpkk627", "content": "CVE-2026-12198 - Microweber API Endpoint thumbnail_img userfiles_path path traversal\nCVE ID : CVE-2026-12198\n \n Published : June 15, 2026, 12:16 a.m. | 3\u00a0hours, 25\u00a0minutes ago\n \n Description : A weakness has been identified in Microweber up to 2.0.20. This affects the function...", "creation_timestamp": "2026-06-15T04:07:32.590270Z"}, {"uuid": "012d60da-6b1a-4a13-b297-deaa92c06970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsyowi65b2k", "content": "CVE-2026-12194 - PHPIPAM Authenticated LFI\nCVE ID : CVE-2026-12194\n \n Published : July 4, 2026, 6:54 a.m. | 4\u00a0hours, 53\u00a0minutes ago\n \n Description : PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/i...", "creation_timestamp": "2026-07-04T11:51:36.509870Z"}, {"uuid": "474fb8ed-35b8-4801-8a29-14472ab3123b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mptkuk3x7l2h", "content": "CVE-2026-12195 - myVesta is affected by an authenticated remote cod\nCVE ID : CVE-2026-12195\n \n Published : July 4, 2026, 12:16 p.m. | 4\u00a0hours, 57\u00a0minutes ago\n \n Description : myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can ...", "creation_timestamp": "2026-07-04T17:16:52.724418Z"}, {"uuid": "6ef1daf8-2f2a-4cee-9d6a-19932da4970d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mptlpfdokh27", "content": "CVE-2026-12196 - HestiaCP Admin Takeover\nCVE ID : CVE-2026-12196\n \n Published : July 4, 2026, 12:16 p.m. | 4\u00a0hours, 57\u00a0minutes ago\n \n Description : HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cro...", "creation_timestamp": "2026-07-04T17:31:53.058218Z"}, {"uuid": "0d181a0e-defd-4e5a-b690-51660676fcd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12195", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumlgvzdx2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12195 \u0432 myVesta: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C93EEFE8-33FF-42F5-8FFB-5AC78AE33F86", "creation_timestamp": "2026-07-05T03:20:13.689804Z"}, {"uuid": "0e7cf6cd-c7d7-42ef-ba1c-64151b743c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12196", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumuhwhca2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12196 \u0432 HestiaCP: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/76C8817D-0FF4-4D78-91D5-B8E0904B6CE5", "creation_timestamp": "2026-07-05T03:25:16.668843Z"}, {"uuid": "a426f9ce-4595-4687-9f81-747edc9f2470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12196", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpumujyv6q2o", "content": "HestiaCP \u9762\u677f\u8ba1\u5212\u4efb\u52a1\u529f\u80fd\u5b58\u5728\u6743\u9650\u63a7\u5236\u6f0f\u6d1e(CVE-2026-12196)\u6df1\u5ea6\u5206\u6790\u4e0e\u5e94\u5bf9\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/502CFC3C-4910-4983-9642-76342B9A93B9", "creation_timestamp": "2026-07-05T03:25:18.895664Z"}, {"uuid": "dea8e8bf-3e07-4d1e-a888-c262175f6983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12195", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mpviijeox523", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-12195\n\nmyVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_...", "creation_timestamp": "2026-07-05T11:39:40.401120Z"}]}