{"vulnerability": "cve-2026-1228", "sightings": [{"uuid": "689f33f4-e60f-411f-875d-3cc8260fbab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mogblcvvfk24", "content": "\ud83d\udfe0 CVE-2026-12289 - High (8.8)\n\nPrivilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12289/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T17:01:07.991745Z"}, {"uuid": "1a5ff4a0-91c5-4ff5-9993-bbf9c05f356d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mogbleimlr2n", "content": "\ud83d\udfe0 CVE-2026-12289 - High (8.8)\n\nPrivilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefo...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-12289/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T17:01:10.389229Z"}, {"uuid": "36377fad-5d80-46c0-bcae-ecaea598fd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1924", "content": "", "creation_timestamp": "2026-06-16T21:00:00.000000Z"}, {"uuid": "d5dca2ad-cf40-4ee0-9aa9-9ae5d40e4c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260618", "content": "", "creation_timestamp": "2026-06-17T20:00:00.000000Z"}, {"uuid": "e9d7612d-70dc-46d5-a18b-b3541b48bd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mp4jty2xbc2f", "content": "RLSA-2026-27717: Firefox 140.12.0 corrige 30+ CVEs cr\u00edticos no Rocky Linux 8, incluindo RCE (CVE-2026-12289/12291), sandbox escape (CVE-2026-12294/12295) e memory safety bugs. Atualize AGORA com dnf update firefox e reinicie os processos.   Saiba mais: -&gt;  tinyurl.com/4ry83bep  #RockyLinux #Firefox", "creation_timestamp": "2026-06-25T13:27:26.426876Z"}, {"uuid": "3d3c2548-d7e2-42a6-aa5e-39525bc50d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mp4jtyscdk2f", "content": "RLSA-2026-27717: Firefox 140.12.0 corrige 30+ CVEs cr\u00edticos no Rocky Linux 8, incluindo RCE (CVE-2026-12289/12291), sandbox escape (CVE-2026-12294/12295) e memory safety bugs. Atualize AGORA com dnf update firefox e reinicie os processos.   Saiba mais: -&gt;  tinyurl.com/4ry83bep  #RockyLinux #Firefox", "creation_timestamp": "2026-06-25T13:27:26.858573Z"}, {"uuid": "1a617cf0-a7cd-43ff-bc02-852379b8eadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mpvwdpp5wk2q", "content": "    \ud83d\udee1\ufe0f RLSA-2026:33445 \u2013 Thunderbird 140.12.0-1.el8_10 liberado para Rocky Linux 8. Corrige 15+ CVEs, incluindo CVE-2026-12289 (escala\u00e7\u00e3o de privil\u00e9gio) e CVE-2026-12294 (sandbox escape).    Saiba mais: -&gt; tinyurl.com/4hjszp5x", "creation_timestamp": "2026-07-05T15:47:33.958129Z"}, {"uuid": "9cb7271f-7f2a-478c-b7f3-15496568c96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mpvwdqxvnc2q", "content": "    \ud83d\udee1\ufe0f RLSA-2026:33445 \u2013 Thunderbird 140.12.0-1.el8_10 liberado para Rocky Linux 8. Corrige 15+ CVEs, incluindo CVE-2026-12289 (escala\u00e7\u00e3o de privil\u00e9gio) e CVE-2026-12294 (sandbox escape).    Saiba mais: -&gt; tinyurl.com/4hjszp5x", "creation_timestamp": "2026-07-05T15:47:34.399514Z"}, {"uuid": "0d34898b-20a4-46c5-85c1-4e5f72f0081d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12289", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqckfx3kat2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12289: \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Graphics: WebRender\n\n\n\nhttps://kripta.biz/posts/C8434CE8-F9A8-40CF-89A9-4844975AC945", "creation_timestamp": "2026-07-10T16:18:38.385205Z"}, {"uuid": "cdbdc4ed-aea2-4c69-951c-5a1949d90c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqoc76djrl22", "content": "CVE-2026-12281 - Shibboleth\nCVE ID : CVE-2026-12281\n \n Published : July 15, 2026, 6:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : The Shibboleth WordPress plugin before 2.5.4 does not fail closed when its HTTP header identity mode is enabled without an anti-spoofing key, t...", "creation_timestamp": "2026-07-15T08:23:38.082795Z"}, {"uuid": "0bedb3c1-5b95-4f56-8b7f-df0d8146b006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12281", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqoockgock2y", "content": "CVE-2026-12281. Shibboleth plugin. 8.1/10 CVSS.\n\nAnyone can forge auth headers and login as admin. No verification. No patch yet.\n\nDisable Shibboleth immediately.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-07-15T12:00:16.164600Z"}]}