{"vulnerability": "cve-2026-1249", "sightings": [{"uuid": "e746fd52-2bf5-4c23-b5d2-8477bcac3d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp3wyleh4a2c", "content": "CVE-2026-12490 - Bypass of client certificate verification with transfer over TLS\nCVE ID : CVE-2026-12490\n \n Published : June 25, 2026, 5:24 a.m. | 1\u00a0hour, 46\u00a0minutes ago\n \n Description : When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer shoul...", "creation_timestamp": "2026-06-25T07:49:58.729344Z"}, {"uuid": "693fd129-e2a3-43c8-ace0-13db7749cb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqobblln2c", "content": "CVE-2026-12492 - Happy Coders OTP Login for WooCommerce\nCVE ID : CVE-2026-12492\n \n Published : July 16, 2026, 7:16 a.m. | 18\u00a0minutes ago\n \n Description : The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.8 does not verify that a one-time password was actuall...", "creation_timestamp": "2026-07-16T07:47:56.314612Z"}, {"uuid": "8e60b07f-e8b7-4868-bafd-5e2a317d05ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12492", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrofv6bjr2j", "content": "CVE-2026-12492 - happy coders otp login for woocommerce\nThe Happy Coders OTP Login plugin for WooCommerce has a security flaw that allows attackers to take control of any user account, including administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-07-16T16:40:30.198450Z"}, {"uuid": "0860f0e1-e837-4461-ab84-1b6b73f87f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12490", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr2g73izt422", "content": "\ud83d\udccc CVE-2026-12490 - When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no cl... https://www.cyberhub.blog/cves/CVE-2026-12490", "creation_timestamp": "2026-07-20T04:07:07.078341Z"}, {"uuid": "5cfc08d7-540c-451c-aa50-b7fcfdfae0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12497", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhmbqwfb42a", "content": "\ud83d\udfe0 CVE-2026-12497 - High (7.5)\n\nThe Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restric...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12497/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-25T10:00:35.867751Z"}, {"uuid": "b7e1ba5e-9c2b-4081-851b-78a508bae863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12495", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2sy6nmo2y", "content": "CVE-2026-12495\nAn attacker can send a special request to the web interface of your Mercusys MB115-4G device, causing it to crash and preventing you from accessing the web administration service. This can happen even if you're\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T14:04:04.587685Z"}, {"uuid": "e8627989-9894-49eb-a4bf-a6ba63b3eaf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12495", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrpd7oaini2g", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-12495\n\nDenial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interf...", "creation_timestamp": "2026-07-28T11:39:39.859770Z"}]}