{"vulnerability": "cve-2026-1323", "sightings": [{"uuid": "f22bf8f8-b34f-46e4-b3cd-9fb0bca9531a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13237", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqk7zm334g2v", "content": "CVE-2026-13237 - ai agents\nThe Drupal AI Agents module has a security flaw that allows unauthorized users to access restricted content. This affects versions 0.0.0 to 1.1.4, 1.2.0 to 1.2.5, and 1.3.0 to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aiagents #drupal #CVE #infosec", "creation_timestamp": "2026-07-13T17:34:04.865459Z"}, {"uuid": "20e59458-e66d-49b2-a2f3-5a07e236c661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13232", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqk7shm54u22", "content": "CVE-2026-13232 - advanced content feedback (aka admin_feedback)\nA security flaw in Drupal Advanced Content Feedback (admin_feedback) allows unauthorized users to view and potentially edit sensitive feedback. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#drupal #CVE #infosec", "creation_timestamp": "2026-07-13T17:30:05.043653Z"}, {"uuid": "ef5f417d-aa9a-48d8-8e7d-1706d6c558a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13233", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqk7sj363e2h", "content": "CVE-2026-13233 - openai provider\nThe Drupal OpenAI Provider module is vulnerable to a security issue that allows an attacker to make unauthorized requests to any server. This can happen when a user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openaiprovider #drupal #CVE #infosec", "creation_timestamp": "2026-07-13T17:30:06.743436Z"}, {"uuid": "812888bc-f71c-4398-bf5a-6b10416c2bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13235", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqk7vzdsnp24", "content": "CVE-2026-13235 - ai (artificial intelligence)\nOlder versions of the Drupal AI module are missing a security check, which could allow an attacker to access restricted areas of a website. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ai #drupal #CVE #infosec", "creation_timestamp": "2026-07-13T17:32:04.278836Z"}, {"uuid": "5b64edf1-d125-448e-9212-4cc84c7284bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13236", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqk7w2sdkl2b", "content": "CVE-2026-13236 - ai agents\nThe missing authorization in Drupal AI Agents allows unauthorized users to access and potentially manipulate AI features, which can lead to sensitive data exposure or malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aiagents #drupal #CVE #infosec", "creation_timestamp": "2026-07-13T17:32:05.716103Z"}, {"uuid": "e65dd3a6-67aa-4af6-bfab-e23ad9fbae71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13238", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqk7znix7l2w", "content": "CVE-2026-13238 - commerce realex / global payments\nAn outdated version of Drupal Commerce Realex/Global Payments may allow unauthorized users to access sensitive information. This is a serious issue because it could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#drupal #CVE #infosec", "creation_timestamp": "2026-07-13T17:34:06.017121Z"}, {"uuid": "a7c51c09-eadf-43ad-b1bd-cc80d30414fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13239", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqka56ugml2b", "content": "CVE-2026-13239 - wisski\nA missing security check in Drupal WissKI allows unauthorized users to access content they shouldn't. This affects versions 0.0.0 to 4.2.0 of the software. To fix this, update to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wisski #drupal #CVE #infosec", "creation_timestamp": "2026-07-13T17:36:05.024171Z"}, {"uuid": "f350fa15-f53b-42d8-9e5f-bc74232ec81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13230", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnswetk7c2a", "content": "CVE-2026-13230 - Information Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71\nCVE ID : CVE-2026-13230\n \n Published : July 15, 2026, 1:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : An information disclosure vulnerability was identified in ...", "creation_timestamp": "2026-07-15T03:50:16.581480Z"}, {"uuid": "d05ae1b6-6fac-4d69-a5ae-65cfc1ee6e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-13236", "type": "seen", "source": "https://jvn.jp/en/jp/JVN20592637", "content": "", "creation_timestamp": "2026-07-21T04:45:08.246833Z"}, {"uuid": "ffd72e6b-1d89-49a5-b12d-0338daa9f310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13233", "type": "seen", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "content": "", "creation_timestamp": "2026-07-22T17:00:05.424114Z"}, {"uuid": "0231f48a-8a26-487a-83aa-7429c9c2c5d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13233", "type": "seen", "source": "Telegram/n3uWueD2sTO0Gesje2FH-rOuWllBA7Wb8AqCvewrubDKEoo", "content": "", "creation_timestamp": "2026-07-22T17:00:05.287970Z"}, {"uuid": "4fc71fb2-fe38-4b83-a917-a1b1474f39fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13233", "type": "published-proof-of-concept", "source": "Telegram/n3uWueD2sTO0Gesje2FH-rOuWllBA7Wb8AqCvewrubDKEoo", "content": "", "creation_timestamp": "2026-07-23T00:00:08.931315Z"}, {"uuid": "06b2c38c-49c6-4e6f-b9f4-368bade9c662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13233", "type": "published-proof-of-concept", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "content": "", "creation_timestamp": "2026-07-23T00:00:09.080699Z"}, {"uuid": "e997260e-e50a-415c-8ac6-f65482cc611d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13233", "type": "seen", "source": "https://t.me/GithubRedTeam/94463", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a drupal-openai-provider-ssrf-cve-2026-13233\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KuniNogu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 09:42:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13233 (Drupal OpenAI Provider, SA-CONTRIB-2026-053): response-URL SSRF / local file read. Untrusted upstream, not the prompt. Safe reproducer + detections. Fixed in 1.1.1/1.2.2.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:07.051322Z"}, {"uuid": "e9011d21-252a-40f8-ab76-450ae4b27c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13233", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94463", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a drupal-openai-provider-ssrf-cve-2026-13233\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KuniNogu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 09:42:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13233 (Drupal OpenAI Provider, SA-CONTRIB-2026-053): response-URL SSRF / local file read. Untrusted upstream, not the prompt. Safe reproducer + detections. Fixed in 1.1.1/1.2.2.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:09.768194Z"}]}