{"vulnerability": "cve-2026-1621", "sightings": [{"uuid": "18ee8c89-0400-417b-aab4-a44b2c373d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16219", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-29T23:00:08.560985Z"}, {"uuid": "183289ab-2334-434d-bd7d-f6363d47c942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16219", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-30T00:00:12.066846Z"}, {"uuid": "6f434590-2d01-40eb-a14c-1c7e516b0288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1621", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gkdykvkbir42p", "content": "CVE-2026-1621 - Register Bypass in Universal Sotware's E-Municipality\nCVE ID : CVE-2026-1621\n \n Published : Aug. 14, 2026, 2:16 p.m. | 18\u00a0minutes ago\n \n Description : Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Explo...", "creation_timestamp": "2026-08-14T15:16:07.390243Z"}, {"uuid": "256e9c81-f83a-44aa-b0cb-803dc6cc23b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16210", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116944759986921885", "content": "CVE-2026-16210: Medium severity vuln in newpanjing simpleui 2026.01.13 allows remote, unauthenticated actions via AjaxAdmin AJAX Endpoint. Exploit is public \u2014 no vendor fix yet. Restrict access or disable endpoint until patched. https://radar.offseq.com/threat/cve-2026-16210-missing-authentication-in-newpanjing-simpleui-9641080cfd337cea #OffSeq #Vuln #SimpleUI", "creation_timestamp": "2026-07-19T04:30:25.277100Z"}, {"uuid": "5f8a06a1-37a1-44af-9cb7-0f53129b2a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16210", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqxwzv2zwr2h", "content": "newpanjing simpleui 2026.01.13 hit by CVE-2026-16210 (MEDIUM): missing auth lets remote attackers act without login. No patch yet \u2014 restrict endpoint access asap. Details: https://radar.offseq.com/threat/cve-2026-16210-missing-authentication-in-newpanjing-simpleui-9641080cfd337cea #OffSeq #Simple...", "creation_timestamp": "2026-07-19T04:30:27.322791Z"}, {"uuid": "565c3dde-a0d0-4f98-8a53-3e0bed6bce1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16217", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116945113858277904", "content": "guohongze adminset (v0.1 \u2013 0.61) is vulnerable to authorization bypass (CVE-2026-16217) via delivery/deli.py. Remote exploitation is possible, exploit is public. Severity: MEDIUM. Patch unavailable. https://radar.offseq.com/threat/cve-2026-16217-authorization-bypass-in-guohongze-adminset-47f5be1f2f522b7f #OffSeq #CVE202616217 #Vuln #Infosec", "creation_timestamp": "2026-07-19T06:00:25.031877Z"}, {"uuid": "466a9705-52d3-4c4b-adb1-ecb70319de10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16217", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqy42sn6732h", "content": "guohongze adminset (v0.1 \u2013 0.61) MEDIUM severity vuln: authorization bypass via delivery/deli.py (CVE-2026-16217). No fix yet \u2014 restrict access, monitor for threats. https://radar.offseq.com/threat/cve-2026-16217-authorization-bypass-in-guohongze-adminset-47f5be1f2f522b7f #OffSeq #Vulnerability #...", "creation_timestamp": "2026-07-19T06:00:26.841953Z"}, {"uuid": "cb664fa5-844f-4678-a21a-1387ecc7d8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqych4kfum23", "content": "CVE-2026-16212 - awesto django-shop Purchase Stock inventory.py race condition\nCVE ID : CVE-2026-16212\n \n Published : July 19, 2026, 5:16 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown fu...", "creation_timestamp": "2026-07-19T07:54:41.791559Z"}, {"uuid": "8ec39a5f-bb42-4269-bd16-9c6c8b9839d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16216", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqycllyxiv2x", "content": "CVE-2026-16216 - geex-arts django-jet OAuth cross-site request forgery\nCVE ID : CVE-2026-16216\n \n Published : July 19, 2026, 6:17 a.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function ...", "creation_timestamp": "2026-07-19T07:57:12.315949Z"}, {"uuid": "8d90dc42-039c-46de-968f-356d8298a195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqycqifupx2b", "content": "CVE-2026-16218 - hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions\nCVE ID : CVE-2026-16218\n \n Published : July 19, 2026, 6:17 a.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : A vulnerability was detected in hunvr...", "creation_timestamp": "2026-07-19T07:59:56.311213Z"}, {"uuid": "9e4258c7-b596-49bf-be75-a0dbd2962a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqycvui2xq2b", "content": "CVE-2026-16214 - geex-arts django-jet Dashboard views.py authorization\nCVE ID : CVE-2026-16214\n \n Published : July 19, 2026, 5:16 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown functio...", "creation_timestamp": "2026-07-19T08:02:56.689053Z"}, {"uuid": "882f6605-adb1-4cfa-b6f4-7c090029172f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyd3tl5li2b", "content": "CVE-2026-16211 - allegro Hostname Allocation assets.py AssetLastHostname.increment_hostname race condition\nCVE ID : CVE-2026-16211\n \n Published : July 19, 2026, 4:17 a.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : A vulnerability was determined in allegro up to bcf65b994ef29fb...", "creation_timestamp": "2026-07-19T08:06:43.983966Z"}, {"uuid": "35c21410-4fef-49b0-8996-72aba05aa036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16217", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqydckirle2x", "content": "CVE-2026-16217 - guohongze adminset Delivery Deployment Endpoint deli.py authorization\nCVE ID : CVE-2026-16217\n \n Published : July 19, 2026, 6:17 a.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : A security vulnerability has been detected in guohongze adminset up to 0.61. Affecte...", "creation_timestamp": "2026-07-19T08:10:02.490054Z"}, {"uuid": "4b796ec6-3a39-4357-af38-0765b7811d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqydka3b5q2i", "content": "CVE-2026-16213 - Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage\nCVE ID : CVE-2026-16213\n \n Published : July 19, 2026, 5:16 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A security flaw has been discovered in Fantomas42 django-blo...", "creation_timestamp": "2026-07-19T08:14:20.137859Z"}, {"uuid": "29707666-aa33-41a1-bded-e16fa24abb7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqydt6kdqy2q", "content": "CVE-2026-16210 - newpanjing simpleui AjaxAdmin AJAX Endpoint admin.py self.get_action missing authentication\nCVE ID : CVE-2026-16210\n \n Published : July 19, 2026, 4:17 a.m. | 3\u00a0hours, 23\u00a0minutes ago\n \n Description : A vulnerability was found in newpanjing simpleui 2026.01.13. ...", "creation_timestamp": "2026-07-19T08:19:20.524804Z"}, {"uuid": "bc909b33-34fb-47ae-8534-2b5977a328c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyef43xcp2i", "content": "CVE-2026-16215 - geex-arts django-jet OAuth Credential Revoke authorization\nCVE ID : CVE-2026-16215\n \n Published : July 19, 2026, 5:16 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unkno...", "creation_timestamp": "2026-07-19T08:29:21.945910Z"}, {"uuid": "38cc51ba-f8bf-4ccc-a604-4ed3778b6cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyeo2wlym2q", "content": "CVE-2026-16219 - Croogo CMS Admin File Manager FileManager.php isEditable path traversal\nCVE ID : CVE-2026-16219\n \n Published : July 19, 2026, 7:16 a.m. | 23\u00a0minutes ago\n \n Description : A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::is...", "creation_timestamp": "2026-07-19T08:34:22.701227Z"}, {"uuid": "4644ee7d-e34e-4b5f-94ab-c58fe2d5b373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16219", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94326", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-16219-croogo-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HELLBOY3110\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 14:07:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T17:00:04.346816Z"}, {"uuid": "00f7f38d-17ba-4db3-b2f3-6b70c1240bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16219", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94326", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-16219-croogo-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HELLBOY3110\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 14:07:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:37.848961Z"}, {"uuid": "f4c1d77f-8dc2-49fa-91e4-a5969391b42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16219", "type": "seen", "source": "Telegram/n4_ZNUCoJfZAolaR9A4hqsAYq57EjAfyK1ny6q-M_zcZuOU", "content": "", "creation_timestamp": "2026-07-22T17:00:06.329639Z"}, {"uuid": "7bf2cbb2-ae3b-4864-b700-0c1726d68437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16219", "type": "published-proof-of-concept", "source": "Telegram/n4_ZNUCoJfZAolaR9A4hqsAYq57EjAfyK1ny6q-M_zcZuOU", "content": "", "creation_timestamp": "2026-07-23T00:00:07.369782Z"}, {"uuid": "b2ec59e5-a95d-4f40-8da9-fed0efcbdf2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16219", "type": "published-proof-of-concept", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-31T00:00:47.258761Z"}]}