{"vulnerability": "cve-2026-2259", "sightings": [{"uuid": "d82d43bc-8aad-4764-b18e-7ae03bba0790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22597", "type": "seen", "source": "https://bsky.app/profile/azu.bsky.social/post/3mbyjkl6o6b2c", "content": "", "creation_timestamp": "2026-01-09T12:43:59.659455Z"}, {"uuid": "84e05cbb-5bab-4ae1-b677-348c312c8846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22594", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22nlkmkt2z", "content": "", "creation_timestamp": "2026-01-10T03:22:35.032222Z"}, {"uuid": "be49de2f-0a78-4f5c-8a2d-fe736600d504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22595", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22nslknq2t", "content": "", "creation_timestamp": "2026-01-10T03:22:42.000456Z"}, {"uuid": "36209d02-f561-4a50-9875-8441fa3bf28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22594", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22obo6f52p", "content": "", "creation_timestamp": "2026-01-10T03:22:57.790734Z"}, {"uuid": "119142ac-fd42-4873-9cd8-58a03bc1378d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22595", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22ojbnyy2t", "content": "", "creation_timestamp": "2026-01-10T03:23:06.215204Z"}, {"uuid": "ec0338b2-37e9-4e7e-9209-9f4f3f1683e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc264f3h2q2y", "content": "", "creation_timestamp": "2026-01-10T04:24:31.961459Z"}, {"uuid": "cbc6a2a2-dd8b-461a-b679-addf641f5d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc26fdipor2x", "content": "", "creation_timestamp": "2026-01-10T04:29:32.074519Z"}, {"uuid": "f07115b9-a1bb-418b-b4da-f957940da149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22596", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc2bz25sbl2e", "content": "", "creation_timestamp": "2026-01-10T05:34:14.855404Z"}, {"uuid": "82250bc2-d1cf-408e-a365-3c318103129e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc2cbylnqa2c", "content": "", "creation_timestamp": "2026-01-10T05:39:15.028617Z"}, {"uuid": "ec6ba92f-7b53-4185-b1ff-4fe4c3d8bb62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22596", "type": "seen", "source": "https://gist.github.com/Darkcrai86/75065ea58892f371376f43071c30ef6e", "content": "", "creation_timestamp": "2026-01-12T08:38:07.000000Z"}, {"uuid": "ab3d9982-176d-40f5-8518-231341a68f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22597", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ed59edefa1f231991f1ac3c1165a40b0", "content": "", "creation_timestamp": "2026-01-12T08:37:45.000000Z"}, {"uuid": "b7cfc159-d0f6-4fe7-a06a-6a620b0e29bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22594", "type": "seen", "source": "https://gist.github.com/Darkcrai86/e6a4ee20b7d126c2ce8920b8a1cae0cb", "content": "", "creation_timestamp": "2026-01-12T08:38:51.000000Z"}, {"uuid": "03d900b4-58ba-4a22-8d88-2b9e8822074a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22595", "type": "seen", "source": "https://gist.github.com/Darkcrai86/de4efcbf58704e921cb132694dbf5386", "content": "", "creation_timestamp": "2026-01-12T08:38:28.000000Z"}, {"uuid": "2a4611d5-3ead-4bcc-95ce-5be75435fd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhy3hlbpxr2i", "content": "", "creation_timestamp": "2026-03-26T17:02:56.727507Z"}, {"uuid": "2b6d3456-7ea1-4d6f-8cf2-5a30e6ce391f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22593", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhypierqop2w", "content": "", "creation_timestamp": "2026-03-26T23:01:18.553539Z"}, {"uuid": "f1af497d-dbc7-47e1-ae68-b64d1a589965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22593", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyqdhpbaf2c", "content": "", "creation_timestamp": "2026-03-26T23:16:27.160183Z"}, {"uuid": "40f95b9b-8051-4b99-b667-86facf818c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22593", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miei2f3tij27", "content": "", "creation_timestamp": "2026-03-31T15:20:09.490531Z"}, {"uuid": "cef0f302-548a-4c0a-8ea0-9fc150552c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22595", "type": "published-proof-of-concept", "source": "Telegram/xCOXvC0nHIdc2RZU8QnHf4AhOuGrMPNqhpiQVHQJKZvyIjM", "content": "", "creation_timestamp": "2026-01-10T04:02:47.000000Z"}, {"uuid": "12733e73-f565-4e9f-ba4e-397b767f36f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22594", "type": "published-proof-of-concept", "source": "Telegram/xCOXvC0nHIdc2RZU8QnHf4AhOuGrMPNqhpiQVHQJKZvyIjM", "content": "", "creation_timestamp": "2026-01-10T04:02:47.000000Z"}, {"uuid": "53b2d635-8a80-4cb6-8a9a-3c4c018a0fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22596", "type": "published-proof-of-concept", "source": "Telegram/xCOXvC0nHIdc2RZU8QnHf4AhOuGrMPNqhpiQVHQJKZvyIjM", "content": "", "creation_timestamp": "2026-01-10T04:02:47.000000Z"}, {"uuid": "02f9573d-32dd-42f3-8c49-c4561296269e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-22592", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-cr88-6mqm-4g57", "content": "", "creation_timestamp": "2026-02-06T16:11:49.000000Z"}, {"uuid": "f2e19640-3251-4c86-ac20-5c272a637a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22594", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ghostcms_auth_rce_cve_2026_29053.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Maksim Rogov\", \"Cristian-Alexandru Staicu\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Remote Code Execution (RCE) vulnerability in Ghost CMS.\\n          Specifically crafted malicious themes can execute arbitrary code on the server running Ghost.\\n\\n          The affected versions include all releases from 0.7.2 up to and including 6.19.0.\\n          For versions 5.105.0-5.130.5 and 6.0.0-6.10.3, the module also leverages a 2FA bypass.\", \"disclosure_date\": \"2026-03-02\", \"fullname\": \"exploit/multi/http/ghostcms_auth_rce_cve_2026_29053\", \"is_install_path\": true, \"mod_time\": \"2026-08-07 05:21:48 +0000\", \"name\": \"Ghost CMS Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/ghostcms_auth_rce_cve_2026_29053.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/ghostcms_auth_rce_cve_2026_29053\", \"references\": [\"CVE-2026-29053\", \"CVE-2026-22594\", \"URL-https://www.endorlabs.com/learn/rce-in-ghost-cms-ghsa-cgc2-rcrh-qr5x\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Ghost >= 0.7.2, <= 6.19.0 / Unix payload\", \"Ghost >= 0.7.2, <= 6.19.0 / Windows payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-08-10T10:02:09.358493Z"}, {"uuid": "f6fadd04-a835-42dd-be6c-a040f5f8c7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22594", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ghostcms_auth_rce_cve_2026_29053.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Maksim Rogov\", \"Cristian-Alexandru Staicu\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Remote Code Execution (RCE) vulnerability in Ghost CMS.\\n          Specifically crafted malicious themes can execute arbitrary code on the server running Ghost.\\n\\n          The affected versions include all releases from 0.7.2 up to and including 6.19.0.\\n          For versions 5.105.0-5.130.5 and 6.0.0-6.10.3, the module also leverages a 2FA bypass.\", \"disclosure_date\": \"2026-03-02\", \"fullname\": \"exploit/multi/http/ghostcms_auth_rce_cve_2026_29053\", \"is_install_path\": true, \"mod_time\": \"2026-08-20 14:26:49 +0000\", \"name\": \"Ghost CMS Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/ghostcms_auth_rce_cve_2026_29053.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/ghostcms_auth_rce_cve_2026_29053\", \"references\": [\"CVE-2026-29053\", \"CVE-2026-22594\", \"URL-https://www.endorlabs.com/learn/rce-in-ghost-cms-ghsa-cgc2-rcrh-qr5x\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Ghost >= 0.7.2, <= 6.19.0 / Unix payload\", \"Ghost >= 0.7.2, <= 6.19.0 / Windows payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.877972Z"}, {"uuid": "be1517b1-51d3-42eb-a251-3e5044684219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22590", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv44rkfwjm2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-22590: eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group)\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-22590\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-09T18:04:35.097055Z"}, {"uuid": "450cfce6-6ce8-4e08-9508-d92e3d07eda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22590", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4m67g7dc2y", "content": "CVE-2026-22590 - fast-dds\nVersions of Fast DDS before the latest releases can be tricked into reading beyond the data it receives, exposing bits of its own memory. This could let a remote attacker cause a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fastdds #eprosima #CVE #infosec", "creation_timestamp": "2026-09-09T22:40:08.938600Z"}]}