{"vulnerability": "cve-2026-5276", "sightings": [{"uuid": "22d7efeb-b243-4dee-9dee-aedf00ff70a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "46eea3b9-b0b9-4097-b390-6f54c41c247e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "8ffabfc1-42eb-40dc-90c1-1cdffb8110ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "8c29b961-309f-4147-b65f-eabd76b7f254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "c96b608c-235d-4990-b672-abc9428d1f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "45d51af1-97af-47b7-837f-a3002c0df8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52760", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mphh55tg752z", "content": "CVE-2026-52760: Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console", "creation_timestamp": "2026-06-29T21:38:09.276806Z"}, {"uuid": "3fcc70fe-dd11-41e9-bd21-4d703338540e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52766", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6x7x-gcmf-7r8x", "content": "", "creation_timestamp": "2026-07-09T22:35:25.831980Z"}, {"uuid": "78fb76a3-2de1-444e-9dcd-d2e313150749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqame3yhu22w", "content": "CVE-2026-52766 - yeswiki\nYesWiki has a security issue that allows anyone with page write access to delete any wiki page, including the front page and admin pages, without permission. This is because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#yeswiki #composer #CVE #infosec", "creation_timestamp": "2026-07-09T21:48:04.611651Z"}, {"uuid": "77df63ba-dab2-46bd-a7e9-1fc4f45698f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52769", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-vw42-752g-5mrp", "content": "", "creation_timestamp": "2026-07-09T22:35:21.384961Z"}, {"uuid": "c32178e3-63e7-4bfc-8802-baa206a60495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52767", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g", "content": "", "creation_timestamp": "2026-07-09T22:35:23.624585Z"}, {"uuid": "a58f7735-2453-42b4-89e1-9c9dcf710c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52763", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-89v6-j5x6-cmj3", "content": "", "creation_timestamp": "2026-07-09T22:35:28.110245Z"}, {"uuid": "3fbe86b0-7387-42ea-a668-41f4b7b05f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52762", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-65p8-9433-jpcp", "content": "", "creation_timestamp": "2026-07-09T22:35:30.371028Z"}, {"uuid": "14dcb439-ab1c-43e7-b062-8743ae23c15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52761", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdordalpi2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52761 \u0432 ModSecurity: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6515887C-8EEB-4748-857D-97543F8AA3E3", "creation_timestamp": "2026-07-11T03:09:14.982603Z"}, {"uuid": "adfaa91c-9f14-4501-b8f6-216f4a504739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muqffu42zr2t", "content": "\ud83d\udea8 CVE-2026-52766 \u2014 CVSS 9.1 CRITICAL\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52766\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T02:07:09.702081Z"}, {"uuid": "bbe9773a-6c7f-469d-ab71-1b0ef980d35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqlqwkhx222", "content": "\ud83d\udd34 CVE-2026-52766 - Critical (9.1)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52766/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T04:00:43.771243Z"}, {"uuid": "8b06fe33-6d09-49cd-add5-fbeb34e3c175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqlr5bgtt2k", "content": "\ud83d\udfe0 CVE-2026-52767 - High (8.2)\n\nYesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatur...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52767/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T04:00:51.997270Z"}, {"uuid": "6074fa27-f225-4fdd-8c98-d8107017ca41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqskl3epj2m", "content": "\ud83d\udfe0 CVE-2026-52769 - High (8.3)\n\nYesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, the POST /ap...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52769/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:27.174620Z"}, {"uuid": "54e1f26f-b371-47dd-9c37-b8326becc963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52767", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117235738545754231", "content": "CVE-2026-52767: YesWiki (4.6.2-4.6.5) improper openssl_verify check via loose boolean negation allows auth bypass (CVSS 8.2). Attackers can forge signatures and trigger processActivity(). Unpatched\u2014upgrade to 4.6.6 or disable affected endpoints now. https://www.valtersit.com/cve/", "creation_timestamp": "2026-09-08T13:50:10.090860Z"}, {"uuid": "e1196ec4-5e36-4393-93d2-3c24d9647aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52767", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muz63khtyq2x", "content": "CVE-2026-52767: YesWiki (4.6.2-4.6.5) improper openssl_verify check via loose boolean negation allows auth bypass (CVSS 8.2). Attackers can forge signatures and trigger processActivity(). Unpatched\u2014upgrade to 4.6.6 or disable affected endpoints now. https://www.valtersit.com/cve/", "creation_timestamp": "2026-09-08T13:50:05.981090Z"}, {"uuid": "4a62b5de-ce7d-4d5a-bfc2-8c681f7bd13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52769", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muyjfv5of62l", "content": "CVE-2026-52769: YesWiki 4.6.2\u20134.6.6 SSRF via HTTP Signature keyId in public API. Unauthenticated attacker forces server-side GET to arbitrary URLs. CVSS 8.3. Unpatched\u2014update to 4.6.6 or restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-52769/ #CVE #YesWiki #in", "creation_timestamp": "2026-09-08T07:40:04.276750Z"}, {"uuid": "4279481b-0945-44c9-a625-5598fddf44ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52769", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117234283410060725", "content": "CVE-2026-52769: YesWiki 4.6.2\u20134.6.6 SSRF via HTTP Signature keyId in public API. Unauthenticated attacker forces server-side GET to arbitrary URLs. CVSS 8.3. Unpatched\u2014update to 4.6.6 or restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-52769/ #CVE #YesWiki #in", "creation_timestamp": "2026-09-08T07:40:05.102576Z"}, {"uuid": "79398e72-bb39-4c02-a427-de1fbd0e58f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv2smcll3c2l", "content": "CVE-2026-52766: YesWiki <=4.6.5 lets any user delete any wiki page via {{erasespamedcomments}} - no auth check, default write ACL for all. CVSS 9.1. Unpatched. Update now or disable action. https://www.valtersit.com/cve/CVE-2026-52766/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-09T05:30:01.910665Z"}, {"uuid": "33bd6457-9988-4e03-88e5-adfe972a5174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117239434533714151", "content": "CVE-2026-52766: YesWiki <=4.6.5 lets any user delete any wiki page via {{erasespamedcomments}} - no auth check, default write ACL for all. CVSS 9.1. Unpatched. Update now or disable action. https://www.valtersit.com/cve/CVE-2026-52766/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-09T05:30:02.256429Z"}]}