{"vulnerability": "cve-2026-59708", "sightings": [{"uuid": "0997078f-6a71-4071-8d61-9cbabe298a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59708", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3dbuyp2o2i", "content": "CVE-2026-59708 - Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint\nCVE ID : CVE-2026-59708\n \n Published : July 7, 2026, 6:38 p.m. | 36\u00a0minutes ago\n \n Description : The GET /api/v1/public/:accessId/portfolio endpoint in ghostfolio accepts private access IDs ...", "creation_timestamp": "2026-07-07T19:22:27.510687Z"}]}