{"vulnerability": "cve-2026-6639", "sightings": [{"uuid": "f18a3ae1-3f59-477e-816d-eed24b4fc63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66397", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i", "content": "CVE-2026-66397\nA vulnerability in phpMyFAQ, a FAQ management system, allows authenticated attackers to delete any file on the server. This could allow an attacker to disable security features and create new administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.553722Z"}, {"uuid": "a98670e4-3d66-4f64-9869-0de25d14c57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j", "content": "CVE-2026-66396\nSiYuan, a software used for managing documents, has a security issue. An attacker with permission to edit documents can embed malicious code in an image, which can then be executed when the document is opened.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:04.163402Z"}, {"uuid": "60a5406b-fd9d-4676-8793-4a2bdf2f37ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e", "content": "CVE-2026-66398\nAuthenticated administrators with specific privileges can upload malicious files and execute code on the server. This allows attackers to access sensitive data and potentially take control of the system. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:09.208479Z"}, {"uuid": "ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniagskn23", "content": "CVE-2026-66395\nA security flaw in SiYuan Desktop's bazaar plugin allows attackers to inject malicious code by sending a specially crafted web link. This could potentially allow attackers to take control of a user's computer.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.037819Z"}, {"uuid": "91706235-3d02-4807-b645-f9935f077549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6639", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u", "content": "CVE-2026-6639 ai-copilot-content-generator (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T08:15:10.456160Z"}, {"uuid": "e974c529-59b9-4c09-bfe4-1dc5154da7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpbkhwdi52z", "content": "\ud83d\udfe0 CVE-2026-66393 - High (7.5)\n\nNLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.deco...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66393/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T22:00:19.001667Z"}, {"uuid": "54f22ff2-448e-4890-8df7-abff726d6537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtr3ei4wt52t", "content": "CVE-2026-66393 - DoS vulnerability in NLTK. Deeply nested JSON triggers unhandled recursion crash in Python. CVSS 7.5. Update to 3.9.4 immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66393/", "creation_timestamp": "2026-08-23T15:14:54.058961Z"}, {"uuid": "6d706a7a-7c0b-41bc-8753-dcb21ba1d69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117145475063628409", "content": "CVE-2026-66393 - DoS vulnerability in NLTK. Deeply nested JSON triggers unhandled recursion crash in Python. CVSS 7.5. Update to 3.9.4 immediately. #CVE #Python #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66393/", "creation_timestamp": "2026-08-23T15:14:55.246364Z"}, {"uuid": "9f8cfbeb-f084-4f5d-bb34-1e8acae82da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66391", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrnelnpg2m24", "content": "CVE-2026-66391: Apache Wicket: leaked and missing CSP headers", "creation_timestamp": "2026-07-27T16:58:56.019180Z"}, {"uuid": "c1d34c61-5158-4e13-b8b3-373a297daa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu4lqbmiqk24", "content": "\ud83d\udccc CVE-2026-66393 - NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of ser... https://www.cyberhub.blog/cves/CVE-2026-66393", "creation_timestamp": "2026-08-28T05:07:06.781046Z"}, {"uuid": "0f7f130d-11ad-4c0c-8ba2-d4e113b77646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66390", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrndzrqhm622", "content": "CVE-2026-66390: Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence", "creation_timestamp": "2026-07-27T16:48:56.324363Z"}, {"uuid": "9820086c-205e-4674-9fa2-e86ca1611ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyyb7zo2z", "content": "CVE-2026-66395 - siyuan\nSiYuan Desktop users are at risk if they click on a specially crafted link. This could allow an attacker to take control of their computer. To stay safe, update SiYuan Desktop to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-07-27T18:00:04.892366Z"}, {"uuid": "ad6841b5-0485-42ca-a602-650edc3e439f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyzne4w22", "content": "CVE-2026-66398 - phpmyfaq\nAuthenticated administrators with certain privileges can upload malicious code to a phpMyFAQ installation. This can lead to unauthorized changes to the system, potentially causing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpmyfaq #thorsten #CVE #infosec", "creation_timestamp": "2026-07-27T18:00:06.023929Z"}, {"uuid": "451fec1a-6d5d-4694-a2f9-ba873f104c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66394", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrni4m3hix23", "content": "CVE-2026-66394\nSiYuan, a web application, is vulnerable to a type of cyber attack that allows an attacker to execute malicious code on the application's server. This can happen when an attacker tricks the application into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T18:02:05.873024Z"}, {"uuid": "7dee0ca6-d535-440e-8110-905d74fdb87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnia5azfv2a", "content": "CVE-2026-66396\nSiYuan, a software tool, fails to properly protect against malicious images. This means an attacker with permission to edit documents can inject code that runs in your browser when you open the document. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T18:04:04.974808Z"}, {"uuid": "8d554908-2e8e-413b-b4c9-24c4d317f46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66393", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rf74-v2fm-23pw", "content": "", "creation_timestamp": "2026-09-02T16:35:07.388573Z"}]}