{"vulnerability": "cve-2026-7151", "sightings": [{"uuid": "a7b3c4be-f5aa-42e8-a36d-a2f41ee17389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7151", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116472852759271517", "content": "", "creation_timestamp": "2026-04-26T20:18:12.092942Z"}, {"uuid": "1ada83a7-7f25-4536-9f56-27b1e62adac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7151", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkqefj5pr22p", "content": "\ud83d\udccc CVE-2026-7151 - A vulnerability was determined in Tenda HG3 2.0. Impacted is the function formUploadConfig of the file /boaform/formIPv6Routing. This manipulation of ... https://www.cyberhub.blog/cves/CVE-2026-7151", "creation_timestamp": "2026-04-30T19:37:08.821932Z"}, {"uuid": "c5c25dc6-6a88-46c9-87f4-0da1adb2ad3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71518", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-19T00:00:27.023691Z"}, {"uuid": "6756b36c-e97e-46a3-bd9f-c1dcc1cb3d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71518", "type": "published-proof-of-concept", "source": "Telegram/GwuC3cy-O_zU2KFCuHY_MrTkUTBOKWE1Dd5EfEUwy3SR_6M", "content": "", "creation_timestamp": "2026-08-19T00:00:28.221185Z"}, {"uuid": "ae162606-27d9-4843-814b-0843484fd023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71518", "type": "published-proof-of-concept", "source": "Telegram/GwuC3cy-O_zU2KFCuHY_MrTkUTBOKWE1Dd5EfEUwy3SR_6M", "content": "", "creation_timestamp": "2026-08-18T01:00:04.862203Z"}, {"uuid": "26b9afa4-dcfc-4e3a-87ca-b3a3338ccaaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71518", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-18T04:00:03.569987Z"}, {"uuid": "8055fae2-f477-4e28-a7f9-1ef7c5561d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71518", "type": "seen", "source": "https://t.me/GithubRedTeam/98532", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-71518\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a IlhomjonR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 22:23:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-71518 \u2014 Typemill <2.26.0 unauthenticated authorization bypass in media file download (path-equivalent URL variants). Advisory + PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.312705Z"}, {"uuid": "5c880c35-5ab9-4933-a067-fa375ffef07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71518", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/492", "content": "CVE-2026-71518", "creation_timestamp": "2026-08-28T00:00:39.138370Z"}, {"uuid": "a95ee805-b652-4fde-a8c8-c3083b0843f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71513", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpewfmcze22", "content": "\ud83d\udfe0 CVE-2026-71513 - High (8.8)\n\nNLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that vali...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71513/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T23:00:39.973334Z"}, {"uuid": "8a298305-6985-4a49-9467-efb632a44b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71518", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98532", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-71518\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a IlhomjonR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 22:23:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-71518 \u2014 Typemill <2.26.0 unauthenticated authorization bypass in media file download (path-equivalent URL variants). Advisory + PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.393494Z"}, {"uuid": "3bea7f59-f308-48e4-9a28-2a87b6a2d16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71518", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/492", "content": "CVE-2026-71518", "creation_timestamp": "2026-08-27T15:00:05.446773Z"}, {"uuid": "21706a69-a223-4175-b2d0-6ad7bafb9d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71513", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtpm5xzluq2i", "content": "CVE-2026-71513 - Critical RCE in NLTK AllowlistUnpickler. Attribute traversal bypasses allowlist to execute arbitrary code via crafted transition-parser models. CVSS 8.8. Update to NLTK 3.10.3 immediately. #CVE #NLTK #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-71513/", "creation_timestamp": "2026-08-23T01:10:09.986666Z"}, {"uuid": "a1c61450-ad5b-489a-9685-a2c9443c2eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71513", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117142154798250045", "content": "CVE-2026-71513 - Critical RCE in NLTK AllowlistUnpickler. Attribute traversal bypasses allowlist to execute arbitrary code via crafted transition-parser models. CVSS 8.8. Update to NLTK 3.10.3 immediately. #CVE #NLTK #infosec\nhttps://www.valtersit.com/cve/CVE-2026-71513/", "creation_timestamp": "2026-08-23T01:10:31.488726Z"}, {"uuid": "deaba14b-145c-432e-bb72-893fa697d2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71513", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtpq737hfw2z", "content": "Another Critical RCE, Another Day of Pretending the Basement Is Fine\nPANIC 78% | Lag 0.0h | CVE-2026-71513 is a critical remote code execution flaw in NLTK AllowlistUnpickler. Crafted transiti\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-23T02:22:22.501191Z"}]}