{"vulnerability": "cve-2026-7270", "sightings": [{"uuid": "6eb383e4-1b42-4e47-8986-e2d7111c53d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqf5kghxy2z", "content": "\ud83d\udfe0 CVE-2026-7270 - High (7.8)\n\nAn operator precedence bug in the kernel results in a scenario where a buffer overflow causes att...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7270/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:50:35.198516Z"}, {"uuid": "768a44b2-96cb-4ee2-b992-d105eb987bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mkzuipjhgo2f", "content": "~Cybergcca~\nCCCS released 5 advisories covering critical updates for IBM, Dell, FreeBSD, Ubuntu, and CISA ICS products.\n-\nIOCs: CVE-2026-42511, CVE-2026-7270, CVE-2026-7164\n-\n#PatchManagement #ThreatIntel #Vulnerability", "creation_timestamp": "2026-05-04T14:19:13.140724Z"}, {"uuid": "625010db-f7c6-4dbd-b935-51c538864c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-415", "content": "", "creation_timestamp": "2026-05-04T06:44:59.000000Z"}, {"uuid": "d26eabe6-bbcd-4c4a-8064-cc898d189d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7270", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116534940626646604", "content": "(calif.io) CVE-2026-7270: Root Privilege Escalation in FreeBSD via Kernel Memory Corruption in execve()\nNew critical LPE in FreeBSD: CVE-2026-7270 enables root access via a one-character error in `execve()` kernel handling. Exploit targets `sshd-session` with `LD_PRELOAD` injection through a race condition.\nIn brief - CVE-2026-7270 is a local privilege escalation flaw in FreeBSD (since 2013) caused by a sign error in `execve()` memory handling. Attackers can corrupt kernel memory during shebang script execution, inject `LD_PRELOAD`, and gain root via `sshd-session`. Affects default installations.\nTechnically - The bug in `sys/kern/kern_exec.c` (`exec_args_adjust_args`) miscalculates `memmove` size (`+ consume` instead of `- consume`), causing a 2,024-byte overflow into an adjacent `exec_map` entry. Exploit preseeds kernel memory at offset 265,166 bytes to replace `sshd-session` environment with `LD_PRELOAD=/tmp/evil.so`. Race condition optimized via fragmented argument strings to slow `execve` calls. Challenges include avoiding `MADV_FREE` under memory pressure and a 3.1% panic risk. PoC achieves root in seconds.\nSource: https://blog.calif.io/p/cve-2026-7270-how-i-get-root-on-freebsd\n#Cybersecurity #ThreatIntel", "creation_timestamp": "2026-05-07T19:29:19.325637Z"}, {"uuid": "9b2412ce-d290-45a0-9028-501bd9188080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://bsky.app/profile/imil.net/post/3mlczqxgg2c2i", "content": "CVE-2026-7270: root on FreeBSD with a shell script :(\nblog.calif.io/p/cve-2026-7...", "creation_timestamp": "2026-05-08T05:47:16.209110Z"}, {"uuid": "1d33ad11-4217-4f04-af4a-de0544ec6130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mlf77ax52d2i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-31431: 202 interactions\nCVE-2026-0073: 79 interactions\nCVE-2026-41940: 66 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-0073: 66 interactions\nCVE-2026-43284: 61 interactions\nCVE-2026-7270: 32 interactions\n", "creation_timestamp": "2026-05-09T02:30:09.062117Z"}, {"uuid": "ef6015cb-77d7-469b-9d0d-ac2c3f6de31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3mlhtu5ejtf2x", "content": "A FreeBSD security advisory details a local privilege escalation vulnerability (CVE-2026-7270) in the execve() system call. An unprivileged user could exploit an operator precedence bug leading to a buffer overflow, potentially gaining superuser privileges. Users are advised to update their systems.", "creation_timestamp": "2026-05-10T03:44:58.994959Z"}, {"uuid": "b6afbcb6-880b-4ef9-84bf-fa347c22b7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://t.me/S_E_Reborn/6346", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0432\u044b\u0437\u043e\u0432\u0435 execve, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432\u043e FreeBSD\n\n\u0412\u043e FreeBSD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-7270), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 FreeBSD, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441 2013 \u0433\u043e\u0434\u0430. \u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u0440\u0430\u0431\u043e\u0442\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 FreeBSD 11.0 \u043f\u043e 14.4. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 FreeBSD 15.0-RELEASE-p7, 14.4-RELEASE-p3, 14.3-RELEASE-p12 \u0438 13.5-RELEASE-p13. \u0414\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u0432\u0435\u0442\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0442\u0447.\n\n \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435:\nhttps://opennet.ru/65408/\nhttps://opennet.me/65408/", "creation_timestamp": "2026-05-09T12:50:32.000000Z"}, {"uuid": "c665e736-3a41-43b8-88b7-12ee8bce9ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "Telegram/Yr-1pp_OQlsAxCk9olefEOIlRJklCfDEolOYJn0mNy08hY4", "content": "", "creation_timestamp": "2026-05-09T09:00:04.000000Z"}, {"uuid": "49c7fe25-2ffa-4078-90b6-20e5d9dffb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://t.me/bdufstecru/3151", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 exec_args_adjust_args() \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c FreeBSD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-06463\nCVE-2026-7270\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.freebsd.org/security/advisories/FreeBSD-SA-26:13.exec.asc", "creation_timestamp": "2026-05-12T14:22:35.000000Z"}, {"uuid": "eb84cb57-6af1-412b-a9ce-27d685a21b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72702", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtutsbu6id25", "content": "CVE-2026-72702 - grav\nWebsites that run Grav CMS versions before 2.0.16 may accept requests that appear to come from the same site when they actually originate from an attacker\u2019s domain. This happens because\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-25T03:10:06.012054Z"}, {"uuid": "05b3ed68-9ef2-4f7d-9bd3-63f203f476a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72702", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtuwzzyhhc2c", "content": "\ud83d\udea8 CVE-2026-72702 \u2014 CVSS 9.3 CRITICAL\n\nGrav CMS before 2.0.16 contains an origin validation bypass in the Uri::referrer() and Pages::referrerRoute...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72702\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T04:08:07.790355Z"}, {"uuid": "bd04c79b-6b7a-4437-97db-7701d051317b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72702", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117154265387278343", "content": "CVE-2026-72702 | Grav CMS <2.0.16 | CRITICAL (CVSS 9.3): Origin validation bypass via weak Referer checks lets attackers defeat CSRF defenses. No fix confirmed \u2014 use extra controls, monitor vendor updates. https://radar.offseq.com/threat/cve-2026-72702-origin-validation-error-in-getgrav-grav-4b8f0ff64f944a7c #OffSeq #CVE202672702 #GravCMS #WebSecurity", "creation_timestamp": "2026-08-25T04:30:24.074721Z"}, {"uuid": "40844234-34f1-4960-b72e-d57c32cf5c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72702", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtuybw6tuu2e", "content": "Grav CMS <2.0.16 faces a CRITICAL Referer origin validation bug (CVSS 9.3). Attackers can bypass protections like CSRF. No confirmed patch yet \u2014 review your controls. More: https://radar.offseq.com/threat/cve-2026-72702-origin-validation-error-in-getgrav-grav-4b8f0ff64f944a7c #OffSeq #GravCMS #CV...", "creation_timestamp": "2026-08-25T04:30:27.422917Z"}, {"uuid": "b88b5b01-54db-4687-843f-0e5bd0117452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72702", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtvf4k2ydd2p", "content": "CVE-2026-72702\nWebsites using Grav CMS versions older than 2.0.16 may accept a fake Referer header that looks similar to the site\u2019s own address. This lets an attacker make the system think a request comes from the same site,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T08:20:05.278279Z"}, {"uuid": "f0e67038-af0e-4ecf-a686-0c52f45a6c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45762", "content": "CVE-2026-7270  FreeBSD local privilege escalation\n*\ninfo + exploit", "creation_timestamp": "2026-09-02T06:00:13.104749Z"}, {"uuid": "cca97e52-9741-4ace-9b70-9ade8e18a6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7270", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/45762", "content": "CVE-2026-7270  FreeBSD local privilege escalation\n*\ninfo + exploit", "creation_timestamp": "2026-09-03T00:00:48.761765Z"}, {"uuid": "2d387d96-e7ba-4b6f-85c4-a4b0975cf985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72708", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f7bg27osoyjba", "content": "CVE-2026-72708 - SPIP\nCVE ID : CVE-2026-72708\n \n Published : 11. September 2026 16:37 | 20\u00a0Minuten ago\n \n Description : SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the public sitemap endpoint where the MySQL escaper spip_mysql_cite() in ...", "creation_timestamp": "2026-09-11T17:12:00.464166Z"}, {"uuid": "bf4fe099-91b1-4107-bf6a-fed6c1453ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eezs3rf76rjy6", "content": "CVE-2026-72709 - SPIP\nCVE ID : CVE-2026-72709\n \n Published : 11. September 2026 16:38 | 19\u00a0Minuten ago\n \n Description : SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauthenticated att...", "creation_timestamp": "2026-09-11T17:18:00.330922Z"}, {"uuid": "35154c25-29fd-4ea9-9a74-684f54f1a747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rspmhl2b", "content": "CVE-2026-72709 - spip\nVersions of SPIP prior to 4.4.18 let an attacker who can get a special code reset the password of any account, including the admin. Because the system does not check if the user is allowed to do\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-09-11T17:30:09.419599Z"}, {"uuid": "b7d16834-05cb-4d0a-85e6-faf60defbf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvb5wzfnju2n", "content": "\ud83d\udea8 CVE-2026-72709 \u2014 CVSS 9.3 CRITICAL\n\nSPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72709\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T18:08:50.803593Z"}, {"uuid": "7627401c-f88a-4a86-b753-d6376eaf7ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72708", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvbhgioimc2x", "content": "SPIP 4.4.18\u672a\u6e80\u306eSitemap\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u8a8d\u8a3c\u4e0d\u8981\u306a\u30d6\u30e9\u30a4\u30f3\u30c9SQLi\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u653b\u6483\u8005\u306f\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u4efb\u610f\u306e\u5185\u5bb9\u3092\u6f0f\u6d29\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-72708 CVSS 7.5 | HIGH", "creation_timestamp": "2026-09-11T20:58:34.321641Z"}, {"uuid": "5f807666-689b-4836-998c-3bb602b27091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbl2goosk2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T22:03:24.569955Z"}, {"uuid": "82971ced-1a9b-424a-ac2a-b284f8f84ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbrxxrgcx27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T00:07:18.124678Z"}, {"uuid": "8ae5cfe2-ff97-4f2c-afa4-fc2853d24794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvcgxbd35j2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T06:22:42.870247Z"}, {"uuid": "18ba1687-01f2-4128-9873-f53cbaece440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvckngwk3b2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T07:28:47.849581Z"}, {"uuid": "a306df3d-af25-4317-b4f3-a13500cd60ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvcri74leb2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T09:31:08.365397Z"}, {"uuid": "9022a63f-e406-4953-808d-b0244cdde15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvd7sglcql2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T13:47:25.396765Z"}, {"uuid": "f9cf827c-b00e-43c6-9552-cf1a222c8021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdglqdvni2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T15:48:56.097054Z"}, {"uuid": "f059df49-3b5a-4356-9316-6f5cc24ef0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdvapbkx52i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T20:11:12.165693Z"}, {"uuid": "9dbd1a34-ea63-4673-9bf4-5ef330efae9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mver6idefs2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T04:31:01.652393Z"}, {"uuid": "63cbdb88-a006-4c34-8be9-c7c138043007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mveyh4mvi22c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T06:41:08.611333Z"}, {"uuid": "503ba884-c221-460a-b029-e3e51c212246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfgfc4txf2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T10:50:38.676955Z"}, {"uuid": "4b76c08c-1f3f-4767-b7c2-8f61774b7622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfjy3ektd2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/ editer_auteur\nCVSS 9.8 \u00b7 EPSS 0.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T11:54:50.344439Z"}, {"uuid": "4ec1f494-608b-405e-91c7-11fd3d78c2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72709", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvgupyhwyu2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-72709: SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauth\u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-72709\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T00:39:49.802968Z"}]}