{"vulnerability": "cve-2026-72710", "sightings": [{"uuid": "3bde5717-334c-41c2-88ff-a5684ed806aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72710", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/33hs5bqrmvemc", "content": "CVE-2026-72710 - SPIP\nCVE ID : CVE-2026-72710\n \n Published : 11. September 2026 16:39 | 18\u00a0Minuten ago\n \n Description : SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where the arg parameter resolves SQL table names without enforci...", "creation_timestamp": "2026-09-11T17:20:00.345455Z"}, {"uuid": "c098425e-ef23-4298-91b2-c7d8b1b226a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72710", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvb4dlewfi2t", "content": "CVE-2026-72710 - spip\nThe SPIP content management system versions earlier than 4.4.18 let an attacker who can obtain a valid one\u2011time token add crafted entries to the internal job queue. When the scheduled jobs run,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#spip #CVE #infosec", "creation_timestamp": "2026-09-11T17:40:05.269127Z"}, {"uuid": "647bddd4-8d8a-4fd1-af43-c0e20e6d99cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72710", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvb5xblbm42n", "content": "\ud83d\udea8 CVE-2026-72710 \u2014 CVSS 9.3 CRITICAL\n\nSPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where the arg ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72710\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T18:09:00.337001Z"}]}