{"vulnerability": "cve-2026-7290", "sightings": [{"uuid": "4cd7e070-f498-43c5-aef2-afb74921a34d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mklja2whsq2k", "content": "", "creation_timestamp": "2026-04-28T21:20:15.058629Z"}, {"uuid": "bb4fa77a-af35-4552-86ab-72adaec6463d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72900", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117072531713464991", "content": "Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.\n\nCVE-2026-72898 Metabase SQL injection via password reset endpoint\nCVE-2026-72899 Metabase SQL injection via public card or dashboard\nCVE-2026-72900", "creation_timestamp": "2026-08-10T18:04:27.908034Z"}, {"uuid": "d52c4cf7-8e1a-46a9-a666-3cd811d39f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72900", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22", "content": "Since Metabase couldn't be bothered, it looks like CISA has assigned CVEs.\n\n  * CVE-2026-72898 Metabase SQL injection via password reset endpoint\n  * CVE-2026-72899 Metabase SQL injection via public card or dashboard\n  * CVE-2026-72900\n\n", "creation_timestamp": "2026-08-10T18:04:38.547271Z"}, {"uuid": "81f90830-3ef6-4987-96a2-0bbcecc5ccdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/axjmmjtqtvcf7", "content": "CVE-2026-72900 - Metabase information exposure\nCVE ID : CVE-2026-72900\n \n Published : Aug. 10, 2026, 6:18 p.m. | 11\u00a0minutes ago\n \n Description : Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.\n \n Severity: 7.1 | HIGH\n...", "creation_timestamp": "2026-08-10T18:44:56.673288Z"}, {"uuid": "0161d470-7910-4dfe-b413-e6b814b51ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72901", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqx5ag3x72r", "content": "CVE-2026-72901 - dokploy\nAn authenticated user can run commands on the Dokploy server with root privileges. This is a serious security risk because it allows an attacker to take control of the server. To fix this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:34:04.524478Z"}, {"uuid": "84d9d6d4-1f41-49fd-be65-e5ad7b68eb68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72902", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqx5bpxs72r", "content": "CVE-2026-72902 - dokploy\nDokploy, a self-hosted Platform as a Service, had a security issue that allowed an authenticated user to execute commands on a server. This means an attacker could gain access to sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:34:05.580432Z"}, {"uuid": "689228bf-e614-42e7-8a28-69a526c0c97b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72901", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqyn7cqox2w", "content": "\ud83d\udd34 CVE-2026-72901 - Critical (9.9)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72901/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T21:00:55.076892Z"}, {"uuid": "6d48ca24-7c3c-43d8-96c3-6578c82e63d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72904", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqzt2lszw2d", "content": "CVE-2026-72904 - firecrawl\nAn attacker can exploit a weakness in Firecrawl's data extraction to read any file on the system. This is a serious issue because an attacker doesn't need to be a system administrator to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firecrawl #CVE #infosec", "creation_timestamp": "2026-08-10T21:22:04.153968Z"}, {"uuid": "d97bb204-a14d-4e31-a8d1-2cd42d998966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72903", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msr3yfnwhf2h", "content": "\ud83d\udfe0 CVE-2026-72903 - High (8.1)\n\nTabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.235, a malicio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72903/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T22:00:53.415650Z"}, {"uuid": "74ad7db0-e76f-4e2b-848a-69fd248b2acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72904", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msslyrr2zp2o", "content": "CVE-2026-72904\nFirecrawl's extraction feature had a security flaw that allowed attackers to read any file on the server. This happened when an attacker sent a specially crafted schema to Firecrawl, which then included the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-11T12:20:03.278750Z"}, {"uuid": "2ee1fdfe-3cc8-49cf-95ff-c16858e798fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72900", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mttbs4dbmu2r", "content": "\ud83d\udd17 CVE : CVE-2026-72898, CVE-2026-72899, CVE-2026-72900", "creation_timestamp": "2026-08-24T12:15:14.140523Z"}]}