{"vulnerability": "cve-2026-7322", "sightings": [{"uuid": "771b5478-2339-4458-b982-99a495db3a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7322", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkn577kg6v2w", "content": "\ud83d\udd17 CVE : CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323, CVE-2026-7324", "creation_timestamp": "2026-04-29T12:50:21.201444Z"}, {"uuid": "e23ed516-9876-48fe-affc-f4cdd843553e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkkztxjzyk2i", "content": "", "creation_timestamp": "2026-04-28T16:45:06.003837Z"}, {"uuid": "a0612c43-285e-4960-966b-81d9ede5dc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7322", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-4", "content": "", "creation_timestamp": "2026-04-29T05:55:52.000000Z"}, {"uuid": "747fecfe-ddb5-42a2-b8b9-d1c4cf6a4627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7322", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkr57minds2e", "content": "\u300cFirefox\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u8106\u5f31\u6027\u3092\u89e3\u6d88\n\nMozilla Foundation\u306f\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30d6\u30e9\u30a6\u30b6\u300cFirefox\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u306e\u4fee\u6b63\u3082\u542b\u307e\u308c\u308b\u3002\n\n...\n\n\u300cCVE-2026-7322\u300d\u306f\u3001\u30e1\u30e2\u30ea\u7834\u58ca\u306e\u8106\u5f31\u6027\u3002\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\u91cd\u8981\u5ea6\u30924\u6bb5\u968e\u4e2d\u3082\u3063\u3068\u3082\u9ad8\u3044\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u3057\u305f\u3002\n\n\u540c\u3058\u304f\u30e1\u30e2\u30ea\u306e\u5b89\u5168\u6027\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u300cCVE-2026-7323\u300d\u300cCVE-2026-7324\u300d\u3084\u3001\u300cAudio/Video\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u300d\u306b\u304a\u3051\u308b\u60c5\u5831\u6f0f\u6d29\u306e...", "creation_timestamp": "2026-05-01T03:01:14.255052Z"}, {"uuid": "9810e46b-242b-45d7-9658-0148b1d7211d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7322", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkzyhj5sg62e", "content": "\ud83d\udd17 CVE : CVE-2026-7320, CVE-2026-7321, CVE-2026-7322, CVE-2026-7323, CVE-2026-7324", "creation_timestamp": "2026-05-04T15:30:08.072640Z"}, {"uuid": "d8aa9a93-e665-4dd2-bdbc-bec4fcecd665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7322", "type": "seen", "source": "https://bsky.app/profile/innovatopia.jp/post/3ml3yargmns2r", "content": "Thunderbird 150.0.1\u7dca\u6025\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u516c\u958b\u3001\u30e1\u30e2\u30ea\u7834\u640d\u3067\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u6050\u308c\u20144\u4ef6\u306e\u8106\u5f31\u6027\u3092Mozilla\u304c\u4fee\u6b63\ninnovatopia.jp/cyber-securi...\n\n\u4eca\u56de\u306e\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3067\u7279\u306b\u6ce8\u76ee\u3057\u305f\u3044\u306e\u306f\u30014\u4ef6\u306e\u3046\u30611\u4ef6\uff08CVE-2026-7322\uff09\u304c\u6df1\u523b\u5ea6\u300ccritical\uff08\u7dca\u6025\uff09\u300d\u306b\u5206\u985e\u3055\u308c\u3066\u3044\u308b\u70b9\u3067\u3059\u3002Mozilla\u306f\u300c\u30e1\u30e2\u30ea\u7834\u640d\u306e\u75d5\u8de1\u304c\u3042\u308a\u3001\u5341\u5206\u306a\u52b4\u529b\u3092\u304b\u3051\u308c\u3070\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u3063\u305f\u300d\u3068\u660e\u8a18\u3057\u3066\u304a\u308a\u3001\u3053\u308c\u306f\u653b\u6483\u8005\u304c\u6a19\u7684\u306ePC\u4e0a\u3067\u610f\u56f3\u3057\u305f\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u52d5\u304b\u305b\u3066\u3057\u307e\u3046\u3001\u6700\u3082\u8b66\u6212\u3059\u3079\u304d\u30bf\u30a4\u30d7\u306e\u8106\u5f31\u6027\u3092\u610f\u5473\u3057\u307e\u3059\u3002", "creation_timestamp": "2026-05-05T10:31:45.736067Z"}, {"uuid": "7d410b00-671d-4a28-bfe1-a53a34a2c828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7322", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mmacwwtc2k22", "content": "\u8907\u6570\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u300cFirefox 150.0.2\u300d\u3092\u30ea\u30ea\u30fc\u30b9 - Mozilla\n\nMozilla Foundation\u306f\u73fe\u5730\u6642\u95932026\u5e745\u67087\u65e5\u3001\u30a6\u30a7\u30d6\u30d6\u30e9\u30a6\u30b6\u300cFirefox\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\n\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u3068\u3057\u3066\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u306a\u308b\u300cFirefox 150.0.2\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3082\u306e\u3002\u91cd\u8981\u5ea6\u304c4\u6bb5\u968e\u4e2d\u30012\u756a\u76ee\u306b\u9ad8\u3044\u300c\u9ad8\uff08High\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u60273\u4ef6\u3092\u4fee\u6b63\u3057\u305f\u3002\n\n4\u670828\u65e5\u306b\u300cFirefox 150.0.1\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u3001\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u300cCVE-2026-7322\u300d\u3092\u542b\u3080\u8106\u5f31\u60274\u4ef6\u3092\u4fee\u6b63\u3057\u3066\u3044\u308b\u304c\u3001\u4eca\u2026", "creation_timestamp": "2026-05-19T21:18:53.551411Z"}, {"uuid": "58da9da1-4bf6-4605-8838-2b2fb2d95cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73225", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msuyfulooo2n", "content": "CVE-2026-73225 - Path traversal in electerm FTP/SFTP client. Malicious server writes files outside download dir. CVSS 8.1. Update to 3.15.120 now. #CVE #infosec #electerm\n\nhttps://www.valtersit.com/cve/CVE-2026-73225/", "creation_timestamp": "2026-08-12T11:07:26.864575Z"}, {"uuid": "913d2071-4d00-4b36-a456-1cfae45a4ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73225", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117082216617617937", "content": "CVE-2026-73225 - Path traversal in electerm FTP/SFTP client. Malicious server writes files outside download dir. CVSS 8.1. Update to 3.15.120 now. #CVE #infosec #electerm\nhttps://www.valtersit.com/cve/CVE-2026-73225/", "creation_timestamp": "2026-08-12T11:07:27.217826Z"}, {"uuid": "2991a888-b196-42f3-8b3e-e1597dea6c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73224", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstfqjae4f2b", "content": "\ud83d\udfe0 CVE-2026-73224 - High (8.8)\n\nelecterm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73224/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T20:00:54.211497Z"}, {"uuid": "9807d1c6-9c5e-4bb5-994e-575bac7ce63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73226", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstfqx6go224", "content": "\ud83d\udfe0 CVE-2026-73226 - High (8.8)\n\nelecterm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73226/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T20:01:00.036406Z"}, {"uuid": "d1d416be-e6e1-4170-809a-9c2efb02198e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73225", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstfqq6fpj2h", "content": "\ud83d\udfe0 CVE-2026-73225 - High (8.1)\n\nelecterm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73225/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T20:00:56.885638Z"}, {"uuid": "f904440c-5e39-4377-a717-00d50227d488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73228", "type": "seen", "source": "https://gist.github.com/alon710/25c48d25038e76519874ccf73ad1c753", "content": "# CVE-2026-73228: CVE-2026-73228: Uncontrolled Resource Consumption (DATA_UPLOAD_MAX_MEMORY_SIZE Bypass) in Django REST Framework\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-09-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73228\n\n## Summary\nA vulnerability in Django REST Framework (DRF) before version 3.17.2 allows remote attackers to bypass the native Django DATA_UPLOAD_MAX_MEMORY_SIZE limits. When parsing JSON or URL-encoded request bodies, DRF's JSONParser and FormParser read directly from the low-level HTTP network stream, bypassing Django's high-level request size checks and causing Denial of Service (DoS) via resource exhaustion.\n\n## TL;DR\nDjango REST Framework bypassed Django's native DATA_UPLOAD_MAX_MEMORY_SIZE configuration, letting unauthenticated attackers exhaust system memory and trigger Out-Of-Memory (OOM) crashes by sending massive JSON or URL-encoded payloads.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400 / CWE-770\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.3 (Medium)\n- **Exploit Maturity**: PoC / Functional\n- **CISA KEV**: Not Listed\n- **Affected Component**: rest_framework/request.py (Request._parse)\n\n## Affected Systems\n\n- Django REST Framework (DRF) installations prior to version 3.17.2\n- **django-rest-framework**: < 3.17.2 (Fixed in: `3.17.2`)\n\n## Mitigation\n\n- Upgrade Django REST Framework (DRF) to version 3.17.2 or higher.\n- Configure NGINX or reverse proxy `client_max_body_size` to block large payloads at the network edge.\n- Implement validation middleware that accesses `request.body` explicitly prior to routing to DRF.\n\n**Remediation Steps:**\n1. Update your dependencies using pip (`pip install --upgrade djangorestframework>=3.17.2`) or Poetry (`poetry add djangorestframework@^3.17.2`).\n2. Configure your web server (e.g., NGINX) with `client_max_body_size 5M` inside relevant location blocks to prevent huge requests from hitting the application.\n3. In critical setups, implement custom middleware to enforce body evaluation for incoming application/json and application/x-www-form-urlencoded requests.\n4. Audit any custom DRF parsers that inherit from `BaseParser` to ensure they either subclass the patched `JSONParser` or enforce explicit limits.\n\n## References\n\n- [GitHub Security Advisory GHSA-2m8g-3cmr-wg3w](https://github.com/encode/django-rest-framework/security/advisories/GHSA-2m8g-3cmr-wg3w)\n- [NVD - CVE-2026-73228](https://nvd.nist.gov/vuln/detail/CVE-2026-73228)\n- [DRF Pull Request #10013](https://github.com/encode/django-rest-framework/pull/10013)\n- [DRF Release 3.17.2](https://github.com/encode/django-rest-framework/releases/tag/3.17.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73228) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-01T20:33:07.867348Z"}, {"uuid": "744011b7-0586-4d28-a1b2-7e1328b8c07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73229", "type": "published-proof-of-concept", "source": "https://github.com/encode/django-rest-framework/security/advisories/GHSA-g47c-3xmw-q6m2", "content": "", "creation_timestamp": "2026-09-01T20:35:03.134854Z"}, {"uuid": "e260f3c2-8178-4a95-9018-b5eacd878605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73222", "type": "published-proof-of-concept", "source": "https://github.com/davila7/claude-code-templates/security/advisories/GHSA-79wm-x847-7cvg", "content": "", "creation_timestamp": "2026-09-03T20:35:04.324724Z"}]}