{"vulnerability": "cve-2026-7329", "sightings": [{"uuid": "4f38ed69-38dc-4829-af61-448071571914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7329", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdzmyv47p2b", "content": "CVE-2026-7329\nAn authenticated user with limited access to MarkLogic Server can gain full administrator privileges, allowing them to access and modify sensitive data. This vulnerability affects versions before 11.3.6 and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T17:14:04.847038Z"}, {"uuid": "d4f26a01-6f9a-4134-a393-b3eb8b72f256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73293", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvm5prwfh2w", "content": "\ud83d\udfe0 CVE-2026-73293 - High (8.8)\n\nSemaphore UI is a web interface for managing DevOps tools.  Prior to 2.18.19 and from 2.19.0-alph...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73293/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T17:00:48.781388Z"}, {"uuid": "c00799d2-10a1-4c54-be4b-fc06dbc26711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73293", "type": "seen", "source": "https://mastodon.social/ap/users/115755483699003887/statuses/117083604642539548", "content": "\ud83d\udfe0 CVE-2026-73293 - High (8.8)\nSemaphore UI is a web interface for managing DevOps tools.  Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/{id}/roles to create a cust...\n\ud83d\udd17 https://www.thehackerwire.com/vulnerability/CVE-2026-73293/\n#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack", "creation_timestamp": "2026-08-12T17:01:15.682283Z"}, {"uuid": "1586a707-c015-4bd2-9376-9a44fdebc9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73294", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvm73rpzr2h", "content": "\ud83d\udd34 CVE-2026-73294 - Critical (9.9)\n\nSemaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, rep...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73294/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T17:01:35.125907Z"}, {"uuid": "84f67d3e-7af8-419e-855c-eb25ab0d0cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73292", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvm5j55sh2w", "content": "\ud83d\udfe0 CVE-2026-73292 - High (8.3)\n\nSemaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/{id}/...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73292/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T17:00:41.472193Z"}, {"uuid": "dd5f8010-dcda-40fa-8e1b-9abd1ee5a485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73294", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvna6ouz72q", "content": "CVE-2026-73294 - semaphore\nSemaphore UI's web interface for managing DevOps tools has a security issue that allows a malicious user to run arbitrary system commands on the server. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#semaphore #semaphoreui #CVE #infosec", "creation_timestamp": "2026-08-12T17:20:04.730631Z"}, {"uuid": "d0f62d62-2c79-455d-9aa2-d5bb761b394f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvphqwo4x2u", "content": "CVE-2026-73296\nThe Microsoft UFO framework for automating devices had a security flaw that allowed an attacker to access sensitive information on an Android device connected to it without being authorized. This could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-12T18:00:05.908527Z"}, {"uuid": "cc132a5c-536a-4f2b-ab5b-326a5570ad74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73299", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvqljaubz2q", "content": "CVE-2026-73299 - prompty\nA security issue in Prompty, a markdown file format for LLM prompts, allowed an attacker to run malicious code on the server. This could potentially lead to unauthorized actions or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#prompty #microsoft #CVE #infosec", "creation_timestamp": "2026-08-12T18:20:13.907632Z"}, {"uuid": "9e5e6d7e-4b28-41e9-8c0b-fb8a3fc49175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73299", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvw7lsbas2u", "content": "\ud83d\udd34 CVE-2026-73299 - Critical (10)\n\nPrompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73299/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T20:00:49.080382Z"}, {"uuid": "a5fd205e-d438-4f71-987d-23f26e7ed940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7329", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msg2xcrimm2x", "content": "~Cybergcca~\nAdvisories issued for Zyxel firewall/AP vulnerabilities and Progress MarkLogic Server flaws.\n-\nIOCs: CVE-2026-7326, CVE-2026-7327, CVE-2026-7329\n-\n#Progress #ThreatIntel #VulnManagement #Zyxel", "creation_timestamp": "2026-08-06T12:43:03.394986Z"}, {"uuid": "b28e7a86-ee69-4993-930b-321e1683fe53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73294", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4ewe7ihh2e", "content": "CVE-2026-73294\nSemaphore UI's web interface for managing DevOps tools is affected. An attacker can execute arbitrary server commands by manipulating a project's git URL. Update Semaphore UI to version 2.18.17 or 2.19.5-beta2\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T09:40:03.926895Z"}, {"uuid": "ca799ac4-6972-42e5-b6f2-00e87a1ab687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7329", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781", "content": "", "creation_timestamp": "2026-08-06T16:15:42.546094Z"}, {"uuid": "1ae3b81b-f613-47af-97a3-ac940a7e00e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3muegt3vg6y25", "content": "Nieuwe kwetsbaarheid in Microsoft UFO opent de deur voor volledige controle over\n\nEen ernstige kwetsbaarheid, bekend als CVE-2026-73296, is ontdekt in Microsoft's open-source UFO automatiseringsframework, met een CVSS-score van 9.4. Deze kwetsbaarheid, geclassificeerd als CWE-306 en CWE-862,...", "creation_timestamp": "2026-08-31T08:00:31.304696Z"}, {"uuid": "21feee7f-baeb-4305-8bf7-c8b658c1e31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117190957574523212", "content": "Microsoft UFO Vulnerability Allows Remote Android Device Takeover\nMicrosoft patched a critical vulnerability in its UFO automation framework (CVE-2026-73296) that allows unauthenticated attackers to remotely control Android devices and steal sensitive screen data. The flaw affects versions prior to 3.0.8 when configured for remote access.\n**If you use Microsoft's UFO automation framework, update it to version 3.0.8 or later ASAP and turn on the required API key authentication. Older versions let anyone on the network fully control your connected Android devices. If you can't update immediately, change the setting back to `localhost` and block incoming traffic to ports 8020 and 8021 at your firewall.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/microsoft-ufo-vulnerability-allows-remote-android-device-takeover-i-v-r-8-e/gD2P6Ple2L", "creation_timestamp": "2026-08-31T16:43:54.352825Z"}, {"uuid": "e3a95433-6431-43ba-a2e4-80533e2d788a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-03T08:00:04.016401Z"}, {"uuid": "18fe1693-953b-4212-80c9-984fe6f2bd3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73299", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mumoukn6yp24", "content": "A critical Prompty vulnerability (CVE-2026-73299, CVSS 10) let a crafted .prompty file escape the template engine and run arbitrary JavaScript in Node.js.\n\n#Prompty #Microsoft #SSTI #RCE #CVE202673299", "creation_timestamp": "2026-09-03T14:45:47.808627Z"}, {"uuid": "932572e2-c120-415b-a17a-ad97d6b7fa9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73295", "type": "seen", "source": "https://gist.github.com/alon710/b48a4802ab7de78f3b7bc06aac45d10c", "content": "# CVE-2026-73295: CVE-2026-73295: DOM-based Cross-Site Scripting (XSS) in Material for MkDocs Search Suggestions\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73295\n\n## Summary\nCVE-2026-73295 is a DOM-based Cross-Site Scripting (XSS) vulnerability affecting Material for MkDocs versions 7.2.0 through 9.7.6. When the optional 'search.suggest' feature is enabled, the client-side 'mountSearchSuggest' function processes user-controlled inputs from the URL 'q' parameter and writes them directly to the DOM using an unsafe innerHTML sink without sanitization.\n\n## TL;DR\nA DOM-based XSS vulnerability in Material for MkDocs (v7.2.0 to v9.7.6) allows unauthenticated remote attackers to execute arbitrary JavaScript in the victim's browser context via a crafted query parameter when the optional search suggestion feature is enabled.\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.4 (Medium)\n- **EPSS Score**: 0.00185 (0.185%)\n- **Impact**: DOM-based Cross-Site Scripting (XSS)\n- **Exploit Status**: Proof-of-Concept (PoC) available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Material for MkDocs with search.suggest feature enabled\n- **Material for MkDocs**: >= 7.2.0, < 9.7.7 (Fixed in: `9.7.7`)\n\n## Mitigation\n\n- Upgrade Material for MkDocs to version 9.7.7 or later.\n- Disable the search.suggest feature in mkdocs.yml if an upgrade is not immediately possible.\n\n**Remediation Steps:**\n1. Verify current Material for MkDocs version.\n2. Update the package using pip install --upgrade mkdocs-material>=9.7.7.\n3. If immediate upgrade is impossible, open mkdocs.yml, locate 'features' list under 'theme', and comment out '- search.suggest'.\n4. Rebuild and redeploy the documentation site.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/squidfunk/mkdocs-material/security/advisories/GHSA-xvg9-69gf-fjrf)\n- [NVD CVE-2026-73295 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-73295)\n- [Official Patch Commit](https://github.com/squidfunk/mkdocs-material/commit/52fb6be8aafe326419f34dc94d3211e7bbfbfb25)\n- [Release Notes (v9.7.7)](https://github.com/squidfunk/mkdocs-material/releases/tag/9.7.7)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73295) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T20:32:54.881615Z"}, {"uuid": "01334f51-dc0c-4584-ac8a-4cdeb4dc1de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73292", "type": "published-proof-of-concept", "source": "https://github.com/semaphoreui/semaphore/security/advisories/GHSA-8cj9-r88m-8945", "content": "", "creation_timestamp": "2026-09-03T20:35:07.020149Z"}, {"uuid": "606e782f-c1df-48ae-9077-bdfdccbea9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7329", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqjcdrh6s2b", "content": "Progress\u306eDB\u88fd\u54c1\u300cMarkLogic Server\u300d\u306b\u8106\u5f31\u6027 - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d7\u4ef6\n\nProgress Software\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u88fd\u54c1\u300cMarkLogic Server\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u3002\u91cd\u8981\u5ea6\u304c\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u3082\u8907\u6570\u4fee\u6b63\u3055\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u3053\u306e\u3046\u30617\u4ef6\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u300c9.0\u300d\u4ee5\u4e0a\u3068\u8a55\u4fa1\u3055\u308c\u3066\u304a\u308a\u3001\u306a\u304b\u3067\u3082\u300cCVE-2026-7329\u300d\u300cCVE-2026-8709\u300d\u300cCVE-2026-9193\u300d\u306e3\u4ef6\u306b\u3064\u3044\u3066\u306f\u300c9.9\u300d\u3068\u3055\u308c\u308b\u3002", "creation_timestamp": "2026-09-05T03:16:47.116107Z"}, {"uuid": "3e4e8070-c572-4645-88c6-76304b01d575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73294", "type": "published-proof-of-concept", "source": "https://github.com/semaphoreui/semaphore/security/advisories/GHSA-xp7j-h7jc-4w8p", "content": "", "creation_timestamp": "2026-09-08T18:35:03.580229Z"}]}