{"vulnerability": "cve-2026-7533", "sightings": [{"uuid": "68dd15f8-6477-4e0b-bd49-e5b88997d0b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7533", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvizyjvor2p", "content": "CVE-2026-7533 - Easy Digital Downloads\nCVE ID : CVE-2026-7533\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7. This ...", "creation_timestamp": "2026-05-28T07:33:52.218496Z"}, {"uuid": "358526e8-ab9e-4ed8-b2ed-924c4e27b91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7xqoa5ef2b", "content": "CVE-2026-75337\nThe web function that serves static files in Yu AI Code Mother version 4.3 does not check the file name properly. Because of this, anyone can request files from outside the intended folder and view their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T13:20:04.380824Z"}, {"uuid": "8c492b2d-76ba-437e-aa55-dd9584a5a8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75338", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu3d4cdhyt2p", "content": "CVE-2026-75338\nThe Disconf configuration manager version 2.6.36 does not require a login for several data\u2011retrieval web addresses, so anyone on the network can view every setting and file stored in the system. This exposes\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-27T17:00:06.965326Z"}, {"uuid": "631d9762-85b9-4597-aa98-6b6f1e8bd669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75336", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu3do4cli62y", "content": "CVE-2026-75336\nThe Funiture 1.0.0 application can be tricked into executing unauthorized commands when users submit data to its tool pages (/sys/tool/select.json and /sys/tool/update.json). This could let an attacker read,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-27T17:10:04.578370Z"}, {"uuid": "f8b0279d-9946-4a29-b3e6-a595b7858ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75338", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/74tycll5lymes", "content": "CVE-2026-75338 - Disconf Incorrect Access Control Vulnerability\nCVE ID : CVE-2026-75338\n \n Published : Aug. 26, 2026, 11:17 p.m. | 51\u00a0minutes ago\n \n Description : disconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access Control. The conf...", "creation_timestamp": "2026-08-27T00:20:11.023619Z"}, {"uuid": "db802391-6187-4e34-a21d-f1d53d2b6441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7d5sgwinzfrmq", "content": "CVE-2026-75336 - Funiture SQL Injection\nCVE ID : CVE-2026-75336\n \n Published : Aug. 26, 2026, 11:17 p.m. | 51\u00a0minutes ago\n \n Description : Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.\n \n Severity:...", "creation_timestamp": "2026-08-27T00:26:11.038087Z"}]}