{"vulnerability": "cve-2026-7592", "sightings": [{"uuid": "1bd43e1f-c2f7-4249-9252-1a1f78bc0ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75926", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6jg2f2xrzxmht", "content": "CVE-2026-75926 - Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant\nCVE ID : CVE-2026-75926\n \n Published : Aug. 18, 2026, 3:47 p.m. | 26\u00a0minutes ago\n \n Description : Hugo 0.161.0 placed the Node asset pipelines behind the Node.js...", "creation_timestamp": "2026-08-18T16:39:37.247484Z"}, {"uuid": "a8e42749-93a3-46e8-8de8-88b44e98b3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75926", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mteoxl65zs2b", "content": "\ud83d\udfe0 CVE-2026-75926 - High (8.6)\n\nHugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code run...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75926/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T17:00:59.914577Z"}, {"uuid": "2336ac4c-77f7-4947-a33c-fba99821145d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75926", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtessxhqb22f", "content": "\ud83d\udea8 CVE-2026-75926 \u2014 CVSS 9.3 CRITICAL\n\nHugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running throu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75926\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T18:09:59.196962Z"}, {"uuid": "e6d72245-5dd6-4b14-8b7b-54a917cedb52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75926", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtetwuhhdk2b", "content": "CVE-2026-75926 - hugo\nA security issue in Hugo's default configuration for TailwindCSS allows an attacker to execute arbitrary system commands during the build process. This is a concern for users who use\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hugo #gohugoio #CVE #infosec", "creation_timestamp": "2026-08-18T18:30:04.565978Z"}, {"uuid": "46306f0d-816a-4175-8aa0-0f65bb8adaba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75922", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/a2qowb4i2bolr", "content": "CVE-2026-75922: Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line", "creation_timestamp": "2026-08-23T18:54:48.811856Z"}, {"uuid": "a54790f3-6d2e-4dcb-9ccb-7fb3d1bddd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75922", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gqak3r26wcsli", "content": "CVE-2026-75922 - Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line\nCVE ID : CVE-2026-75922\n \n Published : Aug. 23, 2026, 7:16 p.m. | 44\u00a0minutes ago\n \n Description : Reverse::...", "creation_timestamp": "2026-08-23T20:06:41.554481Z"}, {"uuid": "b2caf8c2-57c3-42f8-bdb6-eebec56484de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75922", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtsry2hlui26", "content": "CVE-2026-75922 is trending. Hype score 2, currently #10 on cvemon.\n\nReverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line. PSGI hands PATH_INFO to an\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-75922", "creation_timestamp": "2026-08-24T07:32:16.473715Z"}, {"uuid": "ec0cd7b9-4503-4326-acc8-4d4330ffa09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupzboykz22j", "content": "CVE-2026-75925 - ixon vpn client\nThe IXON VPN client (versions before 1.4.7) can be tricked into adding extra commands to its own configuration file. Because the client does not check who is making changes, an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ixon #CVE #infosec", "creation_timestamp": "2026-09-04T22:30:04.809228Z"}, {"uuid": "820cadde-fa5d-43d8-afa1-95fde2baadd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2bsq4p4l67sch", "content": "CVE-2026-75925 - IXON VPN Client CRLF Injection\nCVE ID : CVE-2026-75925\n \n Published : Sept. 4, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root o...", "creation_timestamp": "2026-09-04T22:58:56.506449Z"}, {"uuid": "6f9ea744-691e-4e93-91b4-85d470710348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq336j23o2s", "content": "\ud83d\udd34 CVE-2026-75925 - Critical (9.6)\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75925/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T23:02:14.743104Z"}, {"uuid": "ea64060f-8cca-46df-8fd2-3e94cee1ac4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muq6poakgw2t", "content": "\ud83d\udea8 CVE-2026-75925 \u2014 CVSS 9.4 CRITICAL\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to exe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75925\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T00:07:22.980345Z"}, {"uuid": "584cdaf5-ed78-4585-b71f-3115847f46f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117232828506352595", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (<1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.949688Z"}, {"uuid": "56d2dc72-0564-4878-9722-7333e3937912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxuqa775u27", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (<1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.000486Z"}]}