{"vulnerability": "CVE-2026-1080", "sightings": [{"uuid": "53611560-e043-4050-9c0d-5c03b1a1be04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1080", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3melmweqeno2j", "content": "", "creation_timestamp": "2026-02-11T13:55:16.338223Z"}, {"uuid": "75aafc12-5b0a-4499-a23f-f66385cad080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnh2nacgen2p", "content": "CVE-2026-10805 - Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend\nCVE ID : CVE-2026-10805\n \n Published : June 4, 2026, 6:16 a.m. | 16\u00a0minutes ago\n \n Description : A flaw was found in NetworkManager. This local privilege esca...", "creation_timestamp": "2026-06-04T07:04:06.773012Z"}, {"uuid": "4c41882e-9d4b-4d16-a32b-c871f9576ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhsuz3at24", "content": "CVE-2026-10800 - PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash\nCVE ID : CVE-2026-10800\n \n Published : June 4, 2026, 10:16 a.m. | 16\u00a0minutes ago\n \n Description : A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this...", "creation_timestamp": "2026-06-04T10:59:54.858150Z"}, {"uuid": "1f2eb556-ae8c-43ad-afe6-955da1517019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhur2bark26", "content": "CVE-2026-10807 - mjperpinosa stumasy change_profile_image.php unrestricted upload\nCVE ID : CVE-2026-10807\n \n Published : June 4, 2026, 2:16 p.m. | 16\u00a0minutes ago\n \n Description : A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function...", "creation_timestamp": "2026-06-04T14:51:31.987788Z"}, {"uuid": "c4379e92-9f7a-4123-8814-c31fc6f0c2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhw3glr5g2b", "content": "CVE-2026-10806 - mjperpinosa stumasy add_post.php unrestricted upload\nCVE ID : CVE-2026-10806\n \n Published : June 4, 2026, 2:16 p.m. | 16\u00a0minutes ago\n \n Description : A vulnerability was found in mjperpinosa stumasy. The affected element is an unknown function of the file appl...", "creation_timestamp": "2026-06-04T15:15:19.199459Z"}, {"uuid": "d7217b64-54df-45d9-9246-e9c6f09f0d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhx5xhi3a2g", "content": "CVE-2026-10809 - itsourcecode Fees Management System manage_user.php sql injection\nCVE ID : CVE-2026-10809\n \n Published : June 4, 2026, 2:16 p.m. | 16\u00a0minutes ago\n \n Description : A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an u...", "creation_timestamp": "2026-06-04T15:34:32.962230Z"}, {"uuid": "b248d990-f6c0-494b-a1f1-d01313207c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108039", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/64fzwpunerqo6", "content": "CVE-2026-108039: Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits", "creation_timestamp": "2026-10-09T11:21:21.230674Z"}, {"uuid": "f8b23ed4-ee1b-434d-b2f2-49bb7c2b8932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108039", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cag77mph6ed7r", "content": "CVE-2026-108039 - Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits\nCVE ID : CVE-2026-108039\n \n Published : Oct. 9, 2026, 10:22 a.m. | 57\u00a0minutes ago\n \n Description : By default, StaxUtils placed no limit on the total n...", "creation_timestamp": "2026-10-09T11:53:27.127890Z"}, {"uuid": "4f03ea83-bb88-4835-a7a4-d3be027bce1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108093", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117411988702241048", "content": "CVE-2026-108093 Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and crash the GIMP application.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108093https://access.redhat.com/security/cve/CVE-2026-108093https://bugzilla.redhat.com/show_bug.cgi?id=2548607#RedHat #RedHatEnterpriseLinux10 #RedHatEnterpriseLinux6 #RedHatEnterpriseLinux7 #RedHatEnterpriseLinux8 #RedHatEnterpriseLinux9#CVE_2026_108093#bot", "creation_timestamp": "2026-10-09T16:52:49.568430Z"}, {"uuid": "eb1dfc46-df77-4c26-b8dc-3b2df2a7f93b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108096", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117412316585252696", "content": "CVE-2026-108096 Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries.\nThis issue has been addressed in @aws-amplify/graphql-index-transformer  3.1.2 https://www.npmjs.com/package/@aws-amplify/graphql-index-transformer/v/3.1.2  (included in @aws-amplify/data-construct  1.17.4 https://www.npmjs.com/package/@aws-amplify/data-construct/v/1.17.4  and @aws-amplify/graphql-api-construct  1.21.4 https://www.npmjs.com/package/@aws-amplify/graphql-api-construct/v/1.21.4 ). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108096https://www.npmjs.com/package/@aws-amplify/graphql-index-transformer/v/3.1.2https://www.npmjs.com/package/@aws-amplify/graphql-api-construct/v/1.21.4https://www.npmjs.com/package/@aws-amplify/data-construct/v/1.17.4https://aws.amazon.com/security/security-bulletins/2026-133-aws/https://github.com/aws-amplify/amplify-category-api/security/advisories/GHSA-69c4-mvf5-5xm3#npmjs #AWS #aws-amplify/graphql-index-transformer #aws-amplify/graphql-api-construct #aws-amplify/data-construct#CVE_2026_108096#bot", "creation_timestamp": "2026-10-09T18:16:12.726859Z"}, {"uuid": "f178fd64-fba0-4de0-ba72-a56eab744f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108096", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/je7cob37afphk", "content": "CVE-2026-108096 - Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category\nCVE ID : CVE-2026-108096\n \n Published : Oct. 9, 2026, 6:17 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : Improper authorization in the query resolvers generated by @aw...", "creation_timestamp": "2026-10-09T20:02:20.139221Z"}]}