{"vulnerability": "CVE-2026-10809", "sightings": [{"uuid": "d7217b64-54df-45d9-9246-e9c6f09f0d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhx5xhi3a2g", "content": "CVE-2026-10809 - itsourcecode Fees Management System manage_user.php sql injection\nCVE ID : CVE-2026-10809\n \n Published : June 4, 2026, 2:16 p.m. | 16\u00a0minutes ago\n \n Description : A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an u...", "creation_timestamp": "2026-06-04T15:34:32.962230Z"}, {"uuid": "4f03ea83-bb88-4835-a7a4-d3be027bce1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108093", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117411988702241048", "content": "CVE-2026-108093 Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and crash the GIMP application.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108093https://access.redhat.com/security/cve/CVE-2026-108093https://bugzilla.redhat.com/show_bug.cgi?id=2548607#RedHat #RedHatEnterpriseLinux10 #RedHatEnterpriseLinux6 #RedHatEnterpriseLinux7 #RedHatEnterpriseLinux8 #RedHatEnterpriseLinux9#CVE_2026_108093#bot", "creation_timestamp": "2026-10-09T16:52:49.568430Z"}, {"uuid": "eb1dfc46-df77-4c26-b8dc-3b2df2a7f93b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108096", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117412316585252696", "content": "CVE-2026-108096 Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries.\nThis issue has been addressed in @aws-amplify/graphql-index-transformer  3.1.2 https://www.npmjs.com/package/@aws-amplify/graphql-index-transformer/v/3.1.2  (included in @aws-amplify/data-construct  1.17.4 https://www.npmjs.com/package/@aws-amplify/data-construct/v/1.17.4  and @aws-amplify/graphql-api-construct  1.21.4 https://www.npmjs.com/package/@aws-amplify/graphql-api-construct/v/1.21.4 ). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108096https://www.npmjs.com/package/@aws-amplify/graphql-index-transformer/v/3.1.2https://www.npmjs.com/package/@aws-amplify/graphql-api-construct/v/1.21.4https://www.npmjs.com/package/@aws-amplify/data-construct/v/1.17.4https://aws.amazon.com/security/security-bulletins/2026-133-aws/https://github.com/aws-amplify/amplify-category-api/security/advisories/GHSA-69c4-mvf5-5xm3#npmjs #AWS #aws-amplify/graphql-index-transformer #aws-amplify/graphql-api-construct #aws-amplify/data-construct#CVE_2026_108096#bot", "creation_timestamp": "2026-10-09T18:16:12.726859Z"}, {"uuid": "f178fd64-fba0-4de0-ba72-a56eab744f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108096", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/je7cob37afphk", "content": "CVE-2026-108096 - Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category\nCVE ID : CVE-2026-108096\n \n Published : Oct. 9, 2026, 6:17 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : Improper authorization in the query resolvers generated by @aw...", "creation_timestamp": "2026-10-09T20:02:20.139221Z"}]}