{"vulnerability": "CVE-2026-1190", "sightings": [{"uuid": "4f3076e0-2caa-41ce-91d0-5e0c95f3eb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mde7i3kllt26", "content": "", "creation_timestamp": "2026-01-26T21:40:47.504888Z"}, {"uuid": "46ab58bb-af9f-4107-878d-5b1b4e18321b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11903", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrztzlmdh22y", "content": "\ud83d\udccc CVE-2026-11903 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module).\n\nThis ... https://www.cyberhub.blog/cves/CVE-2026-11903", "creation_timestamp": "2026-08-01T16:07:06.888927Z"}, {"uuid": "a2e53b1d-2db4-40d9-95e0-3b479b8b4904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11907", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msjlf7akvi25", "content": "CVE-2026-11907 stream (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-07T22:17:08.459172Z"}, {"uuid": "745b2be6-8251-4dc2-9487-938308024591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11903", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msecmdqkcc2v", "content": "\u300cMOVEit Transfer\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - \u6700\u65b0\u7248\u3078\u66f4\u65b0\u3092\n\nProgress Software\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u8ee2\u9001\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u300cMOVEit Transfer\u300d\u306b\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u3001\u4fee\u6b63\u3092\u884c\u3063\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67088\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-11903\u300d\u300cCVE-2026-10698\u300d\u300cCVE-2026-10699\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-11903\u300d\u306f\u3001\u30a2\u30c9\u30db\u30c3\u30af\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u5224\u660e\u3057\u305f\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u306e\u8106\u5f31\u6027\u3002\u60aa\u7528\u306b\u306f\u8a8d\u8a3c\u304c\u5fc5\u8981\u3060\u304c...", "creation_timestamp": "2026-08-05T19:54:49.195574Z"}, {"uuid": "dd2434e4-ecc5-47f9-b792-2beba5b83f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqebkjdd623", "content": "CVE-2026-11900 - Ad Inserter\nCVE ID : CVE-2026-11900\n \n Published : July 3, 2026, 7:53 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : The Ad Inserter \u2013 Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and inc...", "creation_timestamp": "2026-07-03T10:40:53.093210Z"}, {"uuid": "d4b52c50-d90f-4f1b-af34-2b6893929f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11900", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mprl4px3nh2e", "content": "CVE-2026-11900 ad-inserter (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-03T22:16:07.069369Z"}, {"uuid": "e6275ed5-dbf7-4186-a6c2-c7e481b9fe4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11900", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpro6c4hpf2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11900 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ad Inserter \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4394965C-A92B-48BD-9613-6A08A1FE96D9", "creation_timestamp": "2026-07-03T23:10:40.988221Z"}, {"uuid": "54dd3705-a354-4ac1-9196-c1015f6aa5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11903", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nvsx5n62g", "content": "CVE-2026-11903 - Stored XSS in MOVEit Transfer Ad Hoc module\nCVE ID : CVE-2026-11903\n \n Published : July 8, 2026, 3:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress ...", "creation_timestamp": "2026-07-08T17:37:53.229147Z"}, {"uuid": "f698e240-2346-4e27-8d91-ef819a7e1af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11903", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-678", "content": "", "creation_timestamp": "2026-07-08T20:15:14.552622Z"}, {"uuid": "75e92401-28b1-4a60-9a52-817fc9d7ee44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11903", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq7jtsygg62k", "content": "Progress patched three MOVEit Transfer flaws, including a stored XSS bug (CVE-2026-11903). No exploitation is confirmed. Update now.\n\n#MOVEit #MOVEitTransfer #StoredXSS #XSS #CVE #ProgressSoftware #PatchNow #InfoSec", "creation_timestamp": "2026-07-09T11:30:31.606894Z"}, {"uuid": "6292c86c-4db7-48e6-bf60-b22898404165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11901", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5idvtt32a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11901 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Hotel Booking: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F89C34EB-8720-470F-87DA-7A125FD35BE7", "creation_timestamp": "2026-07-11T07:32:39.625276Z"}, {"uuid": "de5f61ca-9624-4ac3-8d7d-f66dd8568661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11909", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqk7lcy44r2f", "content": "CVE-2026-11909 - drupal/examples\nA feature in Drupal's Examples for Developers project allows unauthorized access to files. This could lead to sensitive data being exposed. If you\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#drupal #Packagisthttpspackagesdrupalorg8 #CVE #infosec", "creation_timestamp": "2026-07-13T17:26:05.383607Z"}]}