{"vulnerability": "CVE-2026-39757", "sightings": [{"uuid": "fb93f0ff-bcd9-4581-bf68-99dccece671c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39757", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76r6r2rf2q", "content": "\ud83d\udea8 CVE-2026-39757 \u2014 CVSS 9.9 CRITICAL\n\nSubscriber Arbitrary File Upload in Taskbot <= 6.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-39757\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:08:32.604002Z"}, {"uuid": "9e092fed-8c12-4dcb-89ba-2fb32293fb23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39757", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxct3bi3z322", "content": "CVE-2026-39757 - taskbot\nThe Taskbot plugin for WordPress (versions up to 6.6) allows users with the Subscriber role to upload files of any type. This could let an attacker place malicious code on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#taskbot #amentotech #CVE #infosec", "creation_timestamp": "2026-10-07T20:50:05.056607Z"}]}