{"vulnerability": "CVE-2026-49972", "sightings": [{"uuid": "90bf435a-c1cf-4543-9df9-d15399e5cdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49972", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkdkx3yfd2x", "content": "CVE-2026-49972 - Laravel-Mediable\nCVE ID : CVE-2026-49972\n \n Published : July 13, 2026, 6:16 p.m. | 17\u00a0minutes ago\n \n Description : Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uplo...", "creation_timestamp": "2026-07-13T18:37:27.742661Z"}, {"uuid": "c24c726c-a998-49cb-bf8b-b35e54865482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49972", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkib7g5wz2k", "content": "\ud83d\udfe0 CVE-2026-49972 - High (8.8)\n\nLaravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated at...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49972/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-13T20:01:30.056544Z"}, {"uuid": "b2d4f8f8-0122-4a17-88bc-8e9b1c95dd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49972", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ac3xd7krfrddv", "content": "CVE-2026-93352 - Laravel-Mediable 7.0.0\nCVE ID : CVE-2026-93352\n \n Published : Sept. 23, 2026, 9:36 p.m. | 25\u00a0minutes ago\n \n Description : Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidd...", "creation_timestamp": "2026-09-23T22:34:56.638806Z"}, {"uuid": "011b1156-2b78-4447-8b50-dcb2c4428044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49972", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mw7tut2emd2c", "content": "\ud83d\udea8 EUVD-2026-85706\n\ud83d\udcca 9.3/10\n\ud83c\udfe2 plank\n\n\ud83d\udcdd Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidden_extensions bloc...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85706\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-09-23T23:01:11.775886Z"}, {"uuid": "a439efbb-1dc5-4cc3-a9cc-f077b549f826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49972", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw7tx6svkn27", "content": "\ud83d\udd34 CVE-2026-93352 - Critical (9.8)\n\nLaravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93352/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-23T23:02:32.397571Z"}, {"uuid": "cc847c2a-5f96-402a-84ed-1808903c8b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49972", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7xmszfcq2r", "content": "\ud83d\udea8 CVE-2026-93352 \u2014 CVSS 9.3 CRITICAL\n\nLaravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht exten...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93352\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T00:08:18.345353Z"}]}