{"vulnerability": "CVE-2026-6736", "sightings": [{"uuid": "08538d8b-d9eb-4164-b1c5-9ccd846bfc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlclnkbewn2e", "content": "CVE-2026-6736 - Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider\nCVE ID : CVE-2026-6736\n \n Published : May 7, 2026, 10:16 p.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : A...", "creation_timestamp": "2026-05-08T01:34:49.133715Z"}, {"uuid": "9cd57845-0d5d-459d-a415-63b5abd1a8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67364", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117122415059936959", "content": "CVE-2026-67364 (CVSS 10): CRITICAL pre-auth PHP code injection in Balbooa Forms for Joomla (v1.0.0 \u2013 2.4.3.1). Exploitable via unescaped query param in custom-PHP handler. Update to 2.4.3.2+ now. https://radar.offseq.com/threat/cve-2026-67364-cwe-94-improper-control-of-generation-of-code-code-injection-in-balbooacom-balbooa-36f88c0efc17ca75 #OffSeq #Joomla #CVE202667364 #WebSecurity", "creation_timestamp": "2026-08-19T13:30:27.877489Z"}, {"uuid": "20bb8f07-6077-4d69-ba36-8fb149e643b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67364", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtgto2pvl72f", "content": "Balbooa Forms for Joomla (v1.0.0 \u2013 2.4.3.1) hit by CRITICAL CVE-2026-67364. PHP code injection allows unauthenticated code execution. Update urgently! \ud83d\udea8 https://radar.offseq.com/threat/cve-2026-67364-cwe-94-improper-control-of-generation-of-code-code-injection-in-balbooacom-balbooa-36f88c0efc17ca...", "creation_timestamp": "2026-08-19T13:30:28.595119Z"}, {"uuid": "42199501-9da6-4613-8148-7d6ec745c2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5oc52rw6ldhq4", "content": "CVE-2026-67362 - Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5\nCVE ID : CVE-2026-67362\n \n Published : Aug. 21, 2026, 7:19 p.m. | 20\u00a0minutes ago\n \n Description : Joomla Extension - j2commerce.com - Open r...", "creation_timestamp": "2026-08-21T20:12:39.782171Z"}, {"uuid": "b7a369c3-70df-481c-a253-1dedb4ddb7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67361", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hsl4hpxdlcedh", "content": "CVE-2026-67361 - Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5\nCVE ID : CVE-2026-67361\n \n Published : Aug. 21, 2026, 7:23 p.m. | 16\u00a0minutes ago\n \n Description : Joomla Extens...", "creation_timestamp": "2026-08-21T20:26:39.938216Z"}, {"uuid": "994d4930-8c5c-4c2a-838b-8e17dfee1936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67364", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtgvq7w4dr2e", "content": "\ud83d\udea8 CVE-2026-67364 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - CWE-94 / CWE-95 |...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67364\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T14:07:33.456982Z"}, {"uuid": "ce4361fb-4e29-4489-bce2-865c3a48639b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67364", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtgza73sqt2b", "content": "CVE-2026-67364 - balbooa forms extension for joomla\nA security issue affects Joomla's Balbooa Forms extension. An attacker can inject malicious PHP code without needing a password, potentially leading to data theft and system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T15:10:11.321976Z"}, {"uuid": "a5ef9abc-f4ee-4952-95fd-e0a99fb8c113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67365", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt32hi3mp32p", "content": "CVE-2026-67365 - icagenda extension for joomla\nThe Joomla icagenda.com extension has a security flaw that allows attackers to execute unauthorized database queries without logging in. This can lead to sensitive data exposure\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-14T21:00:06.644109Z"}, {"uuid": "ce5f6bfe-9c7f-4177-a74c-d3cc84d05ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67365", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117096581361904284", "content": "CVE-2026-67365: Unauthenticated SQL injection in Joomla iCagenda (4.0.0 \u2013 4.0.11). Exploitable via com_ajax, no auth needed. CRITICAL (CVSS 9.2). Restrict endpoint & monitor for attacks. https://radar.offseq.com/threat/cve-2026-67365-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-8f2e4ed9eff903b1 #OffSeq #CVE202667365 #Joomla #SQLi", "creation_timestamp": "2026-08-15T00:00:35.892191Z"}, {"uuid": "81a4dc60-d45a-495b-9daa-6d1e0f18a125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67365", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3ekasmhf2t", "content": "Joomla iCagenda 4.0.0 \u2013 4.0.11 faces CRITICAL SQL injection (CVSS 9.2). No auth needed to exploit via com_ajax. Restrict access, monitor for threats, await vendor patch. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-67365-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-...", "creation_timestamp": "2026-08-15T00:00:38.421775Z"}]}