{"vulnerability": "CVE-2026-72592", "sightings": [{"uuid": "1835eff4-8486-4eaf-b86b-d908e889858c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72592", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mspzjkirgl26", "content": "CVE-2026-72592 - phpfm\nAn attacker can upload malicious PHP files without a password, allowing them to run code on the server. This could lead to data theft or server compromise. Update to a fixed version of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpfm #dulldusk #CVE #infosec", "creation_timestamp": "2026-08-10T11:44:05.230513Z"}, {"uuid": "cdd4b49f-0f73-44c9-be1d-2de13a55a772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72592", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ga5shuzi2pgvm", "content": "CVE-2026-72592 - dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload\nCVE ID : CVE-2026-72592\n \n Published : Aug. 10, 2026, 11:17 a.m. | 43\u00a0minutes ago\n \n Description : An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0...", "creation_timestamp": "2026-08-10T12:16:41.765127Z"}]}