{"vulnerability": "CVE-2026-7288", "sightings": [{"uuid": "4da77091-cb10-43db-950e-a23480ced0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzyjfb672r", "content": "", "creation_timestamp": "2026-04-28T16:47:35.794447Z"}, {"uuid": "e0de53e9-7b7d-4e62-a581-7bcd439e7406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkl2irbp352e", "content": "", "creation_timestamp": "2026-04-28T16:56:40.986344Z"}, {"uuid": "9fbb479d-278b-4b37-997e-49d4084e595e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72889", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-72889", "content": "", "creation_timestamp": "2026-08-19T12:15:23.463971Z"}, {"uuid": "e6b491c4-5c43-401d-a23a-42a6eee6138b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72887", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/copns7nsouggm", "content": "CVE-2026-72887: Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token", "creation_timestamp": "2026-08-16T16:06:48.208458Z"}, {"uuid": "4f01ff6a-45d6-4975-ac33-a897fbce6c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72888", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/cnn6yd3uqjqbl", "content": "CVE-2026-72888: Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smart_require", "creation_timestamp": "2026-08-16T16:08:47.399950Z"}, {"uuid": "9986601d-d1d0-42f5-a1dd-828147eac256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7288", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmvrm25weu2v", "content": "\ud83d\udccc CVE-2026-7288 - A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. T... https://www.cyberhub.blog/cves/CVE-2026-7288", "creation_timestamp": "2026-05-28T10:07:15.337780Z"}, {"uuid": "efb798a0-9e16-40c2-a7c4-5e9e41e3f57c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72889", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3upcssyqlvuj2", "content": "CVE-2026-72889: Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify", "creation_timestamp": "2026-08-19T18:38:57.787806Z"}, {"uuid": "818f886d-ea37-45f0-8922-0fd3710993b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72887", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcaolou4n2p", "content": "CVE-2026-72887\nNet::OAuth::Client versions before 0.32 for Perl allow a service provider to quietly change the security level of OAuth 1.0a to OAuth 1.0, which can be exploited by attackers to take control of user accounts.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-17T17:40:06.116637Z"}, {"uuid": "780ff675-a740-4fb3-a807-ef70fd1cb2cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwsiysng2b", "content": "CVE-2026-72880 - dokploy\nDokploy's self-hosted Platform as a Service (PaaS) has a security issue that allows an authenticated user to write files outside the intended directory or run unauthorized system commands.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:28:04.199175Z"}, {"uuid": "1549b5ff-2172-4c92-bd86-cce15b622e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72882", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqww4tlb42o", "content": "CVE-2026-72882 - dokploy\nDokploy's web interface allows attackers to run commands on remote servers if they have the ability to create or update file mounts. This can happen if an attacker has an account on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:30:05.542537Z"}, {"uuid": "d51ad2cb-ef25-4b45-8024-9611fe6741a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72886", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwzpb62x2g", "content": "CVE-2026-72886 - dokploy\nA security flaw in Dokploy allowed non-admin users to gain root access on the host by exploiting a scheduling feature. This could have allowed unauthorized users to execute malicious scripts\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:32:05.806910Z"}, {"uuid": "3d5677cb-439a-4314-8bc6-cb62a42aeaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72883", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqymrlwos23", "content": "\ud83d\udfe0 CVE-2026-72883 - High (8.8)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket ha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72883/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T21:00:40.445398Z"}, {"uuid": "4c13bb8c-632e-4b17-a9b1-5a9231e7cd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72886", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqymyf7po2t", "content": "\ud83d\udd34 CVE-2026-72886 - Critical (9.9)\n\nDokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72886/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T21:00:47.610581Z"}, {"uuid": "385312a8-cec2-4f4a-a53c-71f763edc1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72880", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msskwmam2w2t", "content": "CVE-2026-72880 - Critical path traversal in Dokploy PaaS. Unpatched; authenticated users can write/delete files outside cert dir via certificatePath. CVSS 9.9. Update or restrict access immediately. #CVE #Dokploy #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-72880/", "creation_timestamp": "2026-08-11T12:00:56.756057Z"}, {"uuid": "1dd9392e-5025-4d4d-9988-9f30e3eb100f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72880", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117076764669517075", "content": "CVE-2026-72880 - Critical path traversal in Dokploy PaaS. Unpatched; authenticated users can write/delete files outside cert dir via certificatePath. CVSS 9.9. Update or restrict access immediately. #CVE #Dokploy #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72880/", "creation_timestamp": "2026-08-11T12:02:00.282983Z"}, {"uuid": "54cd71fd-54fd-42c1-ad79-a0cd746cc65f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72882", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mssrxpuow62g", "content": "CVE-2026-72882 - Critical RCE in Dokploy via filePath shell injection. CVSS 9.9. Unpatched in v0.28.8 and earlier. Patch or isolate now. #CVE #Dokploy #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-72882/", "creation_timestamp": "2026-08-11T14:06:50.015037Z"}, {"uuid": "81b3759f-d810-4934-bdd0-8683ac26dd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72882", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117077259691406862", "content": "CVE-2026-72882 - Critical RCE in Dokploy via filePath shell injection. CVSS 9.9. Unpatched in v0.28.8 and earlier. Patch or isolate now. #CVE #Dokploy #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72882/", "creation_timestamp": "2026-08-11T14:06:50.992793Z"}, {"uuid": "a4ccd32d-8b69-40b7-a743-16c7835cf1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72887", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdxgxdbj723", "content": "CVE-2026-72887 - libnet-oauth-perl\nDebian's OpenSSH server may allow attackers to execute malicious code on the server. This is a serious risk because an attacker could gain full control of the server. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-18T10:00:05.256396Z"}, {"uuid": "01c98f45-6bb7-4f67-9e32-ce4677f5e30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72889", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7kcmiqzzg6eta", "content": "CVE-2026-72889 - Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify\nCVE ID : CVE-2026-72889\n \n Published : Aug. 19, 2026, 8:17 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : Net::OAuth versions before 0.33 for Perl allow the s...", "creation_timestamp": "2026-08-19T09:53:29.946651Z"}]}