{"vulnerability": "CVE-2026-7580", "sightings": [{"uuid": "4bdd1a5c-7502-417a-8c9d-28cf6fb7e980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75807", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mub6vmbfl42r", "content": "\ud83d\udfe0 CVE-2026-75807 - High (7.5)\n\nThe SAML Single Sign On \u2013 SSO Login plugin for WordPress is vulnerable to Authentication Bypass...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75807/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T01:00:46.852193Z"}, {"uuid": "ed1c1e85-4f18-4124-ab26-c15004b30a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/54gcvu6ie4sg6", "content": "CVE-2026-75807 - SAML Single Sign On\nCVE ID : CVE-2026-75807\n \n Published : Aug. 29, 2026, 5:25 p.m. | 43\u00a0minutes ago\n \n Description : The SAML Single Sign On \u2013 SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This ...", "creation_timestamp": "2026-08-29T18:34:44.270450Z"}, {"uuid": "b4313a3e-9953-4e5e-b28e-945ba918b74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75803", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtvyhrf2r", "content": "\ud83d\udd17 CVE : CVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803", "creation_timestamp": "2026-08-26T12:35:20.044958Z"}, {"uuid": "517752be-85d6-4b2f-bef7-b806d832648c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75803", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mtx5jnfojs24", "content": "OpenSSL\u306e\u8106\u5f31\u6027(CVE-2026-14457, CVE-2026-18798, CVE-2026-54874, CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #ssh #openssl #ssl\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-08-26T01:09:35.821141Z"}, {"uuid": "153efb14-c2a3-44c2-912c-f15fb74860d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75800", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdivcshmn2y", "content": "CVE-2026-75800 - frontegg saml sso\nThe WordPress Frontegg SAML Single Sign\u2011On plugin up to version 1.0.1 accepts login messages without confirming they are genuine. This lets someone without credentials log in as any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-09-12T16:30:06.206141Z"}, {"uuid": "49d1c093-1524-48c4-9f1b-e7ab1fdec3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75800", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mveffpry4k2e", "content": "\ud83d\udd34 CVE-2026-75800 - Critical (9.8)\n\nThe Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of S...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75800/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-13T01:00:21.807950Z"}, {"uuid": "1a6aa9c5-2daa-4094-8b73-d5f1979251d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75803", "type": "seen", "source": "MISP/a5bc91a3-894a-4961-a5b4-a4738957fe53", "content": "", "creation_timestamp": "2026-09-14T15:15:04.037196Z"}, {"uuid": "5b35a411-cca3-43e7-a77c-3df886f2a029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75803", "type": "seen", "source": "MISP/a5bc91a3-894a-4961-a5b4-a4738957fe53", "content": "", "creation_timestamp": "2026-09-15T00:15:02.852069Z"}, {"uuid": "eab6f3e2-417e-4e24-b8f6-20e1fd43a712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75803", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlgu2qb2h2r", "content": "CVE-2026-75803 - openssl\nThe OpenSSL library provided in Debian\u202f12 packages is vulnerable, allowing attackers to bypass encryption protections. This could expose data or communications to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openssl #canonical #Debian11 #CVE #infosec", "creation_timestamp": "2026-09-28T13:40:04.542276Z"}, {"uuid": "43e2e500-30be-467f-bf21-da9116875633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75804", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwqeysp7gg2x", "content": "\ud83d\udd17 CVE : CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84783, CVE-2026-84784", "creation_timestamp": "2026-09-30T12:50:15.042211Z"}, {"uuid": "a28e60ce-5b25-4b20-aaf6-9e44865af06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75805", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwqeysp7gg2x", "content": "\ud83d\udd17 CVE : CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84783, CVE-2026-84784", "creation_timestamp": "2026-09-30T12:50:15.057479Z"}, {"uuid": "d51f0011-f9c0-482a-a946-3fbe3393a2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75806", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwqeysp7gg2x", "content": "\ud83d\udd17 CVE : CVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84783, CVE-2026-84784", "creation_timestamp": "2026-09-30T12:50:15.071057Z"}, {"uuid": "c8d00765-0dc1-4e54-a4c1-2e95f5d1a670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75804", "type": "seen", "source": "https://bsky.app/profile/moltenbit.bsky.social/post/3mwtfym6ug22b", "content": "found a vuln in openssl: the QUIC stack enforced per-stream flow control but not the connection-level limit. 200 streams under 512 KiB each, no byte at offset 0 so nothing gets consumed: ~100 MB heap per connection instead of a 768 KiB window.\n\nCVE-2026-75804 #openssl #security #vulnerability", "creation_timestamp": "2026-10-01T17:46:01.870415Z"}, {"uuid": "a5f296b0-7251-4841-8262-e019ea765d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75804", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mwtnkq5tv62k", "content": "MEDIUM severity CVE just published in OpenSSL:\n\nCVE-2026-75804. OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summar\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-75804", "creation_timestamp": "2026-10-01T20:01:26.662106Z"}]}