{"vulnerability": "cve-2026-10025", "sightings": [{"uuid": "41052e16-9911-4dec-b2be-b2acc82b80c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10025", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msrtsmtjth2x", "content": "\ud83d\udccc CVE-2026-10025 - IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulner... https://www.cyberhub.blog/cves/CVE-2026-10025", "creation_timestamp": "2026-08-11T05:07:06.973293Z"}, {"uuid": "0c2cdc5c-4542-4df7-b57e-5085f9421319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100255", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwxnbuuutr2x", "content": "\ud83d\udccc CVE-2026-100255 - In JetBrains TeamCity before 2026.2, \n2026.1.4, \n2025.11.8 administrator account takeover was possible via password reset https://www.cyberhub.blog/cves/CVE-2026-100255", "creation_timestamp": "2026-10-03T10:07:08.369256Z"}, {"uuid": "b8f3eb02-613e-41c3-aa09-fd5e08e0ef77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100253", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxbbqgahsu2h", "content": "\ud83d\udccc CVE-2026-100253 - In JetBrains TeamCity before 2026.2, \n2026.1.4, \n2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL https://www.cyberhub.blog/cves/CVE-2026-100253", "creation_timestamp": "2026-10-07T06:07:08.790883Z"}, {"uuid": "a2ad0023-d708-4814-a64a-8210a60d7968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100254", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxbdg2eaja2r", "content": "\ud83d\udccc CVE-2026-100254 - In JetBrains TeamCity before 2026.2, \n2026.1.4, \n2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipelin... https://www.cyberhub.blog/cves/CVE-2026-100254", "creation_timestamp": "2026-10-07T06:37:07.262688Z"}]}