{"vulnerability": "cve-2026-10105", "sightings": [{"uuid": "3a9269a1-c005-4f78-8814-10cef41ddaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzdsekh3l2s", "content": "CVE-2026-10105 - agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()\nCVE ID : CVE-2026-10105\n \n Published : May 29, 2026, 6:16 p.m. | 55\u00a0minutes ago\n \n Description : agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allow...", "creation_timestamp": "2026-05-29T20:10:46.486589Z"}, {"uuid": "b843f691-e987-4544-8501-22ce5db9d9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10105", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmzlfnbqri2v", "content": "agno 2.6.5\u3067ClickHouse\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u30e1\u30bf\u30c7\u30fc\u30bf\u30ad\u30fc\u30fb\u5024\u306b\u60aa\u610f\u306e\u3042\u308b\u6587\u5b57\u5217\u3092\u6df7\u5165\u3055\u305b\u3001\u5168\u884c\u524a\u9664\u3001\u7279\u5b9a\u884c\u524a\u9664\u3001\u60c5\u5831\u62bd\u51fa\u304c\u53ef\u80fd\u3002\nCVE-2026-10105 CVSS 8.3 | HIGH", "creation_timestamp": "2026-05-29T22:26:49.484953Z"}, {"uuid": "67a71cd7-9ba2-4219-8a16-9456c9e5267d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3tqrfgri2m", "content": "\ud83d\udfe0 CVE-2026-10105 - High (8.3)\n\nagno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-30T20:01:32.729635Z"}, {"uuid": "2fda97fa-0738-4f0c-98c3-5d5df874ccaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101055", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a u3000py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a turretsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 13:31:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython client for the Thinkware U3000 dashcam's local WiFi control protocol, reverse-engineered from the official Android app. PoC tooling behind CVE-2026-101053, CVE-2026-101054, and CVE-2026-101055.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T14:00:07.000000Z"}, {"uuid": "c9a2d3e6-d5f4-46da-a96f-ee20f32e2e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101053", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a u3000py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a turretsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 13:31:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython client for the Thinkware U3000 dashcam's local WiFi control protocol, reverse-engineered from the official Android app. PoC tooling behind CVE-2026-101053, CVE-2026-101054, and CVE-2026-101055.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T14:00:07.000000Z"}, {"uuid": "7d7a05d1-9a66-4691-ad1b-5cc19d0796ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101054", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a u3000py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a turretsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 13:31:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython client for the Thinkware U3000 dashcam's local WiFi control protocol, reverse-engineered from the official Android app. PoC tooling behind CVE-2026-101053, CVE-2026-101054, and CVE-2026-101055.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T14:00:07.000000Z"}, {"uuid": "ac361ed7-32d6-4cb1-8ab4-64f2721dd5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101052", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mwnqlnokzg2z", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-101052\n\nA security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modul...", "creation_timestamp": "2026-09-29T11:39:39.169637Z"}]}