{"vulnerability": "cve-2026-1172", "sightings": [{"uuid": "ec1640b2-de9d-489a-aa11-1ad3b7d7470a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5g46kci2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11720: \u043f\u0443\u0442\u044c \u043a \u0442\u0440\u0430\u0432\u0435\u0440\u0441\u0430\u0446\u0438\u0438 \u0432 HTTP-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 Google APIs\n\n\n\nhttps://kripta.biz/posts/6BDD7213-D7F1-4B42-B9CE-9356B16198A0", "creation_timestamp": "2026-06-29T18:44:11.945356Z"}, {"uuid": "70057b68-82ef-4e54-b6f7-3f813b950be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mphikpwkbb2m", "content": "CVE-2026-11720 - Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder\nCVE ID : CVE-2026-11720\n \n Published : June 29, 2026, 5:51 p.m. | 3\u00a0hours, 20\u00a0minutes ago\n \n Description : A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolb...", "creation_timestamp": "2026-06-29T22:03:38.336181Z"}, {"uuid": "2990ea6c-fbb3-4988-8f7b-5620f14b69a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpn7i5z3gq2t", "content": "\ud83d\udccc CVE-2026-11720 - A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox.\n\nWhen constructing downstream API requests, the URL buil... https://www.cyberhub.blog/cves/CVE-2026-11720", "creation_timestamp": "2026-07-02T04:37:07.013761Z"}, {"uuid": "c7d17c71-c781-4f83-b03e-68e23e3c9ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11721", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u", "content": "ISC has disclosed nine vulnerabilities in BIND 9 (CVE-2026-10723, CVE-2026-10822, CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321)", "creation_timestamp": "2026-07-22T16:47:00.790994Z"}, {"uuid": "3c858ecd-8da5-439a-8483-14dcaeddb60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11721", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mraz4gyvek2o", "content": "BIND 9\u306e\u8106\u5f31\u6027(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)\u3068\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3(9.20.26, 9.21.24)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #dns #bind\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-07-22T19:01:40.250027Z"}, {"uuid": "98436197-af4a-40d1-9dfc-717c7d4fddcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11721", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116969594782190144", "content": "The severity is increased for this new vulnerability affecting ISC BIND (CVE-2026-11721) https://vuldb.com/vuln/382359", "creation_timestamp": "2026-07-23T13:46:13.940069Z"}, {"uuid": "cd6b24c8-e621-4319-9a0f-3fa5e9da0a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11721", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mttdxln7f22j", "content": "\u300cBIND 9\u300d\u306b\u30ad\u30e3\u30c3\u30b7\u30e5\u6c5a\u67d3\u306a\u3069\u8907\u6570\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nInternet Systems Consortium\uff08ISC\uff09\u306f\u3001\u300cBIND 9\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u3042\u308f\u305b\u30669\u4ef6\u306e\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u3066\u3044\u308b\u3002\u65e5\u672c\u30ec\u30b8\u30b9\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9\u306a\u3069\u306f\u7dca\u6025\u5bfe\u5fdc\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-13321\u300d\u306f\u3001Next Domain Name\u30d5\u30a3\u30fc\u30eb\u30c9\u304c\u7f72\u540d\u8005\u306e\u30be\u30fc\u30f3\u5916\u3092\u6307\u3059\u300cNSEC\u30ec\u30b3\u30fc\u30c9\u300d\u3092\u53d7\u3051\u5165\u308c\u308b\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u304c\u7ba1\u7406\u3059\u308bDNSSEC\u7f72\u540d\u6e08\u307f\u30be\u30fc\u30f3\u3092\u7528\u3044\u3066\u30be\u30fc\u30f3\u6a2a\u65ad\u578b\u306e\u30ad\u30e3\u30c3\u30b7\u30e5\u30dd\u30a4\u30ba\u30cb\u30f3\u30b0\u3092\u5f15\u304d\u8d77\u3053\u3059\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u307e\u305f\u300cCVE-2026-11721\u300d\u3067\u306f\u3001...", "creation_timestamp": "2026-08-24T12:54:04.665841Z"}, {"uuid": "ca1a2519-7b5c-419d-a8bb-b52a44b824a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6gbwnwhh22", "content": "CVE-2026-11720 - mcp_toolbox_for_databases\nThe Google MCP Toolbox HTTP tool can make unauthorized API requests to unintended endpoints on the same target host. This is because an attacker can manipulate the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#google #Golang #CVE #infosec", "creation_timestamp": "2026-09-10T16:00:08.117521Z"}, {"uuid": "6236ccd3-e773-4d90-b5a4-d504aaf5afd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11725", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy7dcwebl2e", "content": "\ud83d\udfe0 CVE-2026-11725 - High (8.8)\n\nIBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11725/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T22:04:52.252026Z"}, {"uuid": "3d420e82-7546-4e7f-b6ec-be6b26a1bf03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11726", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117333733738410071", "content": "CVE-2026-11726 IBM MQ for HPE NonStop 8.1.0-8.1.0.40: auth attacker can leak data or DoS via bad message header offset validation. CVSS 8.1, patch status unknown. Restrict access now https://www.valtersit.com/cve/CVE-2026-11726/ #CVE #infosec #IBM", "creation_timestamp": "2026-09-25T21:11:36.415397Z"}, {"uuid": "3f259b00-34ad-4d2a-8616-6bdd1034c575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11726", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mweppsjnxb2r", "content": "CVE-2026-11726 IBM MQ for HPE NonStop 8.1.0-8.1.0.40: auth attacker can leak data or DoS via bad message header offset validation. CVSS 8.1, patch status unknown. Restrict access now https://www.valtersit.com/cve/CVE-2026-11726/ #CVE #infosec #IBM", "creation_timestamp": "2026-09-25T21:30:08.888939Z"}, {"uuid": "ef8da0b5-013d-4420-88b1-4c3a7357a5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11727", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117337817609678248", "content": "CVE-2026-11727: IBM MQ C client DoS, possible RCE, via unvalidated queue manager responses. CVSS 8.1, unpatched. Apply mitigations now. https://www.valtersit.com/cve/CVE-2026-11727/ #CVE #infosec #IBM", "creation_timestamp": "2026-09-26T14:30:17.633804Z"}, {"uuid": "386f3642-711f-470d-95d8-04faebc36544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11727", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwgiqezcth2a", "content": "CVE-2026-11727: IBM MQ C client DoS, possible RCE, via unvalidated queue manager responses. CVSS 8.1, unpatched. Apply mitigations now. https://www.valtersit.com/cve/CVE-2026-11727/ #CVE #infosec #IBM", "creation_timestamp": "2026-09-26T14:30:30.012826Z"}, {"uuid": "0a771144-d2a4-401e-a5f3-7bb664b6b352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11722", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117341122861278858", "content": "CVE-2026-11722: IBM WebSphere HTTP request smuggling, CVSS 4.8, patch status unknown. Update immediately. https://www.valtersit.com/cve/CVE-2026-11722/ #CVE #infosec #IBM", "creation_timestamp": "2026-09-27T04:30:43.643955Z"}, {"uuid": "be88162c-1a8a-4969-893d-7c7af9f6039f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11722", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwhxou3a2p2g", "content": "CVE-2026-11722: IBM WebSphere HTTP request smuggling, CVSS 4.8, patch status unknown. Update immediately. https://www.valtersit.com/cve/CVE-2026-11722/ #CVE #infosec #IBM", "creation_timestamp": "2026-09-27T04:30:44.656611Z"}]}