{"vulnerability": "cve-2026-4776", "sightings": [{"uuid": "32e8e600-4ec3-4286-a77a-69229078ba98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47760", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiqdulb42e", "content": "\ud83d\udfe0 CVE-2026-47760 - High (8.7)\n\nTinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47760/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:01:08.753336Z"}, {"uuid": "61f3cdaa-5bf5-4883-b1c6-fb51c9b01236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47761", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiqloac22z", "content": "\ud83d\udfe0 CVE-2026-47761 - High (8.7)\n\nTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47761/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:01:17.307721Z"}, {"uuid": "2d777e9c-605a-4e70-aebc-c14d040c72e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47762", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwitepmxs2r", "content": "\ud83d\udfe0 CVE-2026-47762 - High (8.7)\n\nTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47762/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:02:50.334802Z"}, {"uuid": "f6c7fb0d-af3a-46e0-a0c8-6838b3ba55d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47762", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmwitfsqyw2t", "content": "\ud83d\udfe0 CVE-2026-47762 - High (8.7)\n\nTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored ...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-47762/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T17:02:51.003855Z"}, {"uuid": "b7a0606a-8bde-4ccc-9a04-8179f2fb2ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwiv4daft2e", "content": "CVE-2026-47760 - TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs\nCVE ID : CVE-2026-47760\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1...", "creation_timestamp": "2026-05-28T17:03:47.732971Z"}, {"uuid": "143641e3-9c34-4a6b-9548-b9dd1d580af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwixsmqhn2i", "content": "CVE-2026-47761 - TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection\nCVE ID : CVE-2026-47761\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3,...", "creation_timestamp": "2026-05-28T17:05:18.516362Z"}, {"uuid": "05f7c162-9cb8-4db4-aa03-35c60ea3d616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47762", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjlngtmy2p", "content": "CVE-2026-47762 - TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments\nCVE ID : CVE-2026-47762\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, th...", "creation_timestamp": "2026-05-28T17:16:24.119102Z"}, {"uuid": "630bf714-50a0-4a5f-9963-8783ecd53e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47760", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmwztignsj2w", "content": "\ud83d\udccc CVE-2026-47760 - TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS vulnerability caused by improper SVG namespace scope h... https://www.cyberhub.blog/cves/CVE-2026-47760", "creation_timestamp": "2026-05-28T22:07:07.395256Z"}, {"uuid": "6dcc5deb-b56f-474d-b77f-b0ab4b91c2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47762", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmx56ryjwm2g", "content": "\ud83d\udccc CVE-2026-47762 - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. ... https://www.cyberhub.blog/cves/CVE-2026-47762", "creation_timestamp": "2026-05-28T23:07:07.601267Z"}, {"uuid": "8e093daa-9207-40ef-8d7e-ad94684f7a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47761", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmxc7q5jp42w", "content": "\ud83d\udccc CVE-2026-47761 - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability in the media plugin. Attackers can ... https://www.cyberhub.blog/cves/CVE-2026-47761", "creation_timestamp": "2026-05-29T00:37:08.187707Z"}, {"uuid": "95a2f6c8-46c7-4023-86f5-8e11a4cdcc68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47763", "type": "published-proof-of-concept", "source": "https://github.com/pdm-project/pdm/security/advisories/GHSA-ghq2-5c67-fprm", "content": "", "creation_timestamp": "2026-05-21T07:16:44.000000Z"}, {"uuid": "af9b1376-9914-4c43-a7be-5857fd4e125d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyorqyxp2q", "content": "CVE-2026-47767 - Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch\nCVE ID : CVE-2026-47767\n \n Published : July 14, 2026, 7:17 p.m. | 13\u00a0minutes ago\n \n Description : Symfony is a PHP framework for ...", "creation_timestamp": "2026-07-14T20:00:44.368249Z"}, {"uuid": "7a88d612-4f13-4a82-b623-581bdb9d9f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrkwx3e5w2d", "content": "CVE-2026-47767 - symfony\nVersions of Symfony from 5.4.46 to 5.4.52, 6.4.40, 7.4.12, and 8.0.12 have a security flaw. Attackers can use a specially crafted query string to bypass security settings,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#symfony #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-16T15:38:04.739262Z"}, {"uuid": "dd6263f4-bbd9-4836-aaa3-e08f9f808921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqust5nucc2y", "content": "\ud83d\udccc CVE-2026-47767 - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12... https://www.cyberhub.blog/cves/CVE-2026-47767", "creation_timestamp": "2026-07-17T22:37:06.557938Z"}, {"uuid": "0ad15247-992b-468c-a43f-e6bb45244f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrktlovj4l2l", "content": "\u05ea\u05e7\u05dc\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05e1\u05d9\u05de\u05e4\u05d5\u05e0\u05d9: CVE-2026-47767 - \u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea \u05d5\u05e4\u05e8\u05d8\u05d9\u05dd \u05d8\u05db\u05e0\u05d9\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/3388D158-82DA-4206-A24F-470970FC43ED", "creation_timestamp": "2026-07-26T16:49:24.148012Z"}, {"uuid": "ca08483f-517a-4fd5-9271-912fe796e668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47767", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrktlrje7q2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47767 \u0432 Symfony: \u043e\u0431\u0445\u043e\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-50340 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u0434\u043b\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/5AA6EB2A-741A-4391-B507-3F2FAF6E5F22", "creation_timestamp": "2026-07-26T16:49:27.239097Z"}, {"uuid": "ec69adbf-a832-452b-82ea-8fc67f02a9e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq4sk2xmp2a", "content": "CVE-2026-47768 - nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)\nCVE ID : CVE-2026-47768\n \n Published : July 28, 2026, 6:19 p.m. | 20\u00a0minutes ago\n \n Description : nebula-mesh is a self-hosted control plane for Slack Nebula mesh...", "creation_timestamp": "2026-07-28T19:17:36.602174Z"}]}