{"vulnerability": "cve-2026-6179", "sightings": [{"uuid": "6366f295-69ab-4091-aae0-144b0819ce80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61799", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-pgrf-4654-3gq8", "content": "", "creation_timestamp": "2026-08-20T20:35:08.573750Z"}, {"uuid": "6248d89e-472a-4057-8765-530f5c00424a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61798", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-2mc4-j865-9q4r", "content": "", "creation_timestamp": "2026-08-20T20:35:10.871977Z"}, {"uuid": "acd6f8ab-b042-47d1-a0d8-e6c9254d7448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61792", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzdfkzhsb27", "content": "\ud83d\udfe0 CVE-2026-61792 - High (7.7)\n\nWeblate is a web-based continuous localization platform used to manage software translations. In ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61792/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T21:59:59.561898Z"}, {"uuid": "0be4eeb3-9095-492d-8082-cc6173fbcc12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61797", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvifdge5ft2z", "content": "Source-Driven Recon: When the Patch Becomes the PoC and what CVE-2026-61797 taught us about Disclosure OPSEC", "creation_timestamp": "2026-09-14T15:09:41.469118Z"}, {"uuid": "1bae7742-3001-4ed0-ba8b-31ee50256117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61797", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102329", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-61797\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a itres-labs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 19:11:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-61797, a time-based blind SQL Injection vulnerability affecting the GLPI PDF plugin.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T21:00:03.632867Z"}, {"uuid": "7090f941-f1b0-4fd0-ba07-9c0364be2748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61797", "type": "published-proof-of-concept", "source": "Telegram/hzUX5Z4uo0-P4BmQ24cBFoT_KuLR6K2llMGI-QCqbLel1qA", "content": "", "creation_timestamp": "2026-09-15T00:00:09.013394Z"}, {"uuid": "11d7508a-f14f-4780-9bc0-fbdacacaed78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61793", "type": "published-proof-of-concept", "source": "https://github.com/nuxt-modules/og-image/security/advisories/GHSA-q8hw-4fvp-9rwv", "content": "", "creation_timestamp": "2026-09-17T16:35:16.823412Z"}, {"uuid": "aaa5cb86-c87d-4f66-ba2a-1aaffc9ed596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61797", "type": "seen", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-18T04:00:15.174029Z"}, {"uuid": "6184f54e-9e58-4ae3-a018-73eefafc6568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61795", "type": "published-proof-of-concept", "source": "https://github.com/projectcapsule/capsule/security/advisories/GHSA-f94q-w3w8-cj67", "content": "", "creation_timestamp": "2026-09-18T18:35:17.571200Z"}, {"uuid": "07a59654-79e7-4147-b949-1eee4a1cf8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61794", "type": "published-proof-of-concept", "source": "https://github.com/projectcapsule/capsule/security/advisories/GHSA-gxjc-74v5-3vx3", "content": "", "creation_timestamp": "2026-09-18T18:35:21.083348Z"}, {"uuid": "0cb73ebb-6467-40d4-8175-39107032ee35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61797", "type": "published-proof-of-concept", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-19T00:00:10.984869Z"}, {"uuid": "a33d89e1-f6e2-42ee-9b41-71cdf182bc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61795", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117338919342263826", "content": "CVE-2026-61795 Capsule Kubernetes tenant webhook validates stale regex, letting admins store malformed AllowedHostnames.Regex. CVSS 6.8. No patch as of now. Review configs and lock down ingress. https://www.valtersit.com/cve/CVE-2026-61795/ #CVE #Kubernetes #infosec", "creation_timestamp": "2026-09-26T19:14:15.667259Z"}, {"uuid": "e8ed9b1c-7d5e-4c26-914e-aeb21599a601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61795", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwgzi6e24s2u", "content": "CVE-2026-61795 Capsule Kubernetes tenant webhook validates stale regex, letting admins store malformed AllowedHostnames.Regex. CVSS 6.8. No patch as of now. Review configs and lock down ingress. https://www.valtersit.com/cve/CVE-2026-61795/ #CVE #Kubernetes #infosec", "creation_timestamp": "2026-09-26T19:30:08.565091Z"}]}