{"vulnerability": "cve-2026-61851", "sightings": [{"uuid": "230825ea-cb54-47d0-91d1-c8d9ac5e9555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61851", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117369590217973845", "content": "CVE-2026-61851: SQL injection in Chartbrew's runQuery() - incomplete keyword blocklist lets authenticated users execute dangerous SQL. CVSS 8.8. Patch under review, no fix yet. Track it: https://www.valtersit.com/cve/CVE-2026-61851/ #CVE #infosec", "creation_timestamp": "2026-10-02T05:10:29.578529Z"}, {"uuid": "19ba349f-299d-4f62-8e7b-a198ad6ecba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61851", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwundje6jo2s", "content": "CVE-2026-61851: SQL injection in Chartbrew's runQuery() - incomplete keyword blocklist lets authenticated users execute dangerous SQL. CVSS 8.8. Patch under review, no fix yet. Track it: https://www.valtersit.com/cve/CVE-2026-61851/ #CVE #infosec", "creation_timestamp": "2026-10-02T05:30:03.426629Z"}]}