{"vulnerability": "cve-2026-65577", "sightings": [{"uuid": "630a5e96-2922-43e9-a8ba-2bb40cf685a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65577", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msggqn7yvb2f", "content": "CVE-2026-65577\nAn attacker can inject malicious PHP code without needing a password. This affects Advice software versions 1.18.0 and below. To stay safe, update to the latest version of Advice as soon as possible.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T16:14:04.597603Z"}, {"uuid": "e71e5567-6208-4430-a3a6-f0dc1a8be231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65577", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msgjmsjze226", "content": "CVE-2026-65577 - Critical unauthenticated PHP object injection in Advice <=1.18.0. CVSS 9.8. No patch yet. Disable or isolate immediately. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-65577/", "creation_timestamp": "2026-08-06T17:05:36.914966Z"}, {"uuid": "6b0624bd-fc31-450e-a24f-e4a89d427a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65577", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117049651155899664", "content": "CVE-2026-65577 - Critical unauthenticated PHP object injection in Advice <=1.18.0. CVSS 9.8. No patch yet. Disable or isolate immediately. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-65577/", "creation_timestamp": "2026-08-06T17:05:41.262829Z"}]}