{"vulnerability": "cve-2026-6560", "sightings": [{"uuid": "0c674db7-4b37-4cbd-9e1c-edb0dab07eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6560", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116430197752959009", "content": "", "creation_timestamp": "2026-04-19T07:30:28.744970Z"}, {"uuid": "3235733d-3710-4f7c-8f76-353ca50a857c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6560", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjtgo3375c22", "content": "", "creation_timestamp": "2026-04-19T07:30:31.096767Z"}, {"uuid": "2ba0645e-bf55-4706-a1ab-af6049814bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6560", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjtidiorb42n", "content": "", "creation_timestamp": "2026-04-19T08:00:23.938721Z"}, {"uuid": "d2684e47-d724-489a-a406-6ab41753f141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6560", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjtnujfwha2k", "content": "", "creation_timestamp": "2026-04-19T09:39:22.870986Z"}, {"uuid": "234193d1-7bed-4b85-a8f4-e98ab571df4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6560", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjtnwpd7s72a", "content": "", "creation_timestamp": "2026-04-19T09:40:37.114117Z"}, {"uuid": "69b7f908-37fe-4b09-8a04-a44fbfad9f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6560", "type": "published-proof-of-concept", "source": "Telegram/rtusQXopATfUt3tz4cMNXsdNkPn3ZWikiUBq92QHYUyFR5Q", "content": "", "creation_timestamp": "2026-04-19T09:15:26.000000Z"}, {"uuid": "964a1126-8d6d-4107-8226-f8bce63586a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65602", "type": "seen", "source": "https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7", "content": "# CVE-2026-65602: CVE-2026-65602: IngressRouteTCP ServersTransport Namespace Bypass in Traefik\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-65602\n\n## Summary\nAn authorization bypass vulnerability in Traefik allows low-privileged users within unauthorized Kubernetes namespaces to reference privileged file-provider TCP serversTransports via IngressRouteTCP resources, bypassing the crossProviderNamespaces constraint.\n\n## TL;DR\nTraefik fails to validate the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport configurations, enabling cross-provider namespace bypass.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network (Remote)\n- **CVSS v4.0**: 5.3 (Medium)\n- **Impact Type**: Subsequent System Integrity and Confidentiality (High)\n- **Exploit Status**: No public weaponized exploits or active exploitation reported\n- **Mitre ATT&CK Technique**: T1068 (Exploitation for Privilege Escalation)\n\n## Affected Systems\n\n- Traefik reverse proxy deployments running within Kubernetes clusters using IngressRouteTCP CRDs.\n- **Traefik**: >= 3.6.0, <= 3.6.22 (Fixed in: `3.6.23`)\n- **Traefik**: >= 3.7.0, <= 3.7.6 (Fixed in: `3.7.7`)\n\n## Mitigation\n\n- Enforce explicit crossProviderNamespaces restrictions in static configurations.\n- Perform periodic scans on custom resource definitions to identify unauthorized provider suffixes.\n- Segregate administrative and untrusted workloads into isolated Kubernetes cluster deployments.\n\n**Remediation Steps:**\n1. Identify the current active Traefik deployment version.\n2. Upgrade to Traefik v3.6.23 or v3.7.7 depending on the active branch.\n3. Verify the static configuration explicitly includes the crossProviderNamespaces list containing only trusted namespaces.\n4. Run the kubectl diagnostic command to audit active IngressRouteTCP resources.\n\n## References\n\n- [GHSA-42cj-m3vj-89wv: Traefik IngressRouteTCP ServersTransport Namespace Bypass](https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv)\n- [Official Fix Commit](https://github.com/traefik/traefik/commit/67501cbe7bc7774e26ecbd1c29af97f098e14b0b)\n- [Official Preparation Commit](https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0)\n- [Official Release Information (v3.6.23)](https://github.com/traefik/traefik/releases/tag/v3.6.23)\n- [Official Release Information (v3.7.7)](https://github.com/traefik/traefik/releases/tag/v3.7.7)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/traefik-before-ingressroutetcp-serverstransport-namespace-bypass)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-65602) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-05T22:32:39.767790Z"}, {"uuid": "2ad740fa-383c-406f-a4e4-0fd89ed12c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65602", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv", "content": "", "creation_timestamp": "2026-08-05T22:35:09.884732Z"}, {"uuid": "a1f5e51e-3338-44f6-a450-02f34c00acee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65601", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj", "content": "", "creation_timestamp": "2026-08-05T22:35:12.099216Z"}, {"uuid": "55e876a3-34b5-49b5-96de-88df87b46e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65601", "type": "seen", "source": "https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5", "content": "# CVE-2026-65601: CVE-2026-65601: Namespace Confusion Vulnerability in Traefik Gateway API HTTPRoute BackendRef ExtensionRef Resolution\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-65601\n\n## Summary\nCVE-2026-65601 is a critical security vulnerability within Traefik's implementation of the Kubernetes Gateway API. Due to variable reuse and incorrect namespace resolution logic in the routing engine, Traefik resolved custom extension filters (such as Traefik CRD Middlewares) inside a target backend service's namespace rather than the originating HTTPRoute's namespace. This flaw enables a low-privileged tenant to bypass namespace isolation boundaries and invoke highly privileged middleware components in foreign namespaces to which they only have service-level routing access.\n\n## TL;DR\nTraefik versions 3.7.0 through 3.7.6 are vulnerable to namespace confusion where backend-level custom filters (ExtensionRefs) are resolved using the backend service's namespace instead of the source HTTPRoute's namespace, permitting cross-namespace middleware hijacking.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00238\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Traefik Labs Traefik (Kubernetes Gateway API Provider)\n- **Traefik**: >= 3.7.0, <= 3.7.6 (Fixed in: `3.7.7`)\n\n## Mitigation\n\n- Upgrade Traefik instances to patched version 3.7.7.\n- Audit and restrict Kubernetes Gateway API ReferenceGrant resources to trusted namespaces only.\n- Implement Kyverno or OPA Gatekeeper policies to block cross-namespace HTTPRoutes using ExtensionRef filters.\n\n**Remediation Steps:**\n1. Identify all running Traefik deployments in the cluster utilizing the Gateway API provider.\n2. Update the Traefik container image tags to 3.7.7 in the respective deployment manifests or Helm values files.\n3. Apply the updated configuration using kubectl or GitOps pipelines to perform a rolling restart.\n4. Verify that the Traefik controller logs indicate version 3.7.7 is active and processing configurations without namespace resolution errors.\n\n## References\n\n- [Traefik Security Advisory GHSA-qq9q-x9w4-chhj](https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj)\n- [Traefik Code Patch Commit 655d6324ab4a1475892a958d4bae389720a67ea9](https://github.com/traefik/traefik/commit/655d6324ab4a1475892a958d4bae389720a67ea9)\n- [Traefik Code Patch Commit 26c96a3935cafb473f4a5bae1886560d9aa4e4f0](https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref)\n- [Wiz Vulnerability DB Entry](https://www.wiz.io/vulnerability-database/cve/cve-2026-65601)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-65601) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-05T23:31:11.804823Z"}, {"uuid": "0c359664-adc2-40e3-946b-1a2ab77e26f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65601", "type": "seen", "source": "https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5", "content": "# CVE-2026-65601: CVE-2026-65601: Namespace Confusion Vulnerability in Traefik Gateway API HTTPRoute BackendRef ExtensionRef Resolution\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-65601\n\n## Summary\nCVE-2026-65601 is a critical security vulnerability within Traefik's implementation of the Kubernetes Gateway API. Due to variable reuse and incorrect namespace resolution logic in the routing engine, Traefik resolved custom extension filters (such as Traefik CRD Middlewares) inside a target backend service's namespace rather than the originating HTTPRoute's namespace. This flaw enables a low-privileged tenant to bypass namespace isolation boundaries and invoke highly privileged middleware components in foreign namespaces to which they only have service-level routing access.\n\n## TL;DR\nTraefik versions 3.7.0 through 3.7.6 are vulnerable to namespace confusion where backend-level custom filters (ExtensionRefs) are resolved using the backend service's namespace instead of the source HTTPRoute's namespace, permitting cross-namespace middleware hijacking.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00238\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Traefik Labs Traefik (Kubernetes Gateway API Provider)\n- **Traefik**: >= 3.7.0, <= 3.7.6 (Fixed in: `3.7.7`)\n\n## Mitigation\n\n- Upgrade Traefik instances to patched version 3.7.7.\n- Audit and restrict Kubernetes Gateway API ReferenceGrant resources to trusted namespaces only.\n- Implement Kyverno or OPA Gatekeeper policies to block cross-namespace HTTPRoutes using ExtensionRef filters.\n\n**Remediation Steps:**\n1. Identify all running Traefik deployments in the cluster utilizing the Gateway API provider.\n2. Update the Traefik container image tags to 3.7.7 in the respective deployment manifests or Helm values files.\n3. Apply the updated configuration using kubectl or GitOps pipelines to perform a rolling restart.\n4. Verify that the Traefik controller logs indicate version 3.7.7 is active and processing configurations without namespace resolution errors.\n\n## References\n\n- [Traefik Security Advisory GHSA-qq9q-x9w4-chhj](https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj)\n- [Traefik Code Patch Commit 655d6324ab4a1475892a958d4bae389720a67ea9](https://github.com/traefik/traefik/commit/655d6324ab4a1475892a958d4bae389720a67ea9)\n- [Traefik Code Patch Commit 26c96a3935cafb473f4a5bae1886560d9aa4e4f0](https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref)\n- [Wiz Vulnerability DB Entry](https://www.wiz.io/vulnerability-database/cve/cve-2026-65601)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-65601) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T00:00:17.857903Z"}, {"uuid": "1ee07348-9ad3-4193-8fd8-5aa189938b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65602", "type": "seen", "source": "https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7", "content": "# CVE-2026-65602: CVE-2026-65602: IngressRouteTCP ServersTransport Namespace Bypass in Traefik\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-65602\n\n## Summary\nAn authorization bypass vulnerability in Traefik allows low-privileged users within unauthorized Kubernetes namespaces to reference privileged file-provider TCP serversTransports via IngressRouteTCP resources, bypassing the crossProviderNamespaces constraint.\n\n## TL;DR\nTraefik fails to validate the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport configurations, enabling cross-provider namespace bypass.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network (Remote)\n- **CVSS v4.0**: 5.3 (Medium)\n- **Impact Type**: Subsequent System Integrity and Confidentiality (High)\n- **Exploit Status**: No public weaponized exploits or active exploitation reported\n- **Mitre ATT&CK Technique**: T1068 (Exploitation for Privilege Escalation)\n\n## Affected Systems\n\n- Traefik reverse proxy deployments running within Kubernetes clusters using IngressRouteTCP CRDs.\n- **Traefik**: >= 3.6.0, <= 3.6.22 (Fixed in: `3.6.23`)\n- **Traefik**: >= 3.7.0, <= 3.7.6 (Fixed in: `3.7.7`)\n\n## Mitigation\n\n- Enforce explicit crossProviderNamespaces restrictions in static configurations.\n- Perform periodic scans on custom resource definitions to identify unauthorized provider suffixes.\n- Segregate administrative and untrusted workloads into isolated Kubernetes cluster deployments.\n\n**Remediation Steps:**\n1. Identify the current active Traefik deployment version.\n2. Upgrade to Traefik v3.6.23 or v3.7.7 depending on the active branch.\n3. Verify the static configuration explicitly includes the crossProviderNamespaces list containing only trusted namespaces.\n4. Run the kubectl diagnostic command to audit active IngressRouteTCP resources.\n\n## References\n\n- [GHSA-42cj-m3vj-89wv: Traefik IngressRouteTCP ServersTransport Namespace Bypass](https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv)\n- [Official Fix Commit](https://github.com/traefik/traefik/commit/67501cbe7bc7774e26ecbd1c29af97f098e14b0b)\n- [Official Preparation Commit](https://github.com/traefik/traefik/commit/26c96a3935cafb473f4a5bae1886560d9aa4e4f0)\n- [Official Release Information (v3.6.23)](https://github.com/traefik/traefik/releases/tag/v3.6.23)\n- [Official Release Information (v3.7.7)](https://github.com/traefik/traefik/releases/tag/v3.7.7)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/traefik-before-ingressroutetcp-serverstransport-namespace-bypass)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-65602) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T00:00:18.214533Z"}, {"uuid": "ef6eb765-528a-4674-b708-e544fc6fef9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65600", "type": "seen", "source": "https://gist.github.com/alon710/1c8a7f596af5fdd35dfa04b0effb7a0b", "content": "# CVE-2026-65600: CVE-2026-65600: Authentication Bypass via Path Traversal in Traefik ReplacePathRegex Middleware\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-08-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-65600\n\n## Summary\nCVE-2026-65600 is a path traversal vulnerability in the ReplacePathRegex middleware component of Traefik. An unauthenticated remote attacker can exploit the vulnerability to inject directory traversal sequences. When Traefik forwards the resulting un-normalized path, downstream backend web servers normalize the request to execute administrative or protected paths, bypassing gateway-enforced security policies.\n\n## TL;DR\nA path traversal vulnerability in Traefik's ReplacePathRegex middleware allows unauthenticated remote attackers to bypass gateway authentication controls by exploiting parser differentials and un-normalized path forwarding.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS v4.0**: 7.8 (High)\n- **EPSS Score**: 0.00674\n- **Impact**: Authentication Bypass\n- **Exploit Status**: Proof of Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Traefik Proxy\n- Traefik Ingress Controller\n- **Traefik**: <= v2.11.51 (Fixed in: `v2.11.52`)\n- **Traefik**: >= v3.6.0, <= v3.6.22 (Fixed in: `v3.6.23`)\n- **Traefik**: >= v3.7.0, <= v3.7.6 (Fixed in: `v3.7.7`)\n\n## Mitigation\n\n- Upgrade Traefik proxy instances to patched software versions.\n- Audit and restrict permissive regular expressions in ReplacePathRegex middleware definitions.\n- Deploy Web Application Firewall (WAF) filtering rules to block directory traversal sequences.\n\n**Remediation Steps:**\n1. Review active routing configurations and identify any instances of the ReplacePathRegex middleware.\n2. Modify regular expression definitions to require strict path delimiters (e.g., using '^/api/(.*)' instead of '^/api(.*)').\n3. Update Traefik to version v2.11.52, v3.6.23, or v3.7.7 depending on the active release branch.\n4. Enable verbose debugging logs and monitor for HTTP 400 responses generated by the new URL validation logic.\n\n## References\n\n- [GHSA-cxjq-mrr5-89rv: Authentication Bypass via ReplacePathRegex](https://github.com/traefik/traefik/security/advisories/GHSA-cxjq-mrr5-89rv)\n- [NVD - CVE-2026-65600 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-65600)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-65600) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T18:31:30.132032Z"}, {"uuid": "09c2c4fd-263c-4405-9b91-46bf324ee9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65600", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-cxjq-mrr5-89rv", "content": "", "creation_timestamp": "2026-08-06T18:35:06.384298Z"}, {"uuid": "de338291-d4b2-43c4-bbaa-2950e7d85878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65603", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrabll3cy72g", "content": "Grav Login plugin <=3.8.11 hit by HIGH severity privilege escalation (CVE-2026-65603). Upgrade to v3.8.12 immediately to prevent super-admin takeover & RCE. https://radar.offseq.com/threat/cve-2026-65603-improper-privilege-management-in-getgrav-grav-12319d7ebec99910 #OffSeq #GravCMS #Vuln", "creation_timestamp": "2026-07-22T12:00:35.973285Z"}, {"uuid": "62f63713-f6e9-48bc-9e8d-9f94854e00d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65603", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116963516971345867", "content": "CVE-2026-65603: HIGH severity privilege escalation in Grav Login plugin (<=3.8.11). Low-priv users can gain super-admin & RCE. Patch to v3.8.12 ASAP! https://radar.offseq.com/threat/cve-2026-65603-improper-privilege-management-in-getgrav-grav-12319d7ebec99910 #OffSeq #GravCMS #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-07-22T12:00:39.491777Z"}, {"uuid": "4bfcc71a-e153-4bc6-89bf-b5e554cfe2d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrafpox3nd2s", "content": "CVE-2026-65603 - Grav Login Plugin 3.8.11 Privilege Escalation via Profile Update\nCVE ID : CVE-2026-65603\n \n Published : July 22, 2026, 12:18 p.m. | 18\u00a0minutes ago\n \n Description : The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation f...", "creation_timestamp": "2026-07-22T13:14:28.779559Z"}, {"uuid": "03994729-cf47-46d7-9f12-8c373b321c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrd43gthce2v", "content": "CVE-2026-65605\nSiYuan's Attribute View in older versions allows malicious code to be injected into web pages, potentially allowing attackers to execute arbitrary commands on the system. This affects users who view databases\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-23T15:00:04.935706Z"}, {"uuid": "769d74f8-2bbd-4bed-9039-7c90e2fd16e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrd43i7i3i2a", "content": "CVE-2026-65606\nSiYuan users may be tricked into opening malicious links that can execute arbitrary operating system commands. This is a serious risk because it allows attackers to take control of the user's computer. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-23T15:00:06.252790Z"}, {"uuid": "25e9c5a0-bf46-4f58-8a9e-c2d473cd58bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65604", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwwwinuc2e", "content": "\ud83d\udfe0 CVE-2026-65604 - High (8.2)\n\nSkipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Op...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65604/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T23:00:45.258597Z"}, {"uuid": "4bac983c-3131-4f2b-8462-ec3c2169d73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65604", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mre2ahctmm2e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-65604](https://github.com/zalando/skipper/security/advisories/GHSA-8qqm-fp2q-v734)\nSkip...\nhttps://github.com/zalando/skipper/security/advisories/GHSA-8qqm-fp2q-v734 #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-23T23:59:46.124542Z"}]}