Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore() interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTube database tables, including oAuthToken.accessToken, and take over administrator accounts. This issue is fixed in version 8.1.6.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
LOW Alert (CVE-2026-73211): PeerTube vulnerability Read more: https://threat.veritispottr.com #CyberSecurity #ThreatIntel #InfoSec
Post summary
A low‑severity alert for CVE‑2026‑73211, a PeerTube vulnerability, is posted with a link to additional information, but it contains no PoC, exploit, active exploitation, patch, or technical details.
NewNormal Security turns the last 24 hours of CVEs into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 12 Aug 2026 𝗔𝗱𝗱𝗲𝗱 to NewScan 𝘁𝗼𝗱𝗮𝘆: 💉 Unauthenticated SQL injection from a federated peer — another server injects SQL with no account on yours, reads the token table and takes over an admin (PeerTube CVE-2026-73211) 🔓 Cross-origin takeover of a published video — a hostile peer rewrites another server's video metadata, visibility and media URLs (PeerTube CVE-2026-73090) 📦 Actively-exploited advisory match on a VPN appliance — one unauthenticated request reloads the firewall and drops remote access for the whole workforce (Cisco CVE-2026-20349) Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve&s=x #infosec #AppSec #SQLi #CSO #REDTEAM
Post summary
The report lists daily CVEs with technical details, noting one as actively exploited, but it does not provide PoC or exploit code.