{"vulnerability": "CVE-2026-100176", "sightings": [{"uuid": "1a817ff2-11bf-4d15-b6d9-084e0c4001c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ko367vm4dkqi", "content": "CVE-2026-100176 - Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip\nCVE ID : CVE-2026-100176\n \n Published : Sept. 25, 2026, 1:29 p.m. | 16\u00a0minutes ago\n \n Description : The AIL Framework's username timeline feature is vulnerable to stored cross-site s...", "creation_timestamp": "2026-09-25T14:19:00.423380Z"}, {"uuid": "1d272ec6-46f1-4228-91a2-77a8b2fb9719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100176", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhx3rrkxq2f", "content": "CVE-2026-100176 - ail framework\nThe AIL Framework\u2019s username timeline stores usernames without filtering them. If a malicious username contains hidden code, it can run in the browser of any analyst\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ailframework #ailproject #CVE #infosec", "creation_timestamp": "2026-09-27T04:20:04.399425Z"}]}