{"vulnerability": "CVE-2026-103764", "sightings": [{"uuid": "699de330-c03a-488e-93f3-41829fa928b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-103764", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117368372293171263", "content": "CRITICAL CVE-2026-103764 in kvcache-ai Mooncake (<0.3.13): Untrusted pointer dereference lets unauthenticated attackers read/write arbitrary memory, risking data leak & code execution. Patch to 0.3.13+ now! https://radar.offseq.com/threat/cve-2026-103764-untrusted-pointer-dereference-in-kvcache-ai-mooncake-1cbac989f2110be6 #OffSeq #CVE #Vuln #infosec", "creation_timestamp": "2026-10-02T00:00:36.494015Z"}, {"uuid": "9bd896fc-ae74-4974-a03c-099aa287c32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-103764", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwu2whj7dz2f", "content": "CRITICAL: CVE-2026-103764 in kvcache-ai Mooncake (<0.3.13) lets unauthenticated users read/write memory \u2014 data leaks & code execution possible. Patch to 0.3.13+ ASAP! https://radar.offseq.com/threat/cve-2026-103764-untrusted-pointer-dereference-in-kvcache-ai-mooncake-1cbac989f2110be6 #OffSeq #CVE...", "creation_timestamp": "2026-10-02T00:00:38.491463Z"}, {"uuid": "4bf88e14-dc3b-4f2c-84f4-7575bea46da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103764", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwu5j24kfu2c", "content": "\ud83d\udd34 CVE-2026-103764 - Critical (9.8)\n\nMooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103764/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T00:46:49.679471Z"}, {"uuid": "35548776-4966-4608-af8d-ee225772fc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3klqltosnkv4y", "content": "CVE-2026-103764 - Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport\nCVE ID : CVE-2026-103764\n \n Published : Oct. 2, 2026, 12:16 a.m. | 43\u00a0minutes ago\n \n Description : Mooncake transfer engine before 0.3.13 contains an untruste...", "creation_timestamp": "2026-10-02T01:44:55.061213Z"}, {"uuid": "779700e3-0480-47ee-bfdd-8371ae923e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103764", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwubzuelk52u", "content": "\ud83d\udea8 CVE-2026-103764 \u2014 CVSS 9.3 CRITICAL\n\nMooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHead...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103764\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T02:07:48.171888Z"}]}