{"vulnerability": "CVE-2026-19670", "sightings": [{"uuid": "27343b51-d6ff-4cd1-89b4-994463a5c6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19670", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841", "content": "", "creation_timestamp": "2026-08-21T20:15:14.280084Z"}, {"uuid": "1a6f4f76-c14b-4aa4-baaa-cd02cd46857a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19670", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mttohpmzm52x", "content": "CVE-2026-19670 [MEDIUM] nginx\n\nMalcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /auth, /admin_login, /arkime/api/esadmin, NetBox, upload endpoints) by\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-19670", "creation_timestamp": "2026-08-24T16:02:03.048992Z"}]}