{"vulnerability": "CVE-2026-2400", "sightings": [{"uuid": "44d8c7ee-7673-4b39-a541-f756059bd9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdjyum2vxf2w", "content": "", "creation_timestamp": "2026-01-29T04:58:29.924157Z"}, {"uuid": "f679acae-7664-4d68-95a6-74c5f8828224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhngqxh22u", "content": "", "creation_timestamp": "2026-02-26T05:29:17.119464Z"}, {"uuid": "e2cb26ca-c88b-4612-b05e-2dc770ec3e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mdkounutbo2n", "content": "", "creation_timestamp": "2026-01-29T11:32:14.590402Z"}, {"uuid": "99ff07a9-3913-451d-85a8-93cd584c7e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdl633jd5s2w", "content": "", "creation_timestamp": "2026-01-29T16:04:21.163992Z"}, {"uuid": "65e91cbd-c30c-4fec-b35f-0e682090e94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24001", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "b8bce353-daa7-4939-a3e4-5126b048a338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycnlt2qk2r", "content": "", "creation_timestamp": "2026-01-22T04:05:37.134595Z"}, {"uuid": "fcddca53-f0cc-48c9-80f6-f8ea7ec4308b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcycu5qkai2t", "content": "", "creation_timestamp": "2026-01-22T04:09:16.524775Z"}, {"uuid": "c0c28cd0-a1b2-4337-80c1-53a341bcde55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyfwkwe6i2n", "content": "", "creation_timestamp": "2026-01-22T05:04:18.735800Z"}, {"uuid": "ac41bf6a-b948-412c-8ce0-9918b8e0269f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyg426q4t2h", "content": "", "creation_timestamp": "2026-01-22T05:07:23.163253Z"}, {"uuid": "35cf53be-3efa-4639-a14c-cb77737652d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcyg7jdntp23", "content": "", "creation_timestamp": "2026-01-22T05:09:19.179470Z"}, {"uuid": "46dd49c0-05ae-403d-a0f5-48e504d5e378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mczltxgrze2h", "content": "", "creation_timestamp": "2026-01-22T16:22:54.190966Z"}, {"uuid": "565a4c59-77e8-4419-8c3b-ad7908f9fb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mczlulagaw23", "content": "", "creation_timestamp": "2026-01-22T16:23:15.055017Z"}, {"uuid": "0bdf2fc2-e378-4dbb-8c65-04a5897818cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczzsofrpr2t", "content": "", "creation_timestamp": "2026-01-22T20:32:42.958351Z"}, {"uuid": "016f421f-273b-4edb-ba05-fb0f85a17ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24001", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3md3nonjr7e2h", "content": "", "creation_timestamp": "2026-01-23T12:01:03.099739Z"}, {"uuid": "8e057638-c2f6-4924-aca3-128ffc070a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/553f80036420883648a8e05762aa083e", "content": "", "creation_timestamp": "2026-01-24T21:22:30.000000Z"}, {"uuid": "89141957-2112-4d34-be04-d5d67af9c77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://gist.github.com/alon710/c7f450c2bc28d71462bc12de55993010", "content": "", "creation_timestamp": "2026-01-24T21:22:29.000000Z"}, {"uuid": "6647edfc-d43c-41d7-8c22-438ba327b958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/0d9cdf62717d80901cfb58437a588c84", "content": "", "creation_timestamp": "2026-01-24T22:16:49.000000Z"}, {"uuid": "f539c464-df94-41fe-8982-e9517d02a9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/09943518daa9a525ed9c22ccccf2a59f", "content": "", "creation_timestamp": "2026-01-24T22:16:46.000000Z"}, {"uuid": "3ba526d1-3195-4b2d-b8cf-557592b3783e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://gist.github.com/alon710/7a76b64aa58a02c54677f587ee5f8286", "content": "", "creation_timestamp": "2026-01-24T22:16:43.000000Z"}, {"uuid": "389cce39-0c32-4dda-9f29-8ab01eba2652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24006", "type": "seen", "source": "https://gist.github.com/alon710/eac01783d38aea2ecadbcd3538b78835", "content": "", "creation_timestamp": "2026-01-24T22:16:41.000000Z"}, {"uuid": "b3bae0c0-5a2d-44df-8866-64bf83720d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdeldvqvch2c", "content": "", "creation_timestamp": "2026-01-27T01:13:11.800682Z"}, {"uuid": "4458e65c-2282-4b1d-a716-5ae42763fca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdfnoipjjj2l", "content": "", "creation_timestamp": "2026-01-27T11:27:34.529034Z"}, {"uuid": "9097c540-fdaa-4afd-bee5-5ad5b951ad42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://thehackernews.com/2026/01/critical-grist-core-vulnerability.html", "content": "", "creation_timestamp": "2026-01-27T09:36:00.000000Z"}, {"uuid": "eeeb66f3-7e25-4d14-a9e3-38f2a2a08ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mdhylaam4c2k", "content": "", "creation_timestamp": "2026-01-28T09:47:57.094697Z"}, {"uuid": "2931f7d6-9564-447b-8a42-5d30ba96abb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2400", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjhwsqvbmg2z", "content": "", "creation_timestamp": "2026-04-14T17:47:30.418836Z"}, {"uuid": "40d62d72-3989-4164-9e5f-e33c0133671c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/CyberDispatch/597", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "creation_timestamp": "2026-08-30T00:00:48.612100Z"}, {"uuid": "6e089098-db94-472a-8cbb-a7e86796ffde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24001", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mlb677hm7s2y", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-24001 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/386 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-05-07T12:01:29.534093Z"}, {"uuid": "919f7a0a-7666-49cc-b842-c1a7b3581773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/CyberDispatch/597", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "creation_timestamp": "2026-08-29T20:00:23.052374Z"}, {"uuid": "7b54bda9-4346-4197-8271-8abb2c418eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/wh_lab/575", "content": "\ud83d\udcf0 \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udd8e AdaptixC2 v1.1\n\n\ud83d\udcbb Advancing Windows security: Disabling NTLM by default\n\n\ud83d\udcf0 \u0416\u0443\u0440\u043d\u0430\u043b Backconnect\n\n\ud83d\udcbb Stratus Red Team v2.32.2\n\n\ud83d\udcbb ADACLScanner v9.4\n\n\ud83d\udcbb GhostKatz - \u0434\u0430\u043c\u043f LSASS \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\n\n\u2699 CVE-2026-24002 - RCE sandbox escape in Grist\u2011Core\n\n\ud83c\udf83 Awesome Hacker Search Engines\n\n\ud83d\udd78 Top 10 web hacking techniques of 2025\n\n\ud83d\udcbb LEHACK 2025 (Active Directory Lab)\n\n\ud83d\udc15 BloodHound CE v8.5.2\n\n#digest #useful #posts\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "creation_timestamp": "2026-08-15T08:00:03.969763Z"}, {"uuid": "144ff2be-290f-460e-a530-828fcb5c9a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2400", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02", "content": "", "creation_timestamp": "2026-07-09T16:15:17.077141Z"}, {"uuid": "a2c28cb5-921f-4fa6-bbc8-e92d2bddcee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/wh_lab/575", "content": "\ud83d\udcf0 \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udd8e AdaptixC2 v1.1\n\n\ud83d\udcbb Advancing Windows security: Disabling NTLM by default\n\n\ud83d\udcf0 \u0416\u0443\u0440\u043d\u0430\u043b Backconnect\n\n\ud83d\udcbb Stratus Red Team v2.32.2\n\n\ud83d\udcbb ADACLScanner v9.4\n\n\ud83d\udcbb GhostKatz - \u0434\u0430\u043c\u043f LSASS \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\n\n\u2699 CVE-2026-24002 - RCE sandbox escape in Grist\u2011Core\n\n\ud83c\udf83 Awesome Hacker Search Engines\n\n\ud83d\udd78 Top 10 web hacking techniques of 2025\n\n\ud83d\udcbb LEHACK 2025 (Active Directory Lab)\n\n\ud83d\udc15 BloodHound CE v8.5.2\n\n#digest #useful #posts\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "creation_timestamp": "2026-08-16T00:00:48.488593Z"}, {"uuid": "5df54901-c3b8-4e69-9732-416e9b11faf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/cyberwarehouse/1065", "content": "#exploit\n#AppSec\n1\u20e3  CVE-2025-67813:\nRCE via Quest Desktop Authority Named Pipe\n// A vulnerability in Quest Desktop Authority allows authenticated users to remotely execute code and perform malicious operations via a named pipe, which can be mitigated by patches, firewalls, or disabling the service\n2\u20e3  CVE-2026-24002:\nRCE sandbox escape in Grist\u2011Core\n// One malicious formula can turn a spreadsheet into a\u00a0RCE beachhead...\n3\u20e3  CVE-2025-49825:\nTeleport remote authentication bypass\n// CVE-2025-49825 is a critical Teleport vulnerability allowing attackers to bypass authentication and potentially gain root access via nested SSH certificates if unpatched", "creation_timestamp": "2026-07-26T02:00:06.871319Z"}, {"uuid": "bdc14689-5fed-472f-b3b3-87c9c84f1533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/cyberwarehouse/1065", "content": "#exploit\n#AppSec\n1\u20e3  CVE-2025-67813:\nRCE via Quest Desktop Authority Named Pipe\n// A vulnerability in Quest Desktop Authority allows authenticated users to remotely execute code and perform malicious operations via a named pipe, which can be mitigated by patches, firewalls, or disabling the service\n2\u20e3  CVE-2026-24002:\nRCE sandbox escape in Grist\u2011Core\n// One malicious formula can turn a spreadsheet into a\u00a0RCE beachhead...\n3\u20e3  CVE-2025-49825:\nTeleport remote authentication bypass\n// CVE-2025-49825 is a critical Teleport vulnerability allowing attackers to bypass authentication and potentially gain root access via nested SSH certificates if unpatched", "creation_timestamp": "2026-07-27T00:00:34.136193Z"}, {"uuid": "74ccc8cd-3047-49a2-8060-9e161ff38908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:20.482724Z"}, {"uuid": "b7cab616-4e47-4233-8d6c-775161d8c0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:45.461151Z"}, {"uuid": "fad89da9-a787-4f40-978f-532fd1f07ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/CyberDispatch/597", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "creation_timestamp": "2026-08-31T00:00:11.548080Z"}, {"uuid": "5a67dc23-695f-412a-8adc-2ed0803c8182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:24.348866Z"}]}