{"vulnerability": "CVE-2026-2796", "sightings": [{"uuid": "49a7265b-d89b-4077-87ac-222b7ca2ca95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27969", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvybxrojd2k", "content": "", "creation_timestamp": "2026-02-28T10:10:24.980829Z"}, {"uuid": "bf46a6b8-9b66-44e7-b77f-f963e11cf65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgawe6lj242i", "content": "", "creation_timestamp": "2026-03-04T18:35:09.588580Z"}, {"uuid": "adefae3c-ef15-405b-a0e9-dcedc22d1c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://gist.github.com/alon710/bbb2b9f63be691f9cd5588ec4822d51e", "content": "", "creation_timestamp": "2026-02-27T04:00:18.000000Z"}, {"uuid": "63ed6502-7fb4-4ce9-87b4-ceb7543692c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27969", "type": "seen", "source": "https://gist.github.com/alon710/e1ec4d28426e93e5bbac8a63052d7481", "content": "", "creation_timestamp": "2026-02-27T16:40:11.000000Z"}, {"uuid": "c676f829-71d7-4e28-bc92-c70608bd69ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mggnhv7zcc2y", "content": "", "creation_timestamp": "2026-03-07T01:12:07.737022Z"}, {"uuid": "e60eadac-b6ee-4342-beac-05741dca9669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mggxr4wwk22y", "content": "", "creation_timestamp": "2026-03-07T04:16:20.720700Z"}, {"uuid": "c4030f75-3fc5-488e-acd3-2e96e4035df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27966", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfq7dgl2ih2o", "content": "", "creation_timestamp": "2026-02-26T03:00:32.177662Z"}, {"uuid": "a9c6cc33-b8ca-4410-9422-95acbcd88e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27961", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqe2bychd2t", "content": "", "creation_timestamp": "2026-02-26T04:24:53.668845Z"}, {"uuid": "a2d96ccc-861a-4437-971e-e00ed97bf774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfv5z3q6uz22", "content": "", "creation_timestamp": "2026-02-28T02:20:09.553329Z"}, {"uuid": "0d830f76-e8a7-4fd5-a074-6e5726b994e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27966", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mfxqtqs4qk2t", "content": "", "creation_timestamp": "2026-03-01T03:02:33.683073Z"}, {"uuid": "7fbe83b3-f7b6-4bdc-a578-9d26892c962f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27969", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfqeehtgzj22", "content": "", "creation_timestamp": "2026-02-26T04:30:35.408312Z"}, {"uuid": "e2bdc58b-3bc6-49c1-af68-cd432b6f09d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27961", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqg5pn7fb2e", "content": "", "creation_timestamp": "2026-02-26T05:02:35.700644Z"}, {"uuid": "8227924f-a621-4015-9638-a922c755d412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqgpmjeqa2x", "content": "", "creation_timestamp": "2026-02-26T05:12:36.549510Z"}, {"uuid": "9447c3e4-ce45-47c4-bdc5-0eee92de4c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqgwfrb4u2s", "content": "", "creation_timestamp": "2026-02-26T05:16:24.681548Z"}, {"uuid": "f9312c64-26ec-40da-a125-0cdaf2f2c50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27969", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqgykykey2u", "content": "", "creation_timestamp": "2026-02-26T05:17:36.826495Z"}, {"uuid": "2ab16cca-0ce9-4196-bee9-a36a44aeaff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhbjglld2n", "content": "", "creation_timestamp": "2026-02-26T05:22:37.043417Z"}, {"uuid": "674b117c-1b93-463a-a187-c078e9fe1db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27963", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqie5wgmp2y", "content": "", "creation_timestamp": "2026-02-26T05:41:59.590155Z"}, {"uuid": "6044af13-6ad5-4b18-be59-42f852bd1649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27967", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgddqt3f5l2q", "content": "", "creation_timestamp": "2026-03-05T17:40:11.439048Z"}, {"uuid": "5cf8181e-b423-457d-a15e-6bfa3933f2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mg73ihurfk2n", "content": "", "creation_timestamp": "2026-03-04T01:01:45.390258Z"}, {"uuid": "7518f90f-16ab-4f7f-8c73-5cdadd6b5c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqvfdqvup2k", "content": "", "creation_timestamp": "2026-02-26T09:35:18.346570Z"}, {"uuid": "530f9eab-f791-4c68-aedb-f6aaa5c88a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27961", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg44fvmy362h", "content": "", "creation_timestamp": "2026-03-02T20:40:10.187938Z"}, {"uuid": "a019beec-a3b9-465b-8c51-99d9b1f563a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27965", "type": "seen", "source": "https://gist.github.com/alon710/698e47d7e7b029f09315d51259967445", "content": "", "creation_timestamp": "2026-02-26T23:10:18.000000Z"}, {"uuid": "1907117e-803b-4733-976a-53843fbf2b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://gist.github.com/sizhangzhaodd/15d79f1e131ff588eab300433df561ba", "content": "", "creation_timestamp": "2026-03-13T22:45:26.000000Z"}, {"uuid": "133c9801-7c81-46a5-875f-8df5e44ee89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27962", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhmxw5omiy2w", "content": "", "creation_timestamp": "2026-03-22T07:00:13.664082Z"}, {"uuid": "32791894-13f5-4386-becf-9b9657f4e393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb", "content": "", "creation_timestamp": "2026-04-23T14:21:28.000000Z"}, {"uuid": "24750b0d-d1eb-456f-aacf-7b2772a3a502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/GithubRedTeam/79506", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WostGit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-09 00:55:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-09T01:00:04.000000Z"}, {"uuid": "604b4bb4-f1cb-46b3-9323-3d54f6490af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeot63t2f", "content": "", "creation_timestamp": "2026-04-24T21:02:35.716950Z"}, {"uuid": "d5dd62c3-9d96-49ad-a5f7-1296f1b3926d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/5949", "content": "Anthropic \u0438 Mozilla \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442: \u043c\u043e\u0434\u0435\u043b\u044c Claude Opus 4.6 \u0437\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0448\u043b\u0430 22 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Firefox, 14 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u043c\u0438. \u042d\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u043f\u044f\u0442\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0434\u044b\u0440, \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0437\u0430 \u0432\u0435\u0441\u044c \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0433\u043e\u0434.\n\n\u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0432 \u044f\u043d\u0432\u0430\u0440\u0435. Claude \u043d\u0430\u0447\u0430\u043b \u0441 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0430 \u0438 \u0437\u0430 20 \u043c\u0438\u043d\u0443\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 use-after-free. \u041c\u043e\u0434\u0435\u043b\u044c \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043e\u043a\u043e\u043b\u043e 6000 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 C++ \u0438 \u0432\u044b\u0434\u0430\u043b\u0430 112 \u043e\u0442\u0447\u0451\u0442\u043e\u0432, \u043f\u043e\u043c\u0438\u043c\u043e CVE, \u043d\u0430\u0448\u043b\u0438\u0441\u044c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0431\u0430\u0433\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0437\u0437\u0438\u043d\u0433 \u043d\u0435 \u0437\u0430\u0441\u0451\u043a.\n\n\u0421\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-2796 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e CVSS. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 JIT-\u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 WebAssembly \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. Anthropic \u043f\u043e\u0442\u0440\u0430\u0442\u0438\u043b\u0430 $4000 \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0430 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438, \u0438 \u0442\u043e \u043b\u0438\u0448\u044c \u0432 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0441 \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435\u0439. \u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0437\u0430\u0449\u0438\u0442\u0430 Firefox \u0443\u0441\u0442\u043e\u044f\u043b\u0430.\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u0430\u0441\u0442: \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c CURL \u0414\u0430\u043d\u0438\u044d\u043b\u044c \u0421\u0442\u0435\u043d\u0431\u0435\u0440\u0433 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0437\u0430\u043a\u0440\u044b\u043b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 bug bounty \u0438\u0437-\u0437\u0430 \u043b\u0430\u0432\u0438\u043d\u044b \u0418\u0418-\u043c\u0443\u0441\u043e\u0440\u0430,  \u043d\u0438 \u043e\u0434\u0438\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0451\u0442 \u0437\u0430 \u0448\u0435\u0441\u0442\u044c \u043b\u0435\u0442 \u043d\u0435 \u043d\u0430\u0448\u0451\u043b \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u044b\u0440\u044b \u0432 \u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0435. \u0420\u0430\u0437\u043d\u0438\u0446\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e Anthropic \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0441 Mozilla \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e, \u0430 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u0430\u0447\u0443.\n\nMozilla \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Firefox 148, \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. Anthropic \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432 \u043f\u0440\u0435\u0432\u044c\u044e \u0441\u0435\u0440\u0432\u0438\u0441 Claude Code Security \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0433\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 148 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\nITsec NEWS", "creation_timestamp": "2026-03-13T14:58:08.000000Z"}, {"uuid": "04f06a94-e06b-47cc-aac7-87f24da0ddc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vpud3o42r", "content": "\ud83d\udd34 CVE-2026-27960 - Critical (9.8)\n\nOpenCTI is an open source platform for managing cyber threat intelligence knowledge and observabl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27960/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:19:06.350327Z"}, {"uuid": "bc78cb09-e5e5-4604-8e06-423ca9105dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ml4vuza7cx2l", "content": "\ud83d\udd34 CVE-2026-27960 - Critical (9.8)\n\nOpenCTI is an open source platform for managing potato threat intelligence knowledge and observabl...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-27960/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:21:58.466972Z"}, {"uuid": "26a58964-ea7d-4c92-ae23-e4c858724b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml56nbuqmt27", "content": "OpenCTI 6.6.0\uff5e6.9.12\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u4efb\u610f\u306e\u30e6\u30fc\u30b6\u30fc\uff08\u7ba1\u7406\u8005\u542b\u3080\uff09\u306b\u306a\u308a\u3059\u307e\u3057\u3066API\u3092\u64cd\u4f5c\u3067\u304d\u308b\u8106\u5f31\u6027\u30026.9.13\u3067\u4fee\u6b63\u3002\nCVE-2026-27960 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-05-05T21:58:42.784054Z"}, {"uuid": "2f21f8db-3d0d-4744-9336-edddefdacd0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27960", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116525749377449787", "content": "\ud83d\udea9 CRITICAL: OpenCTI-Platform opencti (6.6.0 \u2013 6.9.12) hit by CVE-2026-27960 (improper authentication). Unauthenticated attackers can impersonate any user, even admin. Upgrade to 6.9.13 or disable default admin ASAP. https://radar.offseq.com/threat/cve-2026-27960-cwe-287-improper-authentication-in--0f5e78f0 #OffSeq #Vuln #CVE202627960", "creation_timestamp": "2026-05-06T04:30:31.037234Z"}, {"uuid": "b5ad8bf0-bab8-4239-bd67-1e0ff3d73ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27960", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ml5ujwaelp2l", "content": "OpenCTI-Platform opencti (6.6.0 \u2013 6.9.12) faces CRITICAL auth flaw \u2014 attackers can impersonate any user, incl. admin. Patch to 6.9.13 or disable admin now! \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-27960-cwe-287-improper-authentication-in--0f5e78f0 #OffSeq #Cybersecurity #CVE202627960", "creation_timestamp": "2026-05-06T04:30:33.642960Z"}, {"uuid": "f687db0a-12a3-473a-9175-47c53710a510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27962", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms76bxx2di2l", "content": "CVE-2026-27962 - rootio-authlib\nThe rootio-Authlib library on Root:PyPI has a security weakness that makes it possible for unauthorized individuals to access systems that use this library. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootioauthlib #RootPyPI #CVE #infosec", "creation_timestamp": "2026-08-03T18:54:04.312904Z"}, {"uuid": "0eebee2a-0495-42ce-adee-c0e3d46baffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:19.189205Z"}, {"uuid": "d55d2817-58ad-49ca-ab33-56a0ad6365bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmlhe422yd2h", "content": "\ud83d\udccc CVE-2026-27960 - OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a priv... https://www.cyberhub.blog/cves/CVE-2026-27960", "creation_timestamp": "2026-05-24T07:37:06.597671Z"}, {"uuid": "e79ebf0a-0952-4bcf-b325-8d48dc249a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27964", "type": "published-proof-of-concept", "source": "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-gq5c-rw37-g46c", "content": "", "creation_timestamp": "2026-05-07T14:36:39.000000Z"}, {"uuid": "e821f1fd-df36-4b0b-97b5-5d2f7519de5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27962", "type": "published-proof-of-concept", "source": "https://github.com/authlib/authlib/security/advisories/GHSA-wvwj-cvrp-7pv5", "content": "", "creation_timestamp": "2026-03-15T17:47:59.000000Z"}, {"uuid": "76a529fe-e8b1-4578-b966-a83ea7e9c4f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27966", "type": "published-proof-of-concept", "source": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-3645-fxcv-hqr4", "content": "", "creation_timestamp": "2026-02-25T19:06:33.000000Z"}, {"uuid": "0b2b6756-39de-4596-ad79-bb1c35e73c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/GithubRedTeam/92089", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 20:18:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE scanner for Langflow < 1.8.0 \u2014 Route Injection + Vertex Injection \u2192 Code Execution (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.188755Z"}, {"uuid": "9d0aa9a2-a7ce-4742-a2d2-b06474ec8cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/GithubRedTeam/92089", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 20:18:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE scanner for Langflow < 1.8.0 \u2014 Route Injection + Vertex Injection \u2192 Code Execution (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.394476Z"}, {"uuid": "813431ad-482b-4b31-a24b-ca96a3e856d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92089", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 20:18:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE scanner for Langflow < 1.8.0 \u2014 Route Injection + Vertex Injection \u2192 Code Execution (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.852007Z"}, {"uuid": "1df6f9b6-7015-439f-9473-c60b1ff88ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/GithubRedTeam/98986", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 22:26:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.123851Z"}, {"uuid": "90a33f56-bed3-4a26-9b6f-ae2053441013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/GithubRedTeam/98861", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-escape-wasm-by-using-wasm\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 02:42:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.399367Z"}, {"uuid": "67bc42bb-a9fb-402c-ab9b-4f9a6041fe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2796", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mqtdh6hrsp22", "content": "Original text: \"Reverse engineering Claude\u2019s CVE-2026-2796 exploit\" \u2014 Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6\u00a0March\u00a02026).\nhttps://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/", "creation_timestamp": "2026-07-17T08:29:19.598843Z"}, {"uuid": "c79daf4e-ad13-4754-9ab6-2bce5fa13a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98861", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-escape-wasm-by-using-wasm\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 02:42:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:30.938587Z"}, {"uuid": "21fa1a88-a0c6-451e-8f3c-24f2bfb66988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98986", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 22:26:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.210691Z"}, {"uuid": "b1fd243e-40a4-4a9a-9970-54856ef7e1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "Telegram/R6wd-5LU7SZsg8rhU9jD4yxczCySLKIaoSoEZwsPsTI6lA", "content": "", "creation_timestamp": "2026-07-20T19:00:10.573171Z"}, {"uuid": "0b7c99b4-0188-4f89-a953-3f453ccd94bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "Telegram/R6wd-5LU7SZsg8rhU9jD4yxczCySLKIaoSoEZwsPsTI6lA", "content": "", "creation_timestamp": "2026-07-21T00:00:29.355805Z"}, {"uuid": "cd92fa0f-cf97-4482-90ca-18202242a6a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "published-proof-of-concept", "source": "Telegram/R6wd-5LU7SZsg8rhU9jD4yxczCySLKIaoSoEZwsPsTI6lA", "content": "", "creation_timestamp": "2026-07-22T00:00:21.525348Z"}, {"uuid": "3c3994f7-926e-470e-a88b-00ac7d6e4882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrsdquhplq2g", "content": "CVE-2026-27960 OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation\u2026 \nhttps://\ncve.org/CVERecord?id=C\nVE-2026-27\u2026\n\n\u2014 from @HackingLZ (https://x.com/HackingLZ/status/2082498716070469923)", "creation_timestamp": "2026-07-29T16:27:20.579917Z"}, {"uuid": "8c17a775-18fc-45c4-af09-8082b5b1a940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:20.299286Z"}, {"uuid": "405fac32-0208-496d-9ecf-816c59557700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:45.284620Z"}, {"uuid": "b62f25c3-f8c2-48ea-9894-e8723fbaa828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:44.847421Z"}, {"uuid": "42e4092c-984b-4264-9aa2-bf4f2b9ed678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:24.503622Z"}, {"uuid": "3cdf50c1-9769-453c-ac49-eebdb0067b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:24.953101Z"}, {"uuid": "4f07ffb3-5234-488f-9d91-5688226a9ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/proxy_bar/3562", "content": "Reverse Engineering CVE-2026-2796: How Claude Built a Firefox WebAssembly Exploit\n\nOriginal text: \"Reverse engineering Claude\u2019s CVE-2026-2796 exploit\" \u2014 Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6 March 2026). The prose below is an independent technical summary; the code listings are reproduced verbatim from the source with attribution.\n\nExecutive Summary\n\nIn March 2026 Anthropic\u2019s Frontier Red Team\u2026\n\nhttps://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/", "creation_timestamp": "2026-09-02T18:00:06.421518Z"}, {"uuid": "954c7824-3ed0-4589-8222-a14df6ba3066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3562", "content": "Reverse Engineering CVE-2026-2796: How Claude Built a Firefox WebAssembly Exploit\n\nOriginal text: \"Reverse engineering Claude\u2019s CVE-2026-2796 exploit\" \u2014 Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6 March 2026). The prose below is an independent technical summary; the code listings are reproduced verbatim from the source with attribution.\n\nExecutive Summary\n\nIn March 2026 Anthropic\u2019s Frontier Red Team\u2026\n\nhttps://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/", "creation_timestamp": "2026-09-03T00:00:39.673270Z"}]}