{"vulnerability": "CVE-2026-46428", "sightings": [{"uuid": "21dd0881-7cd5-4c7c-8309-d0ff2521a0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf3yend2i", "content": "CVE-2026-46428 - lettre\nThe Lettre mailer library for Rust has a security flaw that can allow an attacker to intercept email submissions and credentials. This is because Lettre does not verify the identity of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lettre #CVE #infosec", "creation_timestamp": "2026-07-20T16:42:05.629592Z"}, {"uuid": "162879d4-9f0d-43b3-b783-0fc0f9edc6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3uqph73s2o", "content": "CVE-2026-46428 - lettre has TLS hostname verification disabled when using Boring TLS backend\nCVE ID : CVE-2026-46428\n \n Published : July 20, 2026, 4:17 p.m. | 18\u00a0minutes ago\n \n Description : lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version...", "creation_timestamp": "2026-07-20T18:00:10.201896Z"}, {"uuid": "05da1c38-6623-4c8f-ba82-40b03a880ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46428", "type": "published-proof-of-concept", "source": "https://github.com/lettre/lettre/security/advisories/GHSA-4pj9-g833-qx53", "content": "", "creation_timestamp": "2026-07-28T16:35:09.815350Z"}]}