{"vulnerability": "CVE-2026-54061", "sightings": [{"uuid": "008fc09c-ee40-4b7a-aafc-5b994f7b9937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54061", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtjsocbdbj2y", "content": "CVE-2026-54061, critical: Dgraph Alpha exposes the external snapshot import RPCs on gRPC port 9080 with no authentication. An unauthenticated client can open StreamExtSnapshot, and the receiver calls Prepare() first, which deletes and replaces the existing store. #dev", "creation_timestamp": "2026-08-20T17:50:42.557465Z"}, {"uuid": "134ce8a7-0bad-4c77-9ed3-1daf5302c0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54061", "type": "published-proof-of-concept", "source": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-rrwh-6jrq-wp5v", "content": "", "creation_timestamp": "2026-08-20T18:35:03.977778Z"}, {"uuid": "b2f47a43-9626-49f0-8ac3-6d00fc9abf2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54061", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq5cjezgt22z", "content": "CVE-2026-54061 - dgraph\nDgraph Alpha, a database used for GraphQL, had a security issue that allowed anyone on the network to delete and replace its data without permission. This has been fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dgraph #dgraphio #CVE #infosec", "creation_timestamp": "2026-07-08T14:14:05.043770Z"}]}