{"vulnerability": "CVE-2026-62247", "sightings": [{"uuid": "44070e32-08a5-4b7c-8aa0-41abbbca5239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62247", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117403332520675733", "content": "CVE-2026-62247 Supabase Realtime: broken RLS lets clients with presence.write but denied presence.read still receive other members' presence metadata via presence_diff. CVSS 6.5. Patch under review, not yet released - restrict https://www.valtersit.com/cve/CVE-2026-62247/ #CVE #infosec #Supabase", "creation_timestamp": "2026-10-08T04:11:27.201075Z"}]}