{"vulnerability": "CVE-2026-63766", "sightings": [{"uuid": "1a0d263f-614f-4209-be4f-ef0456e84973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr464y2n462a", "content": "CVE-2026-63766\nGPT-SoVITS, a text-to-image model, is at risk if attackers can inject malicious commands through its web interface. This could allow unauthorized access to the system and potentially lead to data theft or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T20:48:05.721192Z"}, {"uuid": "226bcf99-e62c-4c7e-ad2f-e4f7b58da7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63766", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4cbkj3xu2w", "content": "\ud83d\udd34 CVE-2026-63766 - Critical (9.8)\n\nGPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63766/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T22:02:14.020434Z"}, {"uuid": "dbae65ab-0067-46c9-81e4-df37b2727efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63766", "type": "seen", "source": "https://t.me/GithubRedTeam/94809", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-63766_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 11:28:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T13:00:04.607009Z"}, {"uuid": "a098db94-54ea-4313-aca9-243a1cb9dd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63766", "type": "seen", "source": "Telegram/vvX3qHEz-OxKgnBCQLxVzIYR76LH85lkxYOWve4NS9I7tCI", "content": "", "creation_timestamp": "2026-07-23T17:00:03.956037Z"}, {"uuid": "7e7119bd-82c1-4ff4-91fa-e154f4b02c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63766", "type": "published-proof-of-concept", "source": "Telegram/vvX3qHEz-OxKgnBCQLxVzIYR76LH85lkxYOWve4NS9I7tCI", "content": "", "creation_timestamp": "2026-07-24T00:00:08.069642Z"}, {"uuid": "c51c251f-a242-4092-8af0-097e81d1b0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63766", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94809", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-63766_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 11:28:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:08.307893Z"}]}