{"vulnerability": "CVE-2026-6531", "sightings": [{"uuid": "ca54ed6c-f037-406f-9ad6-b7985f578dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7a4bpwbxcymga", "content": "CVE-2026-65310 - Missing authentication and permissive CORS policy\nCVE ID : CVE-2026-65310\n \n Published : July 31, 2026, 9:16 a.m. | 29\u00a0minutes ago\n \n Description : ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration\nof affected versions, exposes its data and...", "creation_timestamp": "2026-07-31T09:54:19.997201Z"}, {"uuid": "0e630b95-3c00-4ec3-b1d3-d3e7c8563dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dabbdkvhdeq2o", "content": "CVE-2026-65311 - Missing authentication for logging-configuration endpoint\nCVE ID : CVE-2026-65311\n \n Published : July 31, 2026, 9:16 a.m. | 29\u00a0minutes ago\n \n Description : The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA)\nin affected versions exposes an und...", "creation_timestamp": "2026-07-31T10:00:19.611122Z"}, {"uuid": "bb9ab95e-eb17-4b88-b809-056794333eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65313", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4qkw6nkrnga2r", "content": "CVE-2026-65313 - Use of hard-coded VNC credentials in the engineering-workstation provisioning\nCVE ID : CVE-2026-65313\n \n Published : July 31, 2026, 9:16 a.m. | 29\u00a0minutes ago\n \n Description : A provisioning script used when installing HIPASE-250 (formerly 250\nSCALA) engineeri...", "creation_timestamp": "2026-07-31T10:06:19.407519Z"}, {"uuid": "62f4cbaa-75fa-4961-83fb-004a9f559f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65313", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrx4jayjxi2a", "content": "\ud83d\udfe0 CVE-2026-65313 - High (8.1)\n\nA provisioning script used when installing HIPASE-250 (formerly 250\nSCALA) engineering workstatio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65313/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-31T14:01:12.231894Z"}, {"uuid": "26e3a5d0-7e6d-4480-9f8c-f324701c1814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65310", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrx6em7wg22g", "content": "\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u306e\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u306f\u3001\u30e9\u30a4\u30d6\u30d7\u30ed\u30bb\u30b9\u60c5\u5831\u3092\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u3067\u3059\u3002\nCVE-2026-65310 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-31T14:34:32.228317Z"}, {"uuid": "7a2706a8-fbef-4e4c-9799-378828badb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65313", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrx6fyxy2t2m", "content": "\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u77e5\u308b\u8fd1\u96a3\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u653b\u6483\u8005\u306f\u3001VNC\u30a2\u30af\u30bb\u30b9\u306b\u3088\u308a\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30ef\u30fc\u30af\u30b9\u30c6\u30fc\u30b7\u30e7\u30f3\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-65313 CVSS 8.1 | HIGH", "creation_timestamp": "2026-07-31T14:35:13.333464Z"}, {"uuid": "cb47bd18-2303-4f6b-b10a-e3ccc18cbf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65315", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vyq5ehk2f", "content": "\ud83d\udfe0 CVE-2026-65315 - High (7.5)\n\nOllama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metada...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65315/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T23:00:32.769767Z"}, {"uuid": "280a2b74-d0d9-4609-abce-35e2d54d80c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vywsrey23", "content": "\ud83d\udfe0 CVE-2026-65317 - High (8.6)\n\nVerba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65317/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T23:00:39.829320Z"}, {"uuid": "3a1527f4-1007-4d65-b4d3-826d527af38f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65318", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vz5h4fx2w", "content": "\ud83d\udfe0 CVE-2026-65318 - High (8.6)\n\nVerba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulne...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65318/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T23:00:46.724308Z"}, {"uuid": "864cd2ff-2fa9-44cb-bb47-ca19a19e3f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7bgwhw5z2o", "content": "CVE-2026-65317 - Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass\nCVE ID : CVE-2026-65317\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Verba RAG application version 2.1.3 contains a server...", "creation_timestamp": "2026-07-22T02:25:20.044197Z"}, {"uuid": "ec09162a-0dbb-4d49-9213-5ca9c905c075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7bpv536j2o", "content": "CVE-2026-65318 - Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader\nCVE ID : CVE-2026-65318\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Verba RAG application version 2.1.3 contains an...", "creation_timestamp": "2026-07-22T02:30:20.686536Z"}, {"uuid": "f8ecd75a-11c0-429a-b18a-47ff91cc40c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65319", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr7u72hds52f", "content": "\ud83d\udfe0 CVE-2026-65319 - High (7.5)\n\nFeedbin (commit 739884a) contains an unauthenticated information disclosure vulnerability that al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65319/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-22T08:00:57.571439Z"}, {"uuid": "626a9895-e050-467e-be87-fbfc0b139441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrd3ubuonu2e", "content": "CVE-2026-65317 - verba\nA weakness in Verba RAG application version 2.1.3 allows hackers to trick the server into making unauthorized requests to any website. This could potentially be used to steal sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#verba #weaviate #CVE #infosec", "creation_timestamp": "2026-07-23T14:56:04.620745Z"}]}