{"vulnerability": "CVE-2026-65637", "sightings": [{"uuid": "5899ffe8-c5a2-4c8a-8015-22c06854c3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65637", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydl6w76z2k", "content": "\ud83d\udd17 CVE : CVE-2026-32990, CVE-2026-65182, CVE-2026-65183, CVE-2026-65637, CVE-2026-65905, CVE-2026-65927, CVE-2026-66299, CVE-2026-66422, CVE-2026-68525, CVE-2026-68569, CVE-2026-68763, CVE-2026-73180", "creation_timestamp": "2026-08-26T12:30:27.438169Z"}, {"uuid": "0a43c491-39d5-45fa-ba2d-176d3badc6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65637", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu37qzb5tq24", "content": "CVE-2026-65637 - tomcat\nCertain 9.x, 10.x, and 11.x versions of Apache Tomcat have an incomplete fix that can let an attacker bypass the check that confirms the server is talking to the correct website. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tomcat #apache #CVE #infosec", "creation_timestamp": "2026-08-27T16:00:08.511449Z"}, {"uuid": "3ba5daf4-3074-4a97-9242-e6c0caeabe7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65637", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4q2jod4or3iqp", "content": "CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete", "creation_timestamp": "2026-08-26T00:54:06.956824Z"}]}