{"vulnerability": "CVE-2026-7142", "sightings": [{"uuid": "73a3b282-9380-4fda-a8fb-8cbf9ab27db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnkrosajy2f", "content": "CVE-2026-71428\nVersions of the Unstructured open\u2011source library from 0.4.7 up to 0.24.0 let the program download any web address you give it without checking where it points. An attacker who can supply a URL could cause your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T05:40:04.526313Z"}, {"uuid": "9ba4c290-1940-456f-9a91-2fc3f9cac636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjptu74su2e", "content": "CVE-2026-71428 - unstructured\nVersions of the Unstructured library from 0.4.7 up to 0.23.x fetch any web address given to certain functions without checking where it points. An attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unstructured #unstructuredio #CVE #infosec", "creation_timestamp": "2026-08-20T17:00:07.087297Z"}, {"uuid": "fe01c103-b1d2-44e6-aca8-8996f25e70f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcsm7ra6a22", "content": "\ud83d\udd34 CVE-2026-71424 - Critical (9.6)\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/serve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71424/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T23:00:54.272093Z"}, {"uuid": "3c747ee0-61e5-4518-b132-efb5db4e7292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gfy45mtzysrmc", "content": "CVE-2026-71424 - Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers\nCVE ID : CVE-2026-71424\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's G...", "creation_timestamp": "2026-08-17T23:41:50.397902Z"}, {"uuid": "b4998700-ca8b-4ad0-bd0d-f974456fd6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71428", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtavyjyv27", "content": "\ud83d\udd34 CVE-2026-71428 - Critical (9.3)\n\nThe unstructured library provides open-source components for ingesting and pre-processing images ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71428/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T18:01:07.084922Z"}, {"uuid": "4f10f3d9-a768-4290-82cb-7f3bf385be5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcvw3oz5b2p", "content": "CVE-2026-71424 - onyx\nOnyx's API endpoints, used for managing servers, exposed another user's login credentials to anyone with certain access permissions. This issue has been fixed in versions 3.1.10, 3.2.14, and 4.0.0\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#onyx #CVE #infosec", "creation_timestamp": "2026-08-18T00:00:07.899120Z"}, {"uuid": "5c521c51-a6b6-4cd8-bb93-96c59f8b9ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71428", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjtortcdv2m", "content": "\ud83d\udea8 CVE-2026-71428 \u2014 CVSS 9.3 CRITICAL\n\nThe unstructured library provides open-source components for ingesting and pre-processing images and text d...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71428\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T18:08:51.355694Z"}, {"uuid": "0aa9f15c-2d98-433a-9830-c5481d862793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcweh45yo2e", "content": "\ud83d\udea8 CVE-2026-71424 \u2014 CVSS 9.6 CRITICAL\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71424\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T00:08:07.777070Z"}, {"uuid": "6949dfd0-9906-44d9-928c-c02a7b442736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71428", "type": "published-proof-of-concept", "source": "https://github.com/Unstructured-IO/unstructured/security/advisories/GHSA-4mvj-m6j5-pmf7", "content": "", "creation_timestamp": "2026-09-03T18:35:08.863941Z"}, {"uuid": "c3ec2ad7-e84b-489c-8a9c-1643ae6b3a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71429", "type": "published-proof-of-concept", "source": "https://github.com/uhop/stream-json/security/advisories/GHSA-528h-pc64-c93x", "content": "", "creation_timestamp": "2026-09-03T22:35:16.367245Z"}]}