{"vulnerability": "CVE-2026-7147", "sightings": [{"uuid": "8629cb4a-f072-42be-bee2-c15885f57892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71470", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiva47e62o", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 9.1) CVE-2026-71470:  \u2014 severity important \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-71470.json #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-20T14:55:36.910420Z"}, {"uuid": "7671fb44-9c1b-4960-a352-85c672f2862c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71470", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthddu745w23", "content": "\ud83d\udea8 CVE-2026-71470 \u2014 CVSS 9.1 CRITICAL\n\nA flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Cus...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71470\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:11:05.430198Z"}, {"uuid": "82056095-92de-400b-86b8-cb556ba814d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71471", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msw74fye5a25", "content": "CVE-2026-71471 - red hat advanced cluster management for kubernetes 2\nAn attacker with administrative access to the hub cluster can deploy malicious code on all connected clusters. This allows them to execute commands\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-12T22:40:05.469723Z"}, {"uuid": "628e0592-e762-4154-8963-ae528fe55c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71473", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cynmbvs3pdn47", "content": "CVE-2026-71473 - Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spoke\nCVE ID : CVE-2026-71473\n \n Published : Aug. 12, 2026, 9:40 p.m. | 49\u00a0minutes ago\n \n Description : A flaw was found in the `searc...", "creation_timestamp": "2026-08-12T22:50:21.745044Z"}, {"uuid": "be52d41a-4303-4ea3-8ead-f3577220001f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71471", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ci3d3xyjswnie", "content": "CVE-2026-71471 - Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image\nCVE ID : CVE-2026-71471\n \n Published : Aug. 12, 2026, 9:40 p.m. | 49\u00a0minutes ago\n \n Description : A flaw was found in acm-sear...", "creation_timestamp": "2026-08-12T22:56:22.004509Z"}, {"uuid": "89aa10eb-d55e-48d2-8835-2025a06e46fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71473", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mswabdewzc27", "content": "\ud83d\udfe0 CVE-2026-71473 - High (8.5)\n\nA flaw was found in the `search-v2-operator` component. A user with specific administrative permi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71473/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T23:00:44.498578Z"}, {"uuid": "269b5046-bddc-4e50-b836-696acabeb6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71471", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117086317755221681", "content": "CVE-2026-71471 (CRITICAL): acm-search-v2-rhel9 lets hub admins with Search CR patch rights deploy arbitrary containers fleet-wide. RCE & data access at risk. Restrict Search CR patch access now. Full details: https://radar.offseq.com/threat/a-flaw-was-found-in-acm-search-v2-rhel9-cve-2026-71471-abe3108354cb7e94 #OffSeq #Kubernetes #RedHat #Infosec", "creation_timestamp": "2026-08-13T04:30:25.832883Z"}, {"uuid": "1516965d-bb7d-4b69-9048-0a4401bc72bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71471", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mswsovntyn2y", "content": "CRITICAL: acm-search-v2-rhel9 flaw allows admins with patch access to Search CR to push arbitrary containers to all managed clusters. Restrict Search CR patch access immediately. https://radar.offseq.com/threat/a-flaw-was-found-in-acm-search-v2-rhel9-cve-2026-71471-abe3108354cb7e94 #OffSeq #Kuber...", "creation_timestamp": "2026-08-13T04:30:27.587623Z"}, {"uuid": "c9fa7913-fdf5-4b08-9cc6-a3097fdcff82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71471", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msx6h6h5wd2t", "content": "\ud83d\udd34 CVE-2026-71471 - Critical (9)\n\nA flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71471/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-13T08:00:53.178935Z"}, {"uuid": "2a307941-b7c0-4306-81a9-e93fc714c73c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71479", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcc7qclzl23", "content": "\ud83d\udea8 CVE-2026-71479 \u2014 CVSS 9.1 CRITICAL\n\nNew API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Pr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71479\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T18:07:34.697079Z"}, {"uuid": "6e703d45-8df8-4cf2-bac5-5fa78244a5d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71479", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcj2rcalx2t", "content": "CVE-2026-71479 - new-api\nThe New API's billing system has a flaw that can cause users to receive unearned credits. This can happen when a large value is used in a calculation, resulting in a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#newapi #quantumnous #Golang #CVE #infosec", "creation_timestamp": "2026-08-17T20:10:08.226642Z"}, {"uuid": "0a7f3eef-8e89-4038-bcf1-a79c26b2e989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71472", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3vq4hm5uzq7xs", "content": "CVE-2026-71472 - Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem\nCVE ID : CVE-2026-71472\n \n Published : Aug. 17, 2026, 7:28 p.m. | 44\u00a0minutes ago\n \n Description : A flaw was found in acm-search-v2-rhel9. ...", "creation_timestamp": "2026-08-17T20:50:42.438672Z"}, {"uuid": "0c4f3673-083b-4560-8f46-cf2eae63be84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71472", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtclvqo5pb2b", "content": "\ud83d\udd34 CVE-2026-71472 - Critical (9.1)\n\nA flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, suc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71472/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T21:00:57.803850Z"}, {"uuid": "0e510640-ce85-4114-ae84-db03ecd133b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71472", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcpnnhxxl2u", "content": "\ud83d\udea8 CVE-2026-71472 \u2014 CVSS 9.1 CRITICAL\n\nA flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71472\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T22:08:00.298208Z"}, {"uuid": "23e395cc-b03c-4db6-af28-7d6e0d2bf89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71472", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcve5zetv2u", "content": "CVE-2026-71472 - red hat advanced cluster management for kubernetes 2\nAn authenticated attacker can inject malicious code into the ACM Search V2 system on RHEL 9, potentially taking control of the system. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-17T23:50:05.024411Z"}, {"uuid": "ab8d71ef-d64d-4872-b406-5e560a4ddea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71479", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtd5zn4uzt2u", "content": "CVE-2026-71479, an integer overflow in New API billing, is exploited in the wild to inflate user account balances.\n\n#CVE202671479 #IntegerOverflow #NewAPI #ExploitedInTheWild #AIGateway #BillingFraud", "creation_timestamp": "2026-08-18T02:25:15.566595Z"}, {"uuid": "cf253318-c63a-43d4-a91a-395c2507834e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71472", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtd6g5n4552c", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 9.1) CVE-2026-71472:  \u2014 severity important \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-71472.json #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-18T02:32:16.134560Z"}, {"uuid": "e0883f07-d12f-4820-976b-3067c2eff5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71470", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthswpyt6z2y", "content": "CVE-2026-71470 - red hat advanced cluster management for kubernetes 2\nA security issue affects the Search Operator on Red Hat RHEL 9. A privileged user can exploit this to gain elevated access and potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-19T22:50:06.016013Z"}, {"uuid": "8e113bdb-a5d1-46fa-a222-7db60afbc789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71476", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgwbqkenv23", "content": "CVE-2026-71476 - nx\nA self-hosted cache server in Nx can write files to arbitrary locations on the machine, potentially leading to remote code execution. Only workspaces using a self-hosted remote cache are affected.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nx #npm #CVE #infosec", "creation_timestamp": "2026-08-06T20:52:04.489054Z"}, {"uuid": "676e8334-aadc-4383-97fc-465a4c75738d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71478", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3msi5cloptd2l", "content": "A flaw in league/commonmark (the popular PHP Markdown library) lets planted text run scripts in your users' browsers.\n\nIt slips past allow_unsafe_links=false, the 'safe mode' for untrusted Markdown.\n\nAffects 1.5.0-2.8.3 with the Attributes extension. Fix: 2.9.0. CVE-2026-71478", "creation_timestamp": "2026-08-07T08:30:29.254955Z"}]}