{"vulnerability": "CVE-2026-7708", "sightings": [{"uuid": "4f13dee2-1587-4f74-b2ac-787dad1eddf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7708", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkyh77suye2k", "content": "CVE-2026-7708 - Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service\nCVE ID : CVE-2026-7708\n \n Published : May 3, 2026, 11:16 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : A vulnerability was determined in Open5GS up to 2.7.7. The affected element is the func...", "creation_timestamp": "2026-05-04T00:48:35.944239Z"}, {"uuid": "6729674e-cb34-4c36-a887-7d7fcbd97edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77086", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmn5zpi5e2b", "content": "CVE-2026-77086 - siyuan\nThe SiYuan note\u2011taking app, versions prior to 3.7.4, does not check the package name you give when installing or removing add\u2011ons. An administrator who can access the app could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-21T20:50:06.361233Z"}, {"uuid": "7de7f3cd-4884-4e7e-b979-5ff909477439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77080", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnjnvn6ih2p", "content": "CVE-2026-77080\nVersions of n8n before the latest releases let a user who can log in and has Snowflake credentials read any file on the server or replace it with their own. This could expose sensitive data or allow unwanted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T05:20:03.973734Z"}, {"uuid": "44b58fd3-d768-4db0-b39a-9082bc290999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77084", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnk7rn3b42p", "content": "CVE-2026-77084\nIf you use n8n versions older than 1.123.69 (or older 2.x releases before 2.33.4/2.34.1), a specially crafted value in a Git repository's configuration can be executed by the automation tool. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T05:30:03.794866Z"}, {"uuid": "50cee068-07f8-4f88-b4f1-411cf5e81bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmtcp7bps2j", "content": "CVE-2026-77087 - paperclip\nThe Paperclip library in versions before 0.3.1 does not verify the web request\u2019s host name when it runs in its default \u2018local trusted\u2019 setting. This lets a malicious web page\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#paperclip #paperclipai #CVE #infosec", "creation_timestamp": "2026-08-21T22:40:06.026608Z"}, {"uuid": "aa3e5865-dac8-4c0c-adbe-9ec2b8aed645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnoou4nyc24", "content": "CVE-2026-77087\nIf you run Paperclip versions earlier than 0.3.1 on a local machine, it does not check the web address it receives. This lets a malicious web page cause the program to run commands you did not intend,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:50:04.924657Z"}, {"uuid": "c36182b4-19b0-43ef-9df7-d6d523cd13e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77086", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtlpwyfnmd2c", "content": "\ud83d\udea8 CVE-2026-77086 \u2014 CVSS 9.4 CRITICAL\n\nSiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints,...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77086\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T12:07:11.246528Z"}, {"uuid": "07acc8c1-689a-4f71-88c7-47df65f827bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtm4yhm7ea26", "content": "\ud83d\udd34 CVE-2026-77087 - Critical (9.6)\n\nPaperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing att...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77087/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T16:00:41.351209Z"}, {"uuid": "c2e997b0-063e-4029-80f9-38f37617991c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5ij7ehq2e", "content": "\ud83d\udea8 CVE-2026-77087 \u2014 CVSS 9.4 CRITICAL\n\nPaperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77087\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:09:37.875756Z"}, {"uuid": "ed2a3840-aacb-4e27-b45e-522e803b66a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eo3udgc5hduu4", "content": "CVE-2026-77087 - Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding\nCVE ID : CVE-2026-77087\n \n Published : Aug. 21, 2026, 3:16 p.m. | 40\u00a0minutes ago\n \n Description : Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attac...", "creation_timestamp": "2026-08-21T16:23:35.333627Z"}, {"uuid": "31442e25-fc1b-47f5-8668-6f06a919f2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtmanhhbvm2o", "content": "CVE-2026-77087 - Critical RCE in Paperclip <0.3.1 via DNS rebinding. Host header validation flaw allows authenticated API abuse. CVSS 9.6. No patch yet - update when available. #CVE #infosec #Paperclip\n\nhttps://www.valtersit.com/cve/CVE-2026-77087/", "creation_timestamp": "2026-08-21T17:06:05.314842Z"}, {"uuid": "7fe926f0-8a3f-4cc5-ae1f-63ff3ce58938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117134587680465778", "content": "CVE-2026-77087 - Critical RCE in Paperclip <0.3.1 via DNS rebinding. Host header validation flaw allows authenticated API abuse. CVSS 9.6. No patch yet - update when available. #CVE #infosec #Paperclip\nhttps://www.valtersit.com/cve/CVE-2026-77087/", "creation_timestamp": "2026-08-21T17:06:36.765349Z"}, {"uuid": "4a5c68fa-055e-4ca4-af9e-00faf72b5b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77086", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq7rrwmcc26", "content": "\ud83d\udd34 CVE-2026-77086 - Critical (9.1)\n\nSiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77086/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T07:01:16.346247Z"}, {"uuid": "3fa2e88c-03cf-4420-97b7-fae643896ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77089", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muz736psn52b", "content": "\ud83d\udea8 CVE-2026-77089 \u2014 CVSS 9.3 CRITICAL\n\nCommand Center API contained an authentication bypass issue affecting privilege management. Software custom...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77089\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T14:07:46.404998Z"}, {"uuid": "279a4b31-12e7-4624-b924-e35305218493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77089", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3nykwvuw2g", "content": "CVE-2026-77089 - commvault cloud\nThe Command Center API could be accessed without proper authentication, allowing unauthorized users to change privilege settings. This could let attackers gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#commvaultcloud #commvault #CVE #infosec", "creation_timestamp": "2026-09-09T13:40:04.410894Z"}, {"uuid": "2f839051-10d5-4ab3-8a20-a2589d6a8273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77089", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvcefqlhkp2k", "content": "\ud83d\udccc CVE-2026-77089 - Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release... https://www.cyberhub.blog/cves/CVE-2026-77089", "creation_timestamp": "2026-09-12T05:37:07.062850Z"}]}